Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa
File:                     3137372e3232312e33322e302f32302d3234203d3e203532393635.roa (raw, json)
Hash identifier:          yej56hk3qw4nfvx1vRLitbznBrU0Dm8jyHxFnkZdsv0=
Subject key identifier:   3F:A8:A6:9A:DA:60:DA:38:5E:9E:39:6A:9E:82:C3:0B:1E:78:36:EB
Certificate issuer:       /CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
Certificate serial:       414B383D6D97E90E910F6BB99686A5B172B28C6B
Authority key identifier: 31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa
Signing time:             Thu 24 Apr 2025 12:35:41 +0000
ROA not before:           Thu 24 Apr 2025 12:30:41 +0000
ROA not after:            Thu 23 Apr 2026 12:35:41 +0000
asID:                     52965
IP address blocks:        177.221.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4b:38:3d:6d:97:e9:0e:91:0f:6b:b9:96:86:a5:b1:72:b2:8c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
        Validity
            Not Before: Apr 24 12:30:41 2025 GMT
            Not After : Apr 23 12:35:41 2026 GMT
        Subject: CN=3FA8A69ADA60DA385E9E396A9E82C30B1E7836EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:e6:df:b1:9f:d1:21:ea:2d:29:bb:e0:8e:
                    41:0d:bb:41:1a:a1:9e:d7:99:c2:cf:2f:4e:c5:fe:
                    92:88:9e:c3:bf:ec:fd:b3:82:2c:0a:9f:c4:f7:54:
                    1d:7b:4f:e7:7d:d5:f6:5f:4c:7b:fb:72:36:fb:96:
                    ac:46:f1:4c:80:11:a2:65:ce:b3:76:d2:74:36:65:
                    49:d6:1f:89:8c:62:fc:2c:6c:ae:f8:7f:68:f7:c5:
                    c7:63:ca:26:86:76:69:ea:e0:31:af:5a:a6:d5:39:
                    b5:e2:f8:db:f0:6f:4a:27:11:42:f7:3c:07:f3:a4:
                    f9:0d:58:8a:e0:66:63:f8:49:9f:72:20:4c:fd:8a:
                    82:3e:b4:38:eb:51:09:e6:dc:43:18:c4:83:41:45:
                    65:41:4e:e6:9b:f9:4e:3c:49:0e:55:ea:67:96:9d:
                    c5:7f:ef:80:f6:e8:30:46:c2:69:8f:c3:b9:6c:16:
                    e8:21:eb:ed:3b:34:75:2d:33:7a:bc:10:71:cc:ed:
                    fa:3c:0c:4b:38:73:a5:a6:52:71:8e:b3:03:c6:1c:
                    15:84:f4:37:c7:c4:6b:2b:37:3d:cc:06:a9:e4:f9:
                    3b:cb:cf:1b:9a:ef:4d:58:26:1d:3c:36:5e:21:e5:
                    5a:cd:34:90:66:52:2c:e1:71:e3:c1:84:dd:f4:2c:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A8:A6:9A:DA:60:DA:38:5E:9E:39:6A:9E:82:C3:0B:1E:78:36:EB
            X509v3 Authority Key Identifier:
                keyid:31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:3a:20:2d:16:ae:d6:e5:73:8a:0a:16:5f:42:b4:c8:22:8c:
         72:fd:ff:92:ab:ef:73:c4:c0:0a:d5:a3:a4:b8:1c:97:09:28:
         0a:98:cf:0b:e2:48:36:92:f9:2f:86:1b:be:6b:fd:3c:3b:6f:
         ec:2b:08:ac:a1:44:50:bd:0f:9f:6f:03:f4:62:b0:a8:89:10:
         b6:8a:62:8b:e6:58:c9:2b:0b:1d:a2:5f:b6:7f:18:71:f6:df:
         6b:94:45:24:8b:ec:5f:07:a8:58:13:d2:3c:01:dd:2b:0c:c7:
         66:c4:6a:c5:22:1e:24:56:91:46:0b:f7:9b:51:02:e7:ce:24:
         6a:42:54:93:22:ce:cd:a1:33:38:86:c7:f0:b1:50:33:12:ad:
         43:fb:e0:3a:21:79:25:33:a9:85:e9:e3:b7:1d:22:02:0c:bd:
         b1:ec:f6:e0:63:4c:b5:ce:09:6e:2d:6e:d0:95:80:d0:f5:30:
         44:fa:01:5b:42:10:36:4a:be:a6:40:a1:f6:a2:d8:86:1b:f1:
         8f:ff:31:75:aa:1d:34:1a:3c:8e:13:0d:95:9c:25:5b:11:29:
         27:37:3b:e5:7b:c2:a7:dc:78:83:3f:1d:de:2f:27:d4:39:18:
         52:6e:53:a3:c0:12:67:a0:f3:27:7b:fd:1d:94:de:bd:63:6e:
         36:ed:91:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:42 2025 by rpki-client on console.sobornost.net