Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e33362e302e302f32302d3234203d3e203532393635.roa
File:                     3137372e33362e302e302f32302d3234203d3e203532393635.roa (raw, json)
Hash identifier:          bmdz8to7x6XOBogCnS9FpsSgJFrAv1nxcEulY4hr29o=
Subject key identifier:   3C:70:78:34:98:BD:2C:65:19:AF:7B:AB:DB:BC:19:CC:3E:19:9E:E3
Certificate issuer:       /CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
Certificate serial:       41750352C2F382A8392B467B42CC0F3365F855BC
Authority key identifier: 31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e33362e302e302f32302d3234203d3e203532393635.roa
Signing time:             Thu 24 Apr 2025 12:35:17 +0000
ROA not before:           Thu 24 Apr 2025 12:30:17 +0000
ROA not after:            Thu 23 Apr 2026 12:35:17 +0000
asID:                     52965
IP address blocks:        177.36.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:75:03:52:c2:f3:82:a8:39:2b:46:7b:42:cc:0f:33:65:f8:55:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
        Validity
            Not Before: Apr 24 12:30:17 2025 GMT
            Not After : Apr 23 12:35:17 2026 GMT
        Subject: CN=3C70783498BD2C6519AF7BABDBBC19CC3E199EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:59:03:f8:08:af:fe:cd:82:33:5d:51:1b:
                    71:12:90:09:01:ab:c8:30:84:68:6c:37:f5:a2:d0:
                    d0:cb:4a:29:14:d1:9b:ab:ad:32:bb:65:81:32:ce:
                    ae:ac:ea:5a:12:8a:c3:10:8c:37:05:26:b2:5e:ee:
                    0e:88:d2:6a:aa:0e:4c:a1:c2:58:92:df:71:53:7b:
                    c3:73:a2:08:96:c5:90:a3:09:50:d7:5b:3a:69:d6:
                    8d:87:88:85:16:ba:94:bc:60:05:86:5a:4e:bc:f6:
                    73:70:ec:de:2f:40:d4:d7:bd:0f:7a:64:88:8f:a7:
                    13:6c:e1:a6:71:69:42:58:33:cb:16:bc:8f:9c:15:
                    42:dd:a8:e1:3e:4f:f3:f8:1a:fb:52:ce:09:b8:76:
                    4a:e5:f0:88:25:23:42:12:f9:27:c0:1e:2c:09:a5:
                    78:65:44:d7:5e:96:f8:b2:6e:4e:1e:04:5d:0d:27:
                    f2:17:48:82:38:cb:e4:0c:e0:04:6c:b3:4d:84:95:
                    60:fc:5f:90:b4:8a:15:90:14:39:d9:4f:66:b1:32:
                    3a:21:0f:be:f5:47:7e:a4:43:6f:a0:f6:36:ac:5f:
                    22:fd:7b:80:ca:13:3c:f1:af:f0:34:8d:68:60:9f:
                    0a:d7:26:1d:32:83:87:9f:1c:fa:4c:89:c0:97:2c:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:70:78:34:98:BD:2C:65:19:AF:7B:AB:DB:BC:19:CC:3E:19:9E:E3
            X509v3 Authority Key Identifier:
                keyid:31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e33362e302e302f32302d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ce:db:19:ca:e1:54:81:11:3d:c2:10:fd:28:df:88:de:0a:e7:
         f8:56:60:c2:c8:1a:23:d1:56:f4:a7:c1:e4:c2:2e:87:e5:a4:
         bb:5b:f6:31:bc:f2:50:c2:16:dd:0f:e6:92:08:17:69:f5:cd:
         e1:b2:a1:be:d0:b9:ca:ac:f7:ae:ee:82:a7:7f:26:0c:12:5f:
         fd:8d:ac:90:b4:7a:34:42:b3:a0:f2:7c:12:82:f4:59:e0:4c:
         68:12:80:43:22:a7:ab:16:8f:7e:7f:2f:83:6d:f7:55:f7:77:
         32:7b:ab:69:c7:ec:ed:cf:40:e6:44:ba:2d:a8:44:8e:e2:3b:
         38:d6:ae:f7:ac:df:1f:c7:8f:06:c7:5e:1e:d5:da:97:0d:d7:
         a6:02:33:a3:e3:8e:2a:66:81:ab:d7:14:08:73:de:14:b7:93:
         10:83:d4:60:e7:92:5f:bf:c1:27:db:b3:df:06:1e:22:88:33:
         53:84:67:a2:59:27:d8:3b:b8:21:7d:f3:47:97:0b:4d:e3:fa:
         d0:8b:1a:2a:7d:d4:9b:54:dc:f6:26:5f:f9:d9:4b:43:b7:21:
         bc:02:1c:31:d2:a8:54:17:c2:4b:8a:0d:a5:b2:9b:32:f8:92:
         c4:a1:06:fe:d2:c7:f3:79:3d:a3:84:3e:98:42:8a:47:3d:be:
         7c:1f:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:42 2025 by rpki-client on console.sobornost.net