Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/3137372e37342e3130382e302f32322d3234203d3e20323730393730.roa
File:                     3137372e37342e3130382e302f32322d3234203d3e20323730393730.roa (raw, json)
Hash identifier:          rr7Ebl69q4yAitxpR2yvOtOZOqpbSjVWbpedm5KTDkE=
Subject key identifier:   95:28:9C:87:46:1F:AE:9C:48:64:31:A5:DC:F1:9F:F7:6A:21:B7:7B
Certificate issuer:       /CN=2E5712C9CCD0E705FECAA05DA82ADF1C847CA831
Certificate serial:       1ABB4EB79FC1A462960C4B693DF26BA0DBF32EE9
Authority key identifier: 2E:57:12:C9:CC:D0:E7:05:FE:CA:A0:5D:A8:2A:DF:1C:84:7C:A8:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/3137372e37342e3130382e302f32322d3234203d3e20323730393730.roa
Signing time:             Thu 06 Mar 2025 10:07:44 +0000
ROA not before:           Thu 06 Mar 2025 10:02:44 +0000
ROA not after:            Thu 05 Mar 2026 10:07:44 +0000
asID:                     270970
IP address blocks:        177.74.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.crl
                          rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bb:4e:b7:9f:c1:a4:62:96:0c:4b:69:3d:f2:6b:a0:db:f3:2e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E5712C9CCD0E705FECAA05DA82ADF1C847CA831
        Validity
            Not Before: Mar  6 10:02:44 2025 GMT
            Not After : Mar  5 10:07:44 2026 GMT
        Subject: CN=95289C87461FAE9C486431A5DCF19FF76A21B77B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:97:36:f3:a5:f9:00:da:b6:c6:91:0f:63:
                    5e:b4:8d:bb:89:a6:c9:18:f1:95:5a:d5:b6:19:ad:
                    27:8f:59:fc:2b:53:7a:e7:ec:c6:3c:12:cc:e2:7f:
                    a5:09:1c:a2:0e:07:ca:a8:50:53:4d:cf:c1:60:32:
                    e6:cd:a5:fe:f3:25:eb:d9:4d:03:c2:09:c9:d2:cf:
                    52:9f:73:35:b5:bd:02:87:da:00:cf:67:60:73:b1:
                    29:95:86:67:63:21:07:c1:d2:20:25:27:56:11:aa:
                    61:8d:15:6d:23:3f:0e:7e:f0:19:fd:fe:fe:df:dc:
                    15:25:18:c3:1b:c0:d6:ae:e2:b6:b7:3f:01:ed:53:
                    90:3a:b4:76:88:c0:66:02:a2:17:fb:d5:3b:41:0e:
                    a5:e5:7d:c4:81:45:60:77:64:12:3a:de:df:68:ca:
                    77:51:69:71:49:28:f8:7c:1b:93:fd:da:d1:d2:9a:
                    06:ae:38:40:83:ad:7e:42:8a:31:f6:d8:9a:55:ff:
                    a8:b9:31:80:4c:25:0c:2c:01:8c:b5:36:00:d9:94:
                    61:9a:2e:16:f0:7d:50:e4:9b:f0:91:9d:04:48:dd:
                    45:89:35:26:19:54:f4:62:77:37:c2:bd:bd:42:e2:
                    28:8c:23:b8:86:37:96:d6:bb:2d:b4:8e:11:02:32:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:28:9C:87:46:1F:AE:9C:48:64:31:A5:DC:F1:9F:F7:6A:21:B7:7B
            X509v3 Authority Key Identifier:
                keyid:2E:57:12:C9:CC:D0:E7:05:FE:CA:A0:5D:A8:2A:DF:1C:84:7C:A8:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/3137372e37342e3130382e302f32322d3234203d3e20323730393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:d2:b2:c7:3f:68:4e:46:02:d3:ef:61:1d:a2:dd:77:79:b7:
         af:08:a6:45:0a:9d:f0:56:22:24:50:10:97:94:2c:d6:15:21:
         9a:4c:0a:89:e5:92:08:57:0c:98:86:73:1e:d8:46:76:25:90:
         db:7d:c6:86:02:bb:b9:02:02:19:92:c8:93:12:97:6f:d5:e5:
         32:3a:d5:3d:23:68:52:fc:59:6d:72:63:ea:73:9c:24:33:db:
         9f:33:87:73:8d:03:11:ca:cf:9d:2c:04:7d:a7:4b:43:60:ec:
         4f:1a:7e:51:02:6d:3a:6f:07:21:9e:dd:ed:0d:ca:1b:f7:b8:
         f5:f6:7c:db:3a:aa:f0:38:7e:b3:4b:61:8a:d1:4a:7d:91:ee:
         55:27:da:58:68:87:07:27:d9:ba:74:13:41:d3:e0:d4:65:6e:
         31:d3:0c:80:6a:c1:de:4b:a2:d5:5a:45:52:97:16:fd:1d:e6:
         e8:bc:6e:cd:f3:b1:03:bc:4d:a6:8e:c6:c6:2e:eb:d7:76:17:
         02:60:29:99:5e:80:df:2a:46:cd:0c:16:a3:36:ab:3b:44:43:
         92:c5:8c:55:3f:db:b3:f2:a0:75:c2:9e:8b:a0:46:e7:7e:82:
         b2:d1:fa:68:4d:d9:5c:1c:32:dd:81:da:fa:36:70:80:cd:78:
         97:ed:21:7b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGrtOt5/BpGKWDEtpPfJroNvzLukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU1NzEyQzlDQ0QwRTcwNUZFQ0FBMDVEQTgyQURGMUM4
NDdDQTgzMTAeFw0yNTAzMDYxMDAyNDRaFw0yNjAzMDUxMDA3NDRaMDMxMTAvBgNV
BAMTKDk1Mjg5Qzg3NDYxRkFFOUM0ODY0MzFBNURDRjE5RkY3NkEyMUI3N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEt5c286X5ANq2xpEPY160jbuJ
pskY8ZVa1bYZrSePWfwrU3rn7MY8Eszif6UJHKIOB8qoUFNNz8FgMubNpf7zJevZ
TQPCCcnSz1KfczW1vQKH2gDPZ2BzsSmVhmdjIQfB0iAlJ1YRqmGNFW0jPw5+8Bn9
/v7f3BUlGMMbwNau4ra3PwHtU5A6tHaIwGYCohf71TtBDqXlfcSBRWB3ZBI63t9o
yndRaXFJKPh8G5P92tHSmgauOECDrX5CijH22JpV/6i5MYBMJQwsAYy1NgDZlGGa
LhbwfVDkm/CRnQRI3UWJNSYZVPRidzfCvb1C4iiMI7iGN5bWuy20jhECMlb9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlSich0YfrpxIZDGl3PGf92oht3swHwYDVR0j
BBgwFoAULlcSyczQ5wX+yqBdqCrfHIR8qDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDc0akRmaEFtdkV5TXZxdmdwQWZoQjhjZkJVNTl0SGE1cTU1Q29FamN4
bUsvMS8yRTU3MTJDOUNDRDBFNzA1RkVDQUEwNURBODJBREYxQzg0N0NBODMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFNTcxMkM5Q0NEMEU3MDVG
RUNBQTA1REE4MkFERjFDODQ3Q0E4MzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g3NGpEZmhBbXZFeU12cXZncEFmaEI4Y2ZCVTU5dEhhNXE1NUNvRWpjeG1LLzEv
MzEzNzM3MmUzNzM0MmUzMTMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxSmwwDQYJKoZIhvcNAQELBQADggEBAA3Sssc/
aE5GAtPvYR2i3Xd5t68IpkUKnfBWIiRQEJeULNYVIZpMConlkghXDJiGcx7YRnYl
kNt9xoYCu7kCAhmSyJMSl2/V5TI61T0jaFL8WW1yY+pznCQz258zh3ONAxHKz50s
BH2nS0Ng7E8aflECbTpvByGe3e0Nyhv3uPX2fNs6qvA4frNLYYrRSn2R7lUn2lho
hwcn2bp0E0HT4NRlbjHTDIBqwd5LotVaRVKXFv0d5ui8bs3zsQO8TaaOxsYu69d2
FwJgKZlegN8qRs0MFqM2qztEQ5LFjFU/27PyoHXCnougRud+grLR+mhN2VwcMt2B
2vo2cIDNeJftIXs=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:12 2025 by rpki-client on console.sobornost.net