Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38312e302f32342d3332203d3e203532353237.roa
File:                     3137372e3135322e38312e302f32342d3332203d3e203532353237.roa (raw, json)
Hash identifier:          xS2wxR/Jdn5L6YtdHKijM/EEKiyF783LeZeWN1E6H/s=
Subject key identifier:   76:FD:03:10:89:17:96:8B:B3:FC:A9:6E:78:E3:F7:92:27:E3:FA:A1
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       3B5DB03BDC7A010F6D7CC143D878347C7A65099F
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38312e302f32342d3332203d3e203532353237.roa
Signing time:             Fri 07 Feb 2025 16:59:11 +0000
ROA not before:           Fri 07 Feb 2025 16:54:11 +0000
ROA not after:            Fri 06 Feb 2026 16:59:11 +0000
asID:                     52527
IP address blocks:        177.152.81.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl
                          rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 16:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5d:b0:3b:dc:7a:01:0f:6d:7c:c1:43:d8:78:34:7c:7a:65:09:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Feb  7 16:54:11 2025 GMT
            Not After : Feb  6 16:59:11 2026 GMT
        Subject: CN=76FD03108917968BB3FCA96E78E3F79227E3FAA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:c5:e7:ce:ff:ae:09:ac:1e:3a:3f:c0:14:
                    8e:5d:24:e2:bc:02:0e:e2:2d:a4:79:e5:e5:e3:c8:
                    1a:18:13:e3:f6:69:ab:97:11:26:a2:c1:33:b7:52:
                    ea:00:4e:02:a4:17:45:db:6b:75:4c:c4:b9:9a:fc:
                    83:ea:f9:1e:2e:b4:fe:b7:44:af:5e:c6:09:55:5d:
                    1b:2d:c4:79:a6:f9:1e:34:5a:1e:a7:fe:db:6f:b3:
                    ca:19:af:95:65:4d:4d:4b:92:e1:2f:fc:6e:66:3d:
                    9c:fc:0a:fd:62:0a:a0:94:88:33:5d:98:40:cd:a6:
                    9e:7f:5d:1c:a1:39:d7:88:7c:dc:86:01:48:52:38:
                    f5:d2:a5:a6:0e:9f:00:1e:ca:98:f6:1f:2c:1a:12:
                    a6:f8:62:ce:94:aa:96:ce:31:06:e8:4f:22:24:60:
                    2b:95:2b:cd:6f:dd:d0:32:87:ae:2c:20:bf:65:70:
                    8f:e3:92:b1:3c:48:db:e7:85:f6:b4:70:99:4e:b0:
                    53:a8:01:9f:85:2d:d9:7b:d1:9b:fc:6e:61:72:26:
                    4d:b7:c1:a0:d5:bb:88:8a:c4:66:33:ae:ee:e7:67:
                    3d:8d:62:16:50:0b:a5:0d:ef:11:5b:e7:6f:d8:ef:
                    ad:7e:62:a0:31:bd:7a:07:13:fe:f1:f9:21:40:62:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FD:03:10:89:17:96:8B:B3:FC:A9:6E:78:E3:F7:92:27:E3:FA:A1
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/3137372e3135322e38312e302f32342d3332203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a0:d6:ab:e7:99:1d:c6:ec:7b:42:57:33:97:3e:af:c7:8c:
         16:c7:25:bb:ac:c8:22:f5:af:53:ab:6c:4e:b5:4c:26:3a:a5:
         af:43:c6:a8:fd:b5:26:c1:50:5e:56:48:01:e7:6c:50:2c:f1:
         f2:e7:db:fa:e4:6a:6e:66:bc:9b:e9:46:b8:dc:56:94:7a:d2:
         36:ad:8a:59:b9:f7:a2:c5:36:f7:42:94:20:73:b7:e2:fe:fe:
         ac:d5:ea:53:f3:6f:ed:53:22:fb:e4:2b:a7:5d:97:79:fa:48:
         31:09:49:b6:60:b5:64:23:57:7a:96:1a:29:d5:16:bb:bf:9e:
         53:90:cb:68:b3:f6:a0:2e:00:03:5f:72:45:7a:e1:9f:f4:ab:
         f1:2a:e8:eb:05:e9:8c:84:b8:24:35:13:c8:bf:4d:72:ed:4d:
         d3:e3:8d:87:d3:6c:bd:19:19:2c:7c:08:8e:d8:7c:a7:7f:88:
         fb:fa:70:bd:ce:e6:21:af:1e:3b:47:20:c5:a4:96:8e:95:88:
         7f:51:a0:4c:bf:0d:55:48:75:10:aa:14:84:87:c9:42:82:2b:
         fc:67:d6:72:64:3a:ff:fa:a9:1c:b2:e2:eb:06:56:a2:09:97:
         b3:1c:d7:f8:42:f2:bb:0c:22:ef:3c:d1:d5:0a:31:50:38:ba:
         25:3f:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:38:04 2025 by rpki-client on console.sobornost.net