Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa
File:                     3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (raw, json)
Hash identifier:          yDvjRXifxWYJIZTut8sX9MAq2K/UFlRpCJxUt7efohI=
Subject key identifier:   6E:75:E8:BB:C7:56:63:44:F5:FE:9E:39:E5:07:A7:52:AB:87:C3:F9
Certificate issuer:       /CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Certificate serial:       2412E1EE7F2C81F1B4042A5320E21892DA85E6E5
Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa
Signing time:             Thu 06 Mar 2025 08:40:52 +0000
ROA not before:           Thu 06 Mar 2025 08:35:52 +0000
ROA not after:            Thu 05 Mar 2026 08:40:52 +0000
asID:                     262861
IP address blocks:        177.10.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl
                          rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:12:e1:ee:7f:2c:81:f1:b4:04:2a:53:20:e2:18:92:da:85:e6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605
        Validity
            Not Before: Mar  6 08:35:52 2025 GMT
            Not After : Mar  5 08:40:52 2026 GMT
        Subject: CN=6E75E8BBC7566344F5FE9E39E507A752AB87C3F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:83:14:2a:5f:09:da:16:78:94:61:15:9e:12:
                    2d:79:a3:84:1b:af:4e:b9:74:ac:79:3b:60:24:55:
                    be:ad:5c:64:2d:03:0b:34:f9:02:59:8c:4c:d2:4d:
                    27:89:07:ed:54:32:21:f5:11:83:b5:68:cc:76:ed:
                    3e:ce:59:3c:49:5d:70:c2:0a:70:29:25:0e:69:92:
                    d8:5c:79:ab:48:73:64:59:5c:d8:8c:a7:0b:6a:4b:
                    f1:d4:b7:d3:46:82:2b:b8:ff:39:4b:fd:43:06:d5:
                    ad:7a:c1:fb:23:95:bc:9e:7c:ca:db:30:3a:de:8c:
                    5d:ca:30:20:62:a5:8b:98:0c:d3:b1:f4:a1:02:a7:
                    6c:15:83:b4:4b:e9:be:bb:b0:31:1d:0e:7f:24:7c:
                    b9:52:98:28:59:ca:60:4d:ac:91:04:90:00:7d:85:
                    2c:c3:db:87:2a:79:80:6e:a3:4b:a1:17:8d:aa:eb:
                    e2:77:5a:46:b4:f9:56:ba:e7:fc:6a:d0:46:bd:45:
                    34:c7:04:60:39:d3:a4:f9:a1:6b:b9:83:80:50:c4:
                    89:52:16:45:52:07:03:f6:75:19:4d:b2:e1:4f:99:
                    34:c3:55:8c:e8:db:bd:37:de:14:55:43:16:a7:ba:
                    f8:94:f2:07:41:04:08:5a:3c:a9:c5:fc:71:58:a8:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:75:E8:BB:C7:56:63:44:F5:FE:9E:39:E5:07:A7:52:AB:87:C3:F9
            X509v3 Authority Key Identifier:
                keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:c6:e7:1a:79:ba:c9:21:46:85:5d:ae:79:0f:8e:73:e5:a2:
         15:c8:8b:e4:4c:1a:f5:2a:2d:3d:0a:18:55:f8:3c:ee:0a:1f:
         ec:b2:78:88:ad:43:f1:86:cf:d8:c1:95:23:a9:5a:a7:4d:dc:
         4b:4c:e2:1e:76:87:98:bc:9d:de:e1:05:be:62:db:49:6a:e4:
         d8:e4:ab:3b:5f:40:89:c2:32:38:88:74:89:c1:0f:03:5b:57:
         ec:2e:b0:34:a0:e6:e7:95:ca:54:7d:5b:f6:dd:b6:3a:62:2d:
         03:11:af:c0:6e:8b:62:7a:1b:16:02:35:4c:2a:1b:82:40:c9:
         6b:77:ab:80:a9:1c:86:50:f9:3c:29:ef:94:b1:3f:77:8d:29:
         7e:45:bf:c1:59:1b:ef:bb:a7:7f:d6:58:59:e7:e9:25:e8:cd:
         d8:bd:92:43:05:4d:af:fa:8e:fa:6f:d7:02:d3:dc:a4:db:bf:
         86:b8:16:4d:0d:5b:69:fa:47:50:5f:c5:6d:7c:44:ee:51:66:
         e8:0d:49:1e:95:7f:6d:c5:4b:18:60:eb:58:d6:39:f0:cc:e6:
         38:02:3d:76:ea:a0:c7:37:9b:b4:64:7a:f6:f8:50:9a:61:75:
         06:63:2f:9f:9e:47:cd:88:4c:9c:8f:a3:e4:2b:3f:e6:df:ad:
         7b:7f:58:f3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJBLh7n8sgfG0BCpTIOIYktqF5uUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMyMzBCQTM3MDQ5MjU1QzA0RTg1Qzg3RDlGNEJERDNC
OTMxMzYwNTAeFw0yNTAzMDYwODM1NTJaFw0yNjAzMDUwODQwNTJaMDMxMTAvBgNV
BAMTKDZFNzVFOEJCQzc1NjYzNDRGNUZFOUUzOUU1MDdBNzUyQUI4N0MzRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwgxQqXwnaFniUYRWeEi15o4Qb
r065dKx5O2AkVb6tXGQtAws0+QJZjEzSTSeJB+1UMiH1EYO1aMx27T7OWTxJXXDC
CnApJQ5pkthceatIc2RZXNiMpwtqS/HUt9NGgiu4/zlL/UMG1a16wfsjlbyefMrb
MDrejF3KMCBipYuYDNOx9KECp2wVg7RL6b67sDEdDn8kfLlSmChZymBNrJEEkAB9
hSzD24cqeYBuo0uhF42q6+J3Wka0+Va65/xq0Ea9RTTHBGA506T5oWu5g4BQxIlS
FkVSBwP2dRlNsuFPmTTDVYzo27033hRVQxanuviU8gdBBAhaPKnF/HFYqAPNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbnXou8dWY0T1/p455QenUquHw/kwHwYDVR0j
BBgwFoAUQyMLo3BJJVwE6FyH2fS907kxNgUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpz
cWcvMS80MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMjMwQkEzNzA0OTI1NUMw
NEU4NUM4N0Q5RjRCREQzQjkzMTM2MDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0d1dEaWtkdlIxWVlqVUxMQnprRTJCQkJRWnVXSExnUHR4MUxoMllKc3FnLzEv
MzEzNzM3MmUzMTMwMmUzMjMyMzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxCuAwDQYJKoZIhvcNAQELBQADggEBAEDG5xp5
uskhRoVdrnkPjnPlohXIi+RMGvUqLT0KGFX4PO4KH+yyeIitQ/GGz9jBlSOpWqdN
3EtM4h52h5i8nd7hBb5i20lq5NjkqztfQInCMjiIdInBDwNbV+wusDSg5ueVylR9
W/bdtjpiLQMRr8Bui2J6GxYCNUwqG4JAyWt3q4CpHIZQ+Twp75SxP3eNKX5Fv8FZ
G++7p3/WWFnn6SXozdi9kkMFTa/6jvpv1wLT3KTbv4a4Fk0NW2n6R1BfxW18RO5R
ZugNSR6Vf23FSxhg61jWOfDM5jgCPXbqoMc3m7Rkevb4UJphdQZjL5+eR82ITJyP
o+QrP+bfrXt/WPM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:32 2025 by rpki-client on console.sobornost.net