Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/3137372e31312e36342e302f32312d3234203d3e20323632383732.roa
File:                     3137372e31312e36342e302f32312d3234203d3e20323632383732.roa (raw, json)
Hash identifier:          6kDjgvZrf9T6JHdIYBtEokyCKZf5bU9fD3eDzRG8ZwM=
Subject key identifier:   98:A8:B3:F6:1E:23:B8:E0:04:60:BB:C5:50:56:CE:B0:2B:A0:CF:DE
Certificate issuer:       /CN=87B55EA11CC3C5018472A7EF4105A798D366CC11
Certificate serial:       2F415C17D1F53E1358EC60C82C3EBDBAD97F375B
Authority key identifier: 87:B5:5E:A1:1C:C3:C5:01:84:72:A7:EF:41:05:A7:98:D3:66:CC:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/3137372e31312e36342e302f32312d3234203d3e20323632383732.roa
Signing time:             Thu 06 Mar 2025 15:55:39 +0000
ROA not before:           Thu 06 Mar 2025 15:50:39 +0000
ROA not after:            Thu 05 Mar 2026 15:55:39 +0000
asID:                     262872
IP address blocks:        177.11.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.crl
                          rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:41:5c:17:d1:f5:3e:13:58:ec:60:c8:2c:3e:bd:ba:d9:7f:37:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87B55EA11CC3C5018472A7EF4105A798D366CC11
        Validity
            Not Before: Mar  6 15:50:39 2025 GMT
            Not After : Mar  5 15:55:39 2026 GMT
        Subject: CN=98A8B3F61E23B8E00460BBC55056CEB02BA0CFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:1e:dd:dd:b3:0a:94:5b:1c:66:6f:b3:b3:
                    ae:ad:20:bd:da:7e:24:72:32:6b:ba:07:33:30:1f:
                    ac:88:fd:54:75:36:0e:80:9c:38:65:36:17:07:66:
                    65:1f:1d:01:84:6f:37:2d:68:f7:24:28:e8:3a:73:
                    2b:7f:2d:05:da:c0:69:68:cf:c8:f4:87:0d:47:b8:
                    5e:68:40:bf:32:29:6e:76:91:de:05:c5:5f:46:01:
                    b5:66:54:6c:77:db:8a:03:78:7c:89:9d:46:da:99:
                    79:93:e1:b1:f2:de:02:a4:74:12:9b:16:cb:d1:1e:
                    f9:bd:10:94:03:7d:90:b3:16:80:71:54:c6:bb:21:
                    5f:d4:d2:05:42:88:bb:b9:7e:ea:13:50:4d:03:28:
                    8f:8e:07:45:72:fd:09:77:26:be:7a:54:90:14:8b:
                    78:fb:f1:7e:57:ab:3b:e8:f9:7c:2e:66:92:9b:38:
                    e2:f1:0e:f9:30:52:32:cd:46:fe:73:df:05:4a:f6:
                    c6:5a:50:c0:7d:82:a9:b6:3e:ba:5b:62:e0:6f:dc:
                    62:72:3e:73:9f:69:ae:ee:3b:12:ba:ac:0b:e8:1c:
                    27:90:6d:bb:79:30:68:6d:1c:19:8f:b6:43:34:c8:
                    ed:28:3d:29:f3:a0:6a:6c:13:ae:46:82:ac:0e:40:
                    2d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A8:B3:F6:1E:23:B8:E0:04:60:BB:C5:50:56:CE:B0:2B:A0:CF:DE
            X509v3 Authority Key Identifier:
                keyid:87:B5:5E:A1:1C:C3:C5:01:84:72:A7:EF:41:05:A7:98:D3:66:CC:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B55EA11CC3C5018472A7EF4105A798D366CC11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5QsErFU4sNtG6iJxhZyx1dj42s1hkcUCG8sgMk6swPM/1/3137372e31312e36342e302f32312d3234203d3e20323632383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:70:c3:ed:cc:82:d4:a9:04:e9:84:62:c2:a1:d1:07:b2:ec:
         ad:3c:25:85:91:a7:bd:dd:ba:46:57:3f:c9:67:f9:6e:66:c1:
         1b:bc:2a:ed:46:72:0f:c2:c1:bf:14:45:d3:03:c4:95:5f:35:
         b2:af:c0:c9:63:36:18:b2:bc:89:dd:d7:4d:94:f7:53:70:cd:
         4d:44:49:1a:c2:60:a9:66:2d:42:34:19:ff:29:50:40:db:cd:
         24:24:92:59:8e:94:27:7d:dd:17:3e:f5:4e:54:2a:a5:5b:ee:
         0b:e5:3d:96:90:dd:9e:09:2c:8c:f8:f1:22:0e:0d:83:a9:1b:
         a0:1a:4f:0d:41:38:97:d9:98:be:92:cf:61:81:6d:c2:5f:9b:
         1a:6a:ba:52:3e:ed:e1:c4:97:f6:95:ca:46:aa:6d:ab:b7:96:
         15:11:88:45:7a:ce:23:9a:fc:2d:94:08:b4:b2:b8:9a:cb:7b:
         89:bc:bf:36:21:c4:32:4d:e6:8a:5d:b2:13:74:2d:12:22:03:
         c7:f1:d3:5a:c8:6e:e4:c7:c0:60:b7:10:f1:77:75:da:d9:42:
         c3:71:21:ac:c1:67:09:ba:fc:ce:73:ac:af:2b:81:07:38:2b:
         02:2b:11:92:70:dc:c5:95:a3:55:1e:83:87:ea:f1:f8:d2:d1:
         ea:9e:4c:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL0FcF9H1PhNY7GDILD69utl/N1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCNTVFQTExQ0MzQzUwMTg0NzJBN0VGNDEwNUE3OThE
MzY2Q0MxMTAeFw0yNTAzMDYxNTUwMzlaFw0yNjAzMDUxNTU1MzlaMDMxMTAvBgNV
BAMTKDk4QThCM0Y2MUUyM0I4RTAwNDYwQkJDNTUwNTZDRUIwMkJBMENGREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwAR7d3bMKlFscZm+zs66tIL3a
fiRyMmu6BzMwH6yI/VR1Ng6AnDhlNhcHZmUfHQGEbzctaPckKOg6cyt/LQXawGlo
z8j0hw1HuF5oQL8yKW52kd4FxV9GAbVmVGx324oDeHyJnUbamXmT4bHy3gKkdBKb
FsvRHvm9EJQDfZCzFoBxVMa7IV/U0gVCiLu5fuoTUE0DKI+OB0Vy/Ql3Jr56VJAU
i3j78X5Xqzvo+XwuZpKbOOLxDvkwUjLNRv5z3wVK9sZaUMB9gqm2PrpbYuBv3GJy
PnOfaa7uOxK6rAvoHCeQbbt5MGhtHBmPtkM0yO0oPSnzoGpsE65GgqwOQC3rAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmKiz9h4juOAEYLvFUFbOsCugz94wHwYDVR0j
BBgwFoAUh7VeoRzDxQGEcqfvQQWnmNNmzBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVRc0VyRlU0c050RzZpSnhoWnl4MWRqNDJzMWhrY1VDRzhzZ01rNnN3
UE0vMS84N0I1NUVBMTFDQzNDNTAxODQ3MkE3RUY0MTA1QTc5OEQzNjZDQzExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QjU1RUExMUNDM0M1MDE4
NDcyQTdFRjQxMDVBNzk4RDM2NkNDMTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1UXNFckZVNHNOdEc2aUp4aFp5eDFkajQyczFoa2NVQ0c4c2dNazZzd1BNLzEv
MzEzNzM3MmUzMTMxMmUzNjM0MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMy
MzgzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsQtAMA0GCSqGSIb3DQEBCwUAA4IBAQAmcMPtzILU
qQTphGLCodEHsuytPCWFkae93bpGVz/JZ/luZsEbvCrtRnIPwsG/FEXTA8SVXzWy
r8DJYzYYsryJ3ddNlPdTcM1NREkawmCpZi1CNBn/KVBA280kJJJZjpQnfd0XPvVO
VCqlW+4L5T2WkN2eCSyM+PEiDg2DqRugGk8NQTiX2Zi+ks9hgW3CX5saarpSPu3h
xJf2lcpGqm2rt5YVEYhFes4jmvwtlAi0sriay3uJvL82IcQyTeaKXbITdC0SIgPH
8dNayG7kx8BgtxDxd3Xa2ULDcSGswWcJuvzOc6yvK4EHOCsCKxGScNzFlaNVHoOH
6vH40tHqnkzc
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:04:15 2025 by rpki-client on console.sobornost.net