Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137372e32332e382e302f32312d3231203d3e203533313132.roa
File:                     3137372e32332e382e302f32312d3231203d3e203533313132.roa (raw, json)
Hash identifier:          xWDxR/Z5rPs0J7T7y+ieAH2OdikY4J+Ydbcb47CWKL8=
Subject key identifier:   A7:F5:D0:45:D5:EF:B9:59:66:6A:16:98:48:F4:E9:E0:15:DD:51:3A
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       3782CAE0A54E8A5BF99DED1356446D3843F54334
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137372e32332e382e302f32312d3231203d3e203533313132.roa
Signing time:             Thu 06 Mar 2025 10:20:34 +0000
ROA not before:           Thu 06 Mar 2025 10:15:34 +0000
ROA not after:            Thu 05 Mar 2026 10:20:34 +0000
asID:                     53112
IP address blocks:        177.23.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:82:ca:e0:a5:4e:8a:5b:f9:9d:ed:13:56:44:6d:38:43:f5:43:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Mar  6 10:15:34 2025 GMT
            Not After : Mar  5 10:20:34 2026 GMT
        Subject: CN=A7F5D045D5EFB959666A169848F4E9E015DD513A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:88:19:27:78:93:3d:36:9e:49:71:f7:64:
                    39:66:cd:21:92:bf:2c:5f:71:8c:5e:75:6a:55:53:
                    2d:7f:40:98:9b:c9:e1:8d:23:6e:5a:73:58:f9:b0:
                    1c:59:3c:23:2d:62:3d:ba:55:36:69:d4:39:bf:60:
                    40:3e:92:8c:f3:bb:b0:a7:b1:e8:6a:8d:01:87:f3:
                    8d:0b:95:e4:06:7c:0e:9a:eb:09:44:17:9e:6c:10:
                    6e:84:6b:54:97:52:bc:3b:cd:af:51:ba:31:c5:fd:
                    62:ad:75:30:90:32:49:3a:70:b7:7a:ef:39:06:a3:
                    1d:e6:83:74:5f:90:9b:16:bf:f5:ca:30:c6:75:89:
                    e1:c7:2e:1f:56:94:8c:27:e2:ee:45:80:ef:39:b6:
                    1c:cc:70:6d:10:53:94:88:86:66:23:c2:c9:a5:d1:
                    af:17:55:ed:d3:63:b5:0f:89:8d:ab:4c:7f:d1:4d:
                    29:b0:3b:af:e5:7d:54:f9:c4:94:4c:b1:5c:fb:a2:
                    e2:30:16:c2:30:3a:ce:82:f5:b2:1b:44:24:b3:c4:
                    bd:18:4e:46:12:ac:cf:f3:34:7e:ce:73:1d:6f:26:
                    3a:25:62:cf:d9:8a:d0:19:a7:8b:28:b2:6a:d9:c1:
                    fe:d2:c2:2c:8c:ae:0f:76:85:4b:42:42:2b:0e:da:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F5:D0:45:D5:EF:B9:59:66:6A:16:98:48:F4:E9:E0:15:DD:51:3A
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3137372e32332e382e302f32312d3231203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:c0:6b:ac:c0:46:1f:98:58:96:9c:71:e0:4e:94:4d:3b:24:
         d3:e9:f4:1c:40:72:35:64:f5:77:01:9e:78:ef:bb:f2:8e:99:
         c8:27:5b:f9:0f:b2:79:9e:c7:d5:e8:60:c1:07:75:38:33:5f:
         4b:ef:73:30:73:fc:43:8d:a6:0b:1d:5f:46:95:fe:5a:e7:05:
         45:c9:41:9d:51:88:dd:fe:a4:79:d8:0e:81:38:09:4c:4d:1b:
         ed:1b:c8:56:43:c6:32:5c:ec:15:49:1f:41:00:2b:a8:4e:a6:
         7f:8f:52:9c:52:8a:7e:82:9f:2f:ac:ea:b2:f8:15:1c:d4:85:
         45:ad:1d:d1:73:72:da:bd:78:ed:a9:87:ce:64:8c:ce:80:e8:
         94:f9:b9:fc:d2:4f:77:a5:bf:f0:a2:fa:c0:9a:2c:14:8b:f0:
         81:d4:51:20:49:78:13:4b:20:2f:79:fc:ff:fa:eb:5a:32:9d:
         25:94:3e:78:c0:6f:6d:57:d5:11:f4:3c:dd:1b:04:dc:39:69:
         a2:f3:9f:34:c1:49:c2:a0:f0:59:df:fd:25:35:ab:db:5f:25:
         98:82:e7:87:9d:fa:85:c9:6d:ac:fd:66:b5:fe:b2:ab:e3:78:
         9f:c0:96:d3:e2:94:84:d6:58:d0:1d:9c:f6:3d:60:bc:82:ba:
         16:c4:19:ac
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUN4LK4KVOilv5ne0TVkRtOEP1QzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRBREVCNUIwQjA2OURBQzJEOTRBNUREQzU1MTBEOURD
QzBDQjY1MTAeFw0yNTAzMDYxMDE1MzRaFw0yNjAzMDUxMDIwMzRaMDMxMTAvBgNV
BAMTKEE3RjVEMDQ1RDVFRkI5NTk2NjZBMTY5ODQ4RjRFOUUwMTVERDUxM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMogZJ3iTPTaeSXH3ZDlmzSGS
vyxfcYxedWpVUy1/QJibyeGNI25ac1j5sBxZPCMtYj26VTZp1Dm/YEA+kozzu7Cn
sehqjQGH840LleQGfA6a6wlEF55sEG6Ea1SXUrw7za9RujHF/WKtdTCQMkk6cLd6
7zkGox3mg3RfkJsWv/XKMMZ1ieHHLh9WlIwn4u5FgO85thzMcG0QU5SIhmYjwsml
0a8XVe3TY7UPiY2rTH/RTSmwO6/lfVT5xJRMsVz7ouIwFsIwOs6C9bIbRCSzxL0Y
TkYSrM/zNH7Ocx1vJjolYs/ZitAZp4sosmrZwf7SwiyMrg92hUtCQisO2pktAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUp/XQRdXvuVlmahaYSPTp4BXdUTowHwYDVR0j
BBgwFoAUdK3rWwsGnawtlKXdxVENncwMtlEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVmVEdWZkFzeTFOMzJTMmJIdG9MMlltV1hLU01Gd0hlZUhvVTJEWVFR
WjEvMS83NEFERUI1QjBCMDY5REFDMkQ5NEE1RERDNTUxMEQ5RENDMENCNjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0QURFQjVCMEIwNjlEQUMy
RDk0QTVEREM1NTEwRDlEQ0MwQ0I2NTEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1ZlRHVmZBc3kxTjMyUzJiSHRvTDJZbVdYS1NNRndIZWVIb1UyRFlRUVoxLzEv
MzEzNzM3MmUzMjMzMmUzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM1MzMzMTMx
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOxFwgwDQYJKoZIhvcNAQELBQADggEBACbAa6zARh+YWJac
ceBOlE07JNPp9BxAcjVk9XcBnnjvu/KOmcgnW/kPsnmex9XoYMEHdTgzX0vvczBz
/EONpgsdX0aV/lrnBUXJQZ1RiN3+pHnYDoE4CUxNG+0byFZDxjJc7BVJH0EAK6hO
pn+PUpxSin6Cny+s6rL4FRzUhUWtHdFzctq9eO2ph85kjM6A6JT5ufzST3elv/Ci
+sCaLBSL8IHUUSBJeBNLIC95/P/661oynSWUPnjAb21X1RH0PN0bBNw5aaLznzTB
ScKg8Fnf/SU1q9tfJZiC54ed+oXJbaz9ZrX+sqvjeJ/AltPilITWWNAdnPY9YLyC
uhbEGaw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:37 2025 by rpki-client on console.sobornost.net