Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/3137372e37322e32382e302f32322d3332203d3e203532383137.roa
File:                     3137372e37322e32382e302f32322d3332203d3e203532383137.roa (raw, json)
Hash identifier:          XLI+nVomUXV8Hy+HHumZmPPwK65cjtKWeSOLr61lVxw=
Subject key identifier:   5E:C4:D8:8A:E6:62:FF:C8:7B:62:50:D6:76:E6:98:00:61:1B:4F:ED
Certificate issuer:       /CN=B70B1C7FA0C5C18CE5053825342F1D0D6119950C
Certificate serial:       55763C6F8AE35E7E11E40FD647C11E4356AF16DB
Authority key identifier: B7:0B:1C:7F:A0:C5:C1:8C:E5:05:38:25:34:2F:1D:0D:61:19:95:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/3137372e37322e32382e302f32322d3332203d3e203532383137.roa
Signing time:             Wed 16 Apr 2025 15:24:14 +0000
ROA not before:           Wed 16 Apr 2025 15:19:14 +0000
ROA not after:            Wed 15 Apr 2026 15:24:14 +0000
asID:                     52817
IP address blocks:        177.72.28.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.crl
                          rsync://rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:76:3c:6f:8a:e3:5e:7e:11:e4:0f:d6:47:c1:1e:43:56:af:16:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B70B1C7FA0C5C18CE5053825342F1D0D6119950C
        Validity
            Not Before: Apr 16 15:19:14 2025 GMT
            Not After : Apr 15 15:24:14 2026 GMT
        Subject: CN=5EC4D88AE662FFC87B6250D676E69800611B4FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:e4:b9:fc:d5:68:08:50:84:db:39:60:6b:
                    90:14:b6:a8:a9:22:71:e6:07:f3:c7:9b:1a:e7:38:
                    c4:7b:8c:6c:6b:14:eb:b0:0b:16:1b:d5:86:44:89:
                    29:e1:40:b9:ba:df:3d:47:84:06:ca:c0:3d:0e:92:
                    29:1c:ae:b0:04:72:cd:34:7a:07:86:87:94:6c:68:
                    ec:a2:1b:a8:2d:d7:ab:de:41:6d:c9:61:ea:d8:ee:
                    da:27:a1:bd:11:2e:0a:82:0c:30:1c:02:76:f7:5b:
                    33:a0:7a:88:0b:d2:49:67:0e:ed:a5:7c:c0:38:ab:
                    94:ab:47:78:6a:82:84:9a:d9:24:70:6a:93:17:e8:
                    28:62:59:9b:ef:64:b4:a2:c6:f6:38:4f:eb:30:a6:
                    3f:47:dc:49:cd:78:2d:79:76:f8:c7:54:48:2f:6b:
                    54:7e:e2:88:76:c7:25:35:65:af:71:64:35:33:f6:
                    9b:b5:16:a2:75:79:3f:8e:87:25:b9:d4:37:8e:af:
                    ec:05:68:88:10:f3:19:c7:73:43:30:a9:5c:1e:ec:
                    cf:62:4e:11:9b:8a:2d:f5:5c:9c:3f:48:75:15:2a:
                    8e:40:2e:78:e0:70:ac:c7:0d:c1:5b:47:f4:bf:98:
                    76:16:e6:7c:ac:15:a0:c1:48:65:22:28:e6:d8:d6:
                    4b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C4:D8:8A:E6:62:FF:C8:7B:62:50:D6:76:E6:98:00:61:1B:4F:ED
            X509v3 Authority Key Identifier:
                keyid:B7:0B:1C:7F:A0:C5:C1:8C:E5:05:38:25:34:2F:1D:0D:61:19:95:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B70B1C7FA0C5C18CE5053825342F1D0D6119950C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J99rAV4feugeNmbWMazXQiSPuAg3urtjFo5HeCSTUUqP/0/3137372e37322e32382e302f32322d3332203d3e203532383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:23:f1:60:23:e7:55:bb:cf:60:0f:70:e1:bf:3d:9b:ce:45:
         dd:94:c7:d0:af:df:48:19:52:22:0d:3c:89:20:1e:55:ac:92:
         85:89:2f:35:db:b3:17:e6:32:2d:e6:ea:a3:b9:a4:2e:47:c7:
         10:38:d5:96:39:13:45:6b:9d:e0:d8:5b:3d:27:93:4e:f0:10:
         5e:5a:72:58:18:a1:be:6b:38:82:1b:03:9b:70:20:39:18:e9:
         0c:ae:f5:bb:06:bd:af:6c:74:70:ee:3b:ff:e8:ef:f5:8c:0c:
         31:37:b3:be:51:4f:a7:f0:af:0c:55:cd:83:c1:4a:cc:56:fa:
         eb:f3:6a:98:2f:60:ed:48:ab:b5:c7:82:6a:97:12:07:e8:eb:
         2b:7a:85:16:b0:0f:ad:d0:c7:81:ec:6c:3b:3a:2f:57:25:d6:
         9b:2b:68:82:23:42:78:5e:51:7d:15:44:5f:b5:28:71:f8:f9:
         c4:1a:3c:d6:dd:5e:35:19:47:f4:12:b9:84:d2:23:c4:55:d4:
         ce:fc:3a:21:e8:88:d8:cc:c6:4e:c4:70:c4:de:e2:27:81:f4:
         e1:41:5e:6a:84:40:3a:1f:4c:d2:3a:ba:30:d6:11:a3:00:c6:
         9e:4e:ef:67:6a:43:ed:1d:b4:ed:93:62:b9:49:45:63:d8:0c:
         87:74:1c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:32 2025 by rpki-client on console.sobornost.net