Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/3137372e37302e33322e302f31392d3332203d3e20323632353333.roa
File:                     3137372e37302e33322e302f31392d3332203d3e20323632353333.roa (raw, json)
Hash identifier:          amm8xebWgy/h/25dpXz79gjYhz/8VRRSBpqbcTpnYVs=
Subject key identifier:   F1:91:8B:E2:10:B6:08:92:A3:DF:F1:D5:3D:6C:C9:63:01:29:CE:C0
Certificate issuer:       /CN=475E83C51035E9041EFB6506FC8A7B253E2D6DB9
Certificate serial:       29ADE5AFD97C69958F517E10B718626E6110B2D8
Authority key identifier: 47:5E:83:C5:10:35:E9:04:1E:FB:65:06:FC:8A:7B:25:3E:2D:6D:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/3137372e37302e33322e302f31392d3332203d3e20323632353333.roa
Signing time:             Tue 22 Apr 2025 20:44:47 +0000
ROA not before:           Tue 22 Apr 2025 20:39:47 +0000
ROA not after:            Tue 21 Apr 2026 20:44:47 +0000
asID:                     262533
IP address blocks:        177.70.32.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.crl
                          rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 20:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ad:e5:af:d9:7c:69:95:8f:51:7e:10:b7:18:62:6e:61:10:b2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475E83C51035E9041EFB6506FC8A7B253E2D6DB9
        Validity
            Not Before: Apr 22 20:39:47 2025 GMT
            Not After : Apr 21 20:44:47 2026 GMT
        Subject: CN=F1918BE210B60892A3DFF1D53D6CC9630129CEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:ee:25:41:fb:9c:70:8c:a7:5a:ad:9d:88:
                    1e:10:c1:f4:ff:f4:ed:b6:4d:19:7b:a2:85:c4:31:
                    3f:a3:e6:5c:2d:3f:5d:97:30:6e:58:e6:86:7f:5b:
                    43:24:65:66:3c:b1:0e:58:08:6d:b0:2b:67:c9:f7:
                    de:82:ec:e8:56:0d:d4:1c:9d:24:48:8c:e0:03:04:
                    68:8a:47:57:eb:d5:71:72:50:af:99:5e:51:dc:d8:
                    8b:a1:d2:c3:9f:e2:b4:4f:0c:b2:53:47:5e:7a:32:
                    ca:da:0e:45:e2:0f:c9:48:84:14:d4:6b:d4:b4:23:
                    df:9d:06:3b:b8:d0:fa:bd:9c:d6:a6:21:b2:b9:3f:
                    d8:5a:b9:25:8b:dc:58:28:86:8f:ce:3a:80:57:ac:
                    cf:6f:1f:ca:a1:11:d5:1b:70:c3:40:b8:54:42:66:
                    61:a1:9b:88:00:93:5d:0f:78:0a:a5:1c:84:66:bc:
                    36:7a:25:01:56:39:86:d1:e1:38:7d:a1:dd:45:39:
                    75:c1:11:6b:48:54:4b:c5:0c:01:18:dc:9c:3c:65:
                    0e:82:e0:08:c4:0f:d7:ff:f4:de:9e:1d:cc:60:aa:
                    40:af:33:fb:87:47:80:4f:e5:ca:a9:25:24:8e:f3:
                    0e:d9:d1:13:1b:2b:88:ec:e7:d5:82:ef:1a:c0:b4:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:91:8B:E2:10:B6:08:92:A3:DF:F1:D5:3D:6C:C9:63:01:29:CE:C0
            X509v3 Authority Key Identifier:
                keyid:47:5E:83:C5:10:35:E9:04:1E:FB:65:06:FC:8A:7B:25:3E:2D:6D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/475E83C51035E9041EFB6506FC8A7B253E2D6DB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WD2UUbTdoXhbUHLkHmN1XJyJPS2QpwsAhD43Hqdy3hK/0/3137372e37302e33322e302f31392d3332203d3e20323632353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         75:ac:63:2b:97:8d:7c:d1:a9:c0:72:e4:be:b7:81:48:1f:7a:
         40:8f:c8:a0:3b:98:3b:03:e1:48:39:aa:77:b6:ab:eb:66:be:
         b6:4d:22:60:ad:6a:ea:19:57:34:1a:3b:48:aa:62:c9:aa:6c:
         09:91:89:2b:9e:68:ec:36:27:b3:25:19:86:d3:a2:05:3e:71:
         da:f9:6f:a6:6e:ca:7d:31:09:85:e0:ca:19:bc:05:de:c4:70:
         8f:11:f7:45:a3:c4:39:6b:ce:b5:88:72:fb:51:f9:7a:f2:7d:
         cb:a5:45:ac:ff:ab:2a:be:e2:9e:be:e4:3a:f9:29:fa:f5:5f:
         9f:0e:94:58:d9:be:cd:9c:8c:e0:30:96:fe:c8:10:1a:d3:7c:
         97:fd:01:fd:6f:1d:76:20:95:37:82:11:14:8c:53:e5:75:2a:
         4b:35:e1:06:58:30:b3:73:2f:d0:9e:bb:21:39:96:44:47:da:
         75:40:62:04:7a:89:27:15:05:c7:5d:b5:65:41:90:b3:40:d1:
         f1:5d:60:22:42:b3:f2:17:64:4a:53:9d:ed:8e:23:9e:b6:ba:
         12:0b:51:54:b0:f6:e4:14:2e:97:9f:ab:cf:77:f2:b1:4f:9f:
         3f:f8:d4:f7:f6:0b:2f:3a:86:83:0d:58:c0:b0:96:c7:65:59:
         09:22:29:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:16 2025 by rpki-client on console.sobornost.net