Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa
File:                     3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          isZsv5SLy6qI3HVl3VZ53/pr4AHR1jWz6l8eoST0O40=
Subject key identifier:   36:CF:39:97:51:3E:0B:BB:A3:F0:47:5F:AF:2E:86:D4:55:66:FA:32
Certificate issuer:       /CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
Certificate serial:       3C57ABAABB476779380AC305D50C008F609AADC9
Authority key identifier: 3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa
Signing time:             Mon 07 Apr 2025 18:12:35 +0000
ROA not before:           Mon 07 Apr 2025 18:07:35 +0000
ROA not after:            Mon 06 Apr 2026 18:12:35 +0000
asID:                     262391
IP address blocks:        177.131.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 22:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:57:ab:aa:bb:47:67:79:38:0a:c3:05:d5:0c:00:8f:60:9a:ad:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B45A474FDBCECA94BB8CBC36E107BC96D7A9194
        Validity
            Not Before: Apr  7 18:07:35 2025 GMT
            Not After : Apr  6 18:12:35 2026 GMT
        Subject: CN=36CF3997513E0BBBA3F0475FAF2E86D45566FA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:e8:6f:5c:d3:32:0a:71:fa:60:30:2b:24:
                    f0:be:7a:d0:5d:25:03:50:2b:8f:6a:49:47:3d:a9:
                    c7:04:b8:12:b5:6a:bf:dd:ed:85:f6:10:29:07:81:
                    05:9b:78:d6:12:06:bc:d6:4a:f5:a1:3f:ea:93:07:
                    39:63:4a:c1:5f:d8:6d:89:bc:fc:35:2f:d2:54:03:
                    f9:5e:24:ef:5c:92:5e:ee:a0:44:30:18:a4:b2:c3:
                    b5:90:38:4e:ee:de:23:6e:09:3e:e2:a2:3b:a5:3d:
                    1e:20:bf:1d:18:ac:eb:c3:74:35:0e:89:55:65:8b:
                    40:6a:45:4d:49:ec:a2:d0:48:43:f3:0f:5a:3c:6a:
                    77:e1:5e:1f:22:48:c9:47:b9:a2:df:23:47:d6:aa:
                    56:93:e4:4b:84:93:5b:83:db:bd:ef:a1:57:84:97:
                    a4:e2:7a:bd:d1:25:ba:5c:ed:63:17:4e:d4:70:c9:
                    5f:2a:a8:28:a3:ce:99:df:3c:26:e7:32:e2:64:88:
                    5e:29:59:ea:3b:05:b9:c8:17:9a:35:f1:9f:fd:20:
                    3f:e6:40:5f:57:1a:b7:61:07:8e:4a:dc:a1:a5:77:
                    b8:9a:4f:0e:12:4e:24:72:fa:9d:09:7f:b9:53:2f:
                    25:7b:c6:ae:04:a4:64:4f:b3:97:28:7f:39:14:17:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:39:97:51:3E:0B:BB:A3:F0:47:5F:AF:2E:86:D4:55:66:FA:32
            X509v3 Authority Key Identifier:
                keyid:3B:45:A4:74:FD:BC:EC:A9:4B:B8:CB:C3:6E:10:7B:C9:6D:7A:91:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B45A474FDBCECA94BB8CBC36E107BC96D7A9194.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/2/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:72:b3:c6:dd:f3:9c:f8:a4:be:06:c8:5f:d3:59:b5:d0:05:
         b1:d4:33:e8:df:11:f3:30:13:7c:44:f0:53:03:7d:30:5b:ff:
         61:5c:31:96:c7:a7:06:e1:13:14:df:71:78:6f:e2:88:8a:58:
         3d:ba:1c:91:4c:00:b1:85:f4:d1:5a:c4:e2:4f:e1:51:20:d9:
         36:be:ba:0d:8c:19:b6:f2:16:8d:12:0f:97:fc:6c:59:b2:06:
         fb:8d:fa:15:63:56:33:02:c5:97:e8:a4:c2:df:63:d9:81:0b:
         59:ee:d2:0e:5e:82:7d:06:69:d0:c1:6e:5e:06:d8:02:b0:87:
         c6:ba:b8:46:e4:2b:c3:78:22:f7:82:17:b0:47:9b:74:ca:7a:
         ae:5d:9a:75:70:1d:eb:19:f1:3d:8e:b8:4f:ec:45:af:5e:8c:
         de:06:c3:0f:a2:92:e5:e3:df:21:04:01:cf:04:84:13:ce:4c:
         54:4b:77:ce:75:71:c8:0a:4e:53:fe:44:8c:61:bb:36:63:50:
         73:94:12:d7:33:28:60:9b:b3:ec:b8:b5:8a:fc:2f:d7:73:41:
         7e:03:90:3e:96:a8:45:f9:70:e2:dc:d3:93:b5:3c:bd:a9:05:
         34:a4:74:49:99:56:f6:83:1f:bc:6a:28:5a:61:69:40:7f:8c:
         56:c8:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:16:29 2025 by rpki-client on console.sobornost.net