Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137372e3130342e3230382e302f32302d3234203d3e20323632363338.roa
File:                     3137372e3130342e3230382e302f32302d3234203d3e20323632363338.roa (raw, json)
Hash identifier:          tO0Lng60y8CZbM0JJPTbQu0mBnXprhKaAWiBlIZlXp8=
Subject key identifier:   E7:CD:D4:A3:61:E4:2A:FE:9F:6A:0E:4D:2C:08:54:72:FF:3A:F5:B2
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       7EB105078816ADEFC35FC14ED41B33FAC196AEC2
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137372e3130342e3230382e302f32302d3234203d3e20323632363338.roa
Signing time:             Mon 17 Feb 2025 15:51:28 +0000
ROA not before:           Mon 17 Feb 2025 15:46:28 +0000
ROA not after:            Mon 16 Feb 2026 15:51:28 +0000
asID:                     262638
IP address blocks:        177.104.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b1:05:07:88:16:ad:ef:c3:5f:c1:4e:d4:1b:33:fa:c1:96:ae:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Feb 17 15:46:28 2025 GMT
            Not After : Feb 16 15:51:28 2026 GMT
        Subject: CN=E7CDD4A361E42AFE9F6A0E4D2C085472FF3AF5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:97:8b:c4:b5:9a:cb:2d:e2:72:6b:2a:2b:
                    d1:a9:bb:20:80:cf:84:91:14:81:b4:c2:ef:cf:9b:
                    2c:f2:22:de:ca:bc:75:58:c6:e6:bf:f0:a1:e3:d8:
                    91:83:03:36:21:b9:7a:dc:c8:07:79:e3:d6:88:8b:
                    f1:46:29:d2:f0:d7:f3:53:69:df:44:51:32:9a:d9:
                    96:61:5d:46:68:91:0a:8b:ff:d3:ac:4b:36:b1:fd:
                    97:17:67:39:94:90:cc:59:bb:b4:01:29:9e:7b:b3:
                    3e:0a:ce:68:de:3e:62:24:4d:f4:04:06:cc:d8:14:
                    8d:94:07:47:d2:2e:08:83:af:6d:05:be:99:cf:c5:
                    df:97:51:81:57:3d:27:d9:06:bb:55:4d:03:c1:3b:
                    46:18:b3:e5:85:fc:03:32:1c:a8:47:d9:3a:22:d1:
                    22:1a:e1:0d:52:1e:65:14:87:70:1c:d4:4f:64:71:
                    91:4b:28:89:ba:50:5d:2b:cc:72:41:40:e4:23:31:
                    0b:55:05:85:b3:36:72:77:3c:c3:1e:99:f3:a7:71:
                    cf:ec:e3:1c:4c:d2:d3:e8:77:1e:33:bc:56:f3:51:
                    30:c4:ab:42:94:93:45:dc:8d:91:7a:50:e0:06:cd:
                    59:29:01:24:66:b0:10:22:4e:7e:b7:f0:e9:e2:39:
                    ea:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CD:D4:A3:61:E4:2A:FE:9F:6A:0E:4D:2C:08:54:72:FF:3A:F5:B2
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137372e3130342e3230382e302f32302d3234203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:06:f3:8d:bd:53:77:5f:56:02:21:a5:90:3e:83:c0:b4:b3:
         42:26:02:9a:b3:b1:31:11:fc:fa:25:85:9d:a1:ef:db:a0:ca:
         97:eb:6d:49:28:64:e3:9a:2c:a9:54:8d:7e:ec:fd:61:96:da:
         75:34:9c:39:99:25:e2:ed:73:02:a9:f4:cd:a5:8a:b0:9a:cd:
         5a:30:9a:7e:d7:ed:ea:84:30:30:83:51:fb:48:b1:44:7b:f3:
         57:5d:d3:1c:10:fe:4d:39:e7:fb:4d:f6:fe:d3:14:45:dd:8b:
         df:8d:74:8e:79:b3:03:0c:55:4f:e9:d6:95:b8:93:cd:a7:c3:
         15:1c:a0:5f:92:70:3d:f0:3c:73:24:2b:26:da:3c:05:e3:85:
         51:60:42:5c:82:2f:16:c7:ae:bf:a3:ad:b1:d4:02:85:26:36:
         fc:17:6f:60:08:82:df:b4:eb:5f:26:e6:38:4b:f2:5a:24:84:
         25:20:f2:af:bf:b3:76:b3:b1:96:95:8a:25:5d:da:d3:5b:54:
         ce:9b:73:b2:10:25:dc:d5:00:cf:e7:d6:02:44:17:f1:f2:c5:
         18:bc:16:a9:a3:85:cf:e8:f3:74:8b:99:b8:45:d9:d0:14:d2:
         c7:92:27:fe:c9:7b:07:51:45:17:83:39:11:60:be:8b:64:69:
         dd:b1:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:33 2025 by rpki-client on console.sobornost.net