Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e302e302f32312d3234203d3e203532383731.roa
File:                     3137372e3133362e302e302f32312d3234203d3e203532383731.roa (raw, json)
Hash identifier:          MZE6z1BN1m56jXsNDLYYYKtipuG4GiCYxDKZ48wwhC4=
Subject key identifier:   A9:0B:A8:A5:1D:A3:30:3B:2F:D4:FC:9C:7E:FE:9B:34:B5:16:47:C7
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       053CCE866A57B5B4BCC9AD5873B42B3281242524
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e302e302f32312d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:21 +0000
ROA not before:           Wed 03 Apr 2024 23:07:21 +0000
ROA not after:            Wed 02 Apr 2025 23:12:21 +0000
asID:                     52871
IP address blocks:        177.136.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3c:ce:86:6a:57:b5:b4:bc:c9:ad:58:73:b4:2b:32:81:24:25:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:21 2024 GMT
            Not After : Apr  2 23:12:21 2025 GMT
        Subject: CN=A90BA8A51DA3303B2FD4FC9C7EFE9B34B51647C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:a2:d3:92:03:5e:3f:7b:bc:46:e5:fc:6e:
                    85:42:99:69:5c:c0:67:bd:5f:ac:a5:e2:0e:cd:3e:
                    4f:b0:e0:a1:74:8a:f8:24:27:21:15:9c:53:10:28:
                    46:2c:f9:d6:7a:20:80:66:e5:dd:3f:85:b1:d0:54:
                    86:0e:a8:8c:64:7b:96:8e:66:56:7f:ef:6d:68:58:
                    eb:e1:e0:5c:83:73:65:a8:af:5d:07:20:41:e8:5a:
                    86:35:05:b7:c4:4e:ba:2f:e8:5c:88:87:e3:1a:30:
                    2d:17:1f:ad:96:88:fd:ba:8e:de:a5:e2:f8:66:f7:
                    38:72:7c:bf:6b:fd:72:89:d6:86:86:fb:57:08:b7:
                    9e:d2:d3:0f:49:39:2f:ba:b1:37:77:05:ef:a7:c2:
                    af:03:55:d8:7c:da:9f:d7:f3:a0:5e:66:50:3b:7c:
                    bf:84:9f:f1:64:dd:ed:b9:cb:7a:9f:5a:f5:6e:98:
                    4e:e5:0e:1a:be:81:8d:2e:7a:03:8a:21:98:12:2d:
                    41:f5:ab:4e:2b:88:f2:7e:aa:f0:b5:af:33:8e:58:
                    70:71:4e:f7:dc:7b:72:c5:c6:78:eb:e3:89:c7:f4:
                    98:67:06:5c:a7:54:76:53:2b:54:3a:9c:ab:c0:be:
                    69:ad:bf:d7:c3:a3:74:a7:66:33:6c:38:f5:cf:4e:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0B:A8:A5:1D:A3:30:3B:2F:D4:FC:9C:7E:FE:9B:34:B5:16:47:C7
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e302e302f32312d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:89:1e:a1:5a:1a:58:ab:53:26:b8:77:0c:8e:91:4e:93:34:
         d8:cc:7d:b6:42:51:28:b5:1f:10:c4:10:b1:e5:b1:86:6e:45:
         fd:f3:11:90:50:71:2b:f8:e3:63:ff:47:1d:0a:72:b5:ae:61:
         90:f8:62:8a:5b:b8:b9:fe:92:55:4e:78:2e:dc:45:e2:1b:7a:
         dd:40:f7:27:46:a0:14:ac:f9:59:17:c3:49:58:ae:eb:69:b0:
         6d:02:83:d3:e1:a5:43:b3:10:e2:b1:dc:84:8f:b0:57:0f:7c:
         9f:74:0b:28:9f:04:76:ce:98:cf:c5:ce:ad:a2:f0:38:d6:24:
         48:31:6f:54:b2:77:c2:e3:26:8f:4b:ab:d9:65:f2:77:25:85:
         b9:16:31:b3:50:05:d6:9c:bf:15:d0:15:e8:02:14:5d:a6:b8:
         1a:27:b4:81:f6:7a:fd:74:c3:22:80:6d:e6:c3:46:87:8d:c3:
         94:8b:9b:5d:5f:ff:91:5b:82:4c:58:24:6c:b5:e4:d2:1d:17:
         e9:94:b3:74:62:17:dc:b1:9f:4c:78:51:24:16:33:be:e3:55:
         29:b6:6d:2e:67:46:6a:dd:55:ad:1d:e3:50:80:5c:24:c8:d4:
         fd:88:54:c2:89:b8:22:1d:ea:c0:65:53:17:08:a7:1c:16:29:
         b5:86:c6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org