Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e302e302f32332d3234203d3e203532383731.roa
File:                     3137372e3133362e302e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          gy2/daXXHWnK7UTGBV+HxC7X0eGS227A+3nekpLlBKc=
Subject key identifier:   84:46:FF:F7:6D:1A:42:59:96:F4:C1:3C:41:CF:1D:DF:83:95:48:9B
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       41EBF708D476DFED8014099D46943B7B06164D1F
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e302e302f32332d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:23 +0000
ROA not before:           Wed 03 Apr 2024 23:07:23 +0000
ROA not after:            Wed 02 Apr 2025 23:12:23 +0000
asID:                     52871
IP address blocks:        177.136.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:eb:f7:08:d4:76:df:ed:80:14:09:9d:46:94:3b:7b:06:16:4d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:23 2024 GMT
            Not After : Apr  2 23:12:23 2025 GMT
        Subject: CN=8446FFF76D1A425996F4C13C41CF1DDF8395489B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:33:81:4e:8b:86:da:0b:70:48:d7:0b:c0:ab:
                    77:d8:5c:d0:e3:38:df:f5:91:a6:5d:59:c7:3c:71:
                    44:8d:78:17:66:c1:85:6d:e1:89:ef:88:ac:dc:a1:
                    c4:17:45:70:57:da:82:96:d4:5a:2b:90:c6:81:b9:
                    df:09:b6:18:aa:35:d6:73:2f:b0:2a:01:54:57:e7:
                    13:04:c2:dd:2e:f2:f7:db:42:e6:a4:58:b9:d8:39:
                    bf:a8:7f:4f:d4:c8:a8:5d:dd:44:95:f1:1c:d6:8e:
                    9f:78:04:1b:bb:2c:f0:58:2d:08:88:ec:43:b4:06:
                    f8:3d:cf:72:cb:ce:03:40:ab:18:48:bc:4b:3c:45:
                    e7:8c:f5:12:46:76:db:ab:f7:ff:31:b4:3f:dd:18:
                    81:8d:43:35:48:c1:39:88:4c:13:51:3a:dd:51:24:
                    86:c3:03:a4:0e:52:a4:9f:e3:80:8f:61:ed:bd:0e:
                    1d:9c:9f:db:1d:58:ec:c0:0c:a6:f4:0d:69:74:99:
                    15:5c:a7:e6:fc:89:98:9c:19:6a:fa:03:30:a5:17:
                    80:26:11:a1:bc:a8:dd:9a:90:01:c5:dc:06:34:59:
                    86:f9:26:94:47:80:04:1d:24:b9:9d:df:15:e8:90:
                    9f:27:b6:29:13:86:a1:c6:42:6a:ee:f8:98:31:26:
                    5f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:FF:F7:6D:1A:42:59:96:F4:C1:3C:41:CF:1D:DF:83:95:48:9B
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e302e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:9a:61:36:00:af:e4:d9:b3:5f:08:a3:56:00:69:ec:33:
         c2:4f:f8:4f:04:62:af:f2:ee:9b:06:f5:49:50:98:95:95:89:
         fe:8a:e8:70:29:a9:6f:24:92:50:45:b6:8e:51:79:f7:a5:86:
         66:c0:94:b7:27:d3:a4:78:e3:a7:82:bf:0f:83:95:a7:c5:44:
         28:f0:e9:00:97:1b:8c:de:e4:49:f1:47:1b:41:1b:2e:7f:64:
         fd:72:98:38:e7:b3:41:1b:d6:cc:1e:aa:00:56:fb:ac:a6:92:
         e5:9b:51:bf:ca:cb:07:e0:16:f8:dd:e0:2e:ea:1b:e2:6e:3e:
         65:37:f7:33:03:3c:f5:61:30:fd:dc:cb:f3:75:f9:7b:61:dc:
         e9:bf:f8:6b:73:58:02:af:c1:6e:25:4e:41:33:42:2e:3e:dd:
         0a:32:cc:b8:c0:51:35:05:b5:20:bd:dd:ad:ed:35:a5:a5:a9:
         1a:68:d8:fc:b0:36:a0:9e:f6:88:41:e8:1b:22:e1:72:81:9b:
         67:27:43:e2:b3:95:bd:a6:c4:bb:4f:41:f4:f5:4c:94:eb:5e:
         6f:f8:e7:61:3d:54:58:1b:7c:d7:31:6a:e6:76:04:3e:ac:92:
         ab:73:2e:48:13:6d:3b:a2:cb:f0:ee:cf:f9:e2:43:a7:94:0c:
         ed:1e:88:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:57 2024 by rpki-client on console-ams.rpki-client.org