Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa
File:                     3137372e3133362e31342e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          9Hq2PY2O0nZaJEzw13417HWUNIFGe98Up0Gsk+6lsRE=
Subject key identifier:   51:FC:F5:F2:AF:FC:16:5D:F9:60:5B:03:DB:54:DB:11:86:4A:B5:B3
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       47F57F16FFFC3456D83D09202836479EDFFA19A3
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:26 +0000
ROA not before:           Wed 05 Mar 2025 23:35:26 +0000
ROA not after:            Wed 04 Mar 2026 23:40:26 +0000
asID:                     52871
IP address blocks:        177.136.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 07:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f5:7f:16:ff:fc:34:56:d8:3d:09:20:28:36:47:9e:df:fa:19:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:26 2025 GMT
            Not After : Mar  4 23:40:26 2026 GMT
        Subject: CN=51FCF5F2AFFC165DF9605B03DB54DB11864AB5B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:d8:29:3b:9b:bc:44:cf:d9:99:74:ff:fb:
                    aa:c9:a9:d1:4e:66:72:80:82:49:88:be:60:d2:63:
                    77:d4:64:e9:09:49:9b:05:16:d9:01:81:84:2e:d4:
                    0f:7a:04:b8:a8:21:d9:9a:14:81:eb:30:af:58:ed:
                    37:58:20:75:92:d4:34:cb:5a:ee:52:16:78:7d:08:
                    5b:fb:3c:34:9c:5c:6e:46:29:7a:be:35:ae:8b:9e:
                    32:42:a3:cf:fd:0a:29:4e:12:20:51:77:f5:2c:ec:
                    fc:ed:86:23:d1:71:c1:6a:52:f2:81:9a:66:12:6b:
                    88:72:d8:50:25:c1:e3:61:9a:d9:74:a4:2f:08:ce:
                    20:d2:b3:75:a6:eb:04:77:40:8c:97:99:b8:e7:03:
                    2f:42:01:cb:17:0a:59:f5:67:a4:3e:63:63:d4:95:
                    40:0b:0a:b6:3c:44:80:57:42:8d:e0:e4:d8:59:fa:
                    bf:e3:8f:2f:d1:69:9e:d1:f5:49:31:76:a0:8d:65:
                    7b:98:4f:ec:7b:4f:d8:af:04:d2:da:8e:2d:42:84:
                    73:7b:c6:c1:98:d4:da:bd:bf:25:bb:d2:b1:a9:df:
                    6b:c4:dd:2a:43:c3:99:89:e7:30:74:eb:74:fc:a0:
                    eb:7a:1e:8c:d1:86:ed:ab:9a:14:0c:33:ce:26:a2:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:F5:F2:AF:FC:16:5D:F9:60:5B:03:DB:54:DB:11:86:4A:B5:B3
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:15:af:1c:c9:bb:5c:1e:fa:88:46:05:6e:4e:52:de:b1:c9:
         65:52:50:56:3e:03:46:4c:ca:1e:97:d3:6a:4c:3c:61:d0:75:
         fe:52:1d:ba:a0:ee:dd:20:3b:f7:2b:25:72:91:57:74:c7:84:
         85:76:52:27:24:26:fb:55:73:c2:1c:33:3b:60:40:41:87:47:
         11:68:70:2a:ba:b4:5c:fd:7b:c1:ac:a1:60:e0:fb:03:75:90:
         91:a3:17:6c:90:cd:15:af:10:c7:d3:2d:3b:2c:1c:c6:56:af:
         46:86:80:5e:11:d7:90:68:bd:bf:0b:d5:f9:c2:61:50:62:dd:
         73:32:28:47:8f:99:da:b1:cf:39:52:fe:15:8e:69:eb:b4:98:
         e0:27:3a:b4:62:dc:38:c0:d9:e0:f5:84:2e:18:30:1e:d0:ee:
         d9:97:66:f6:4d:c5:1b:08:d9:12:9e:a7:e4:a4:f1:bc:ec:cc:
         43:1a:69:3d:ad:cc:ce:8c:d2:9d:2b:d2:ef:b8:16:28:00:47:
         0e:82:ee:a4:ef:ba:bc:bd:1b:18:13:81:d4:c2:72:6d:4e:27:
         73:99:5d:2f:0f:62:e1:51:27:3f:d0:0c:69:38:42:c5:0f:ac:
         7b:57:66:58:c5:ec:b6:63:03:38:de:df:c1:21:23:77:6d:66:
         09:f7:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:31:59 2025 by rpki-client