Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa
File:                     3137372e3133362e31342e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          lmIuebK0muZi9lnvLKIwXzecvcPEhHV6Mw6BaCwEqIM=
Subject key identifier:   A8:33:D9:8F:65:79:AD:35:07:8C:1F:3B:55:93:BE:0D:9D:4A:B9:6A
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       4FC000FE49BA4FB92AD5FEAC3DAB2E829F88B9FE
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:23 +0000
ROA not before:           Wed 03 Apr 2024 23:07:23 +0000
ROA not after:            Wed 02 Apr 2025 23:12:23 +0000
asID:                     52871
IP address blocks:        177.136.14.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c0:00:fe:49:ba:4f:b9:2a:d5:fe:ac:3d:ab:2e:82:9f:88:b9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:23 2024 GMT
            Not After : Apr  2 23:12:23 2025 GMT
        Subject: CN=A833D98F6579AD35078C1F3B5593BE0D9D4AB96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e6:7b:32:6e:06:85:ac:bb:af:09:98:9e:05:
                    b2:6e:fc:83:eb:a9:80:22:1e:be:bb:51:bf:c5:c7:
                    9d:52:28:6e:34:15:a2:10:a9:7f:59:65:92:f3:a8:
                    df:4f:a0:79:66:fc:0f:76:a6:9c:8c:ea:f4:43:3e:
                    b8:c4:f9:2d:0c:aa:93:87:b2:88:83:6e:86:27:90:
                    76:93:b1:ef:a0:68:67:71:10:af:43:64:95:45:ac:
                    ce:8c:54:22:ac:5e:e1:55:85:1e:a5:e5:3b:7f:a1:
                    21:7e:0b:8e:dc:bc:7a:e5:e8:b2:57:c3:c4:3e:02:
                    d2:ae:48:9e:1f:b5:51:38:e0:23:04:26:df:bb:a5:
                    7c:60:18:e1:48:72:a9:ea:9a:fb:02:e9:e2:24:9f:
                    17:f6:b1:54:cd:6f:74:c3:44:48:3c:90:c6:5e:18:
                    a4:7f:bd:4a:51:69:b5:ba:84:52:6c:9f:1b:35:47:
                    66:d1:aa:1d:75:25:89:c4:89:e5:f5:56:10:19:9d:
                    8c:ec:7b:54:be:f4:51:27:a1:2d:6e:28:a7:de:9d:
                    89:8d:33:17:58:54:4f:2d:e1:b4:0e:f3:64:bf:da:
                    9a:86:e2:39:94:e8:1b:31:64:4b:1b:6b:58:e4:c9:
                    58:ba:29:00:78:79:14:5c:66:16:24:6b:8a:f3:78:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:33:D9:8F:65:79:AD:35:07:8C:1F:3B:55:93:BE:0D:9D:4A:B9:6A
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e31342e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:11:8b:85:ab:78:55:12:a8:a9:5b:20:82:e3:90:6f:9f:04:
         1c:6d:96:c3:a1:d6:7f:86:87:c1:21:f7:6d:b1:8d:40:fb:38:
         f2:6d:5e:eb:11:13:03:b0:54:f8:56:b3:df:21:8e:f1:07:f4:
         d7:01:b0:01:69:a0:f5:df:84:94:9e:c8:01:02:93:bc:fc:17:
         57:4c:a2:0d:30:2b:90:d7:af:11:8c:91:ea:b9:52:1d:12:ad:
         69:a6:b7:c2:94:eb:e6:d6:9c:5e:9c:20:3d:ad:93:c4:1d:53:
         0a:bb:67:d4:50:e0:41:c6:3f:cf:b7:9c:b5:8e:6c:9a:2b:ab:
         ba:1c:30:fd:69:ea:44:03:d7:f8:1a:66:7a:5e:d3:83:71:6f:
         61:91:bc:5d:5b:d1:fe:23:ae:63:29:e5:83:69:04:9d:b2:3e:
         f7:e0:30:91:65:e4:7f:00:75:e0:aa:20:ff:c5:08:15:4e:2c:
         eb:61:a4:0f:7a:fd:69:78:31:37:58:ef:36:e5:40:88:47:b5:
         02:a4:b8:21:15:03:65:50:51:c3:aa:3d:89:e7:7d:12:b6:ca:
         86:05:e7:0f:26:91:86:65:de:28:1f:f8:cc:ba:b0:1a:1e:4d:
         e9:79:82:86:07:93:f2:a9:49:8d:1e:fc:20:75:9a:58:55:54:
         8e:97:98:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org