Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34332e302f32342d3234203d3e203238333436.roa
File:                     3137372e3133362e34332e302f32342d3234203d3e203238333436.roa (raw, json)
Hash identifier:          ddchgq9imlDIumUfgmaRfKHKN+xcxtYL5z1UvrL6kqE=
Subject key identifier:   70:68:06:54:33:11:CB:93:5F:29:3E:4A:04:53:D1:3F:7D:65:96:28
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       07C4E43FEE6202C945FBB8E395A18DB92C9FB0A7
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34332e302f32342d3234203d3e203238333436.roa
Signing time:             Wed 04 Jun 2025 13:33:05 +0000
ROA not before:           Wed 04 Jun 2025 13:28:05 +0000
ROA not after:            Wed 03 Jun 2026 13:33:05 +0000
asID:                     28346
IP address blocks:        177.136.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 05:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c4:e4:3f:ee:62:02:c9:45:fb:b8:e3:95:a1:8d:b9:2c:9f:b0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Jun  4 13:28:05 2025 GMT
            Not After : Jun  3 13:33:05 2026 GMT
        Subject: CN=706806543311CB935F293E4A0453D13F7D659628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:f6:4c:b0:36:7d:fd:13:95:b6:02:a1:29:
                    0e:45:44:32:a6:98:82:71:23:4f:28:6e:20:45:f3:
                    9b:71:40:0e:26:af:63:98:a2:6f:c0:8a:e3:89:b6:
                    b4:4e:12:27:7a:71:c5:29:3c:fc:8f:ae:0b:f7:05:
                    48:f8:83:09:77:20:7f:77:ee:b2:ff:1b:3b:15:37:
                    ec:44:46:d8:1d:35:2a:68:98:09:33:42:b1:1b:48:
                    0a:65:8b:9f:ea:59:42:d6:48:d8:ca:2c:86:bf:41:
                    a7:68:fe:91:ca:41:c9:4d:1c:1b:65:f9:78:e3:c9:
                    72:e2:2a:65:55:e7:d9:d4:56:d2:61:57:4d:a0:8f:
                    c6:31:fd:cb:0e:34:d0:fe:55:e9:03:16:05:04:85:
                    22:dc:c1:89:40:bc:2a:46:74:a1:12:b8:18:f7:6e:
                    d1:2a:8d:14:13:fb:eb:bd:39:5b:ac:0a:27:9d:60:
                    d3:7a:e8:4f:56:19:b4:17:ef:12:4c:41:14:ee:64:
                    04:cf:88:ca:6b:e0:49:a8:cf:b4:07:6c:6a:e4:30:
                    ec:d4:b3:0e:6f:f5:f7:b8:c2:b7:9e:2f:60:7d:6c:
                    26:87:5c:bd:15:56:5f:1b:79:6c:fb:ad:f4:63:5d:
                    8e:e6:71:02:c5:11:32:45:71:aa:1a:34:f9:d7:71:
                    0c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:68:06:54:33:11:CB:93:5F:29:3E:4A:04:53:D1:3F:7D:65:96:28
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34332e302f32342d3234203d3e203238333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:dc:7d:f5:77:a3:1e:53:f1:81:76:84:ea:96:33:eb:77:1c:
         56:07:1a:1f:eb:6e:f8:d8:3a:6b:10:8b:5f:0d:10:df:17:0e:
         79:69:f4:23:79:47:7e:f9:c7:24:37:f7:98:1e:d6:65:84:8d:
         20:c8:3d:c6:6c:36:4d:a4:eb:36:2c:84:5e:07:7b:93:0d:75:
         5c:c4:31:01:b5:04:16:b6:4a:ca:bd:51:85:ff:63:b9:09:30:
         70:5a:9e:93:e9:6e:a1:4b:95:f5:79:29:80:b4:eb:5a:de:77:
         5c:1f:22:a4:2c:93:f4:9c:f5:39:a5:91:ac:14:ee:24:79:c8:
         fb:7a:b1:80:ec:fb:e6:5d:e9:ce:53:2d:93:56:ec:14:71:01:
         b3:e5:5f:ad:84:52:c9:45:e5:af:0e:5a:09:9d:1e:e9:4d:bd:
         af:87:ea:95:3f:39:c2:95:17:ce:31:0a:50:77:cb:56:89:3c:
         0a:2c:00:fb:76:86:d5:0d:66:d0:96:37:43:df:04:8c:4d:10:
         27:07:02:39:de:d4:18:99:38:9d:58:93:6b:8b:7a:33:7f:dd:
         74:6a:27:7d:72:7d:d5:b8:71:d6:a4:b1:32:87:23:d2:26:a2:
         db:49:9b:2d:50:54:a5:9f:f6:7a:9a:da:e0:39:fd:84:d0:39:
         96:2e:3c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:22:56 2025 by rpki-client