Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34342e302f32332d3234203d3e203532383731.roa
File:                     3137372e3133362e34342e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          tlqiiusBN93EwWZktgHKoPMBmr3qsH/pHjbjZrASI48=
Subject key identifier:   F6:0E:B1:51:06:69:FB:7F:DE:41:B6:11:5E:06:5E:C4:38:7E:1E:63
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       460B0BA78A3C77E307D5FCAD9F0F1DC8D120EDBF
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34342e302f32332d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:24 +0000
ROA not before:           Wed 05 Mar 2025 23:35:24 +0000
ROA not after:            Wed 04 Mar 2026 23:40:24 +0000
asID:                     52871
IP address blocks:        177.136.44.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 07:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0b:0b:a7:8a:3c:77:e3:07:d5:fc:ad:9f:0f:1d:c8:d1:20:ed:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:24 2025 GMT
            Not After : Mar  4 23:40:24 2026 GMT
        Subject: CN=F60EB1510669FB7FDE41B6115E065EC4387E1E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:69:9e:f1:ca:74:5a:89:be:60:63:11:37:
                    cc:e7:dd:9d:26:30:af:75:f5:48:f0:28:c9:80:6a:
                    25:27:34:10:3a:ee:b9:52:cf:0c:8c:f7:c2:46:33:
                    20:c7:a1:c4:4e:68:de:f9:a4:3c:41:0b:da:ef:c6:
                    0f:83:0f:df:81:66:f7:30:94:18:32:cd:11:e5:db:
                    f5:69:03:41:d7:78:fa:0e:95:8c:45:2f:12:0f:3c:
                    90:fa:51:ec:16:b3:5d:e9:69:d8:bb:67:a1:83:f9:
                    55:87:be:14:22:2e:77:77:01:e7:4e:17:67:0e:e1:
                    32:b2:b7:4e:2a:1a:c0:94:ea:be:69:3e:6a:b3:da:
                    a2:02:62:20:cc:d2:15:20:9e:6b:31:a8:a4:9e:f0:
                    06:af:4d:25:9e:3f:d1:a1:6d:31:1e:e4:85:07:3e:
                    e5:9c:84:db:2f:26:27:7a:79:cf:2b:7e:69:93:99:
                    9f:75:18:82:5d:c9:67:a8:e6:a7:2b:cc:26:96:83:
                    9e:08:be:b4:30:f1:67:75:af:f5:fd:ef:32:2a:a4:
                    ea:07:a7:93:d7:af:55:f5:a6:e8:3f:94:22:83:bf:
                    3e:70:c3:9e:ff:1f:65:34:64:4f:8a:87:6a:0a:ed:
                    a1:ee:5e:a4:0c:60:b0:ef:23:b3:d9:57:91:be:9e:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0E:B1:51:06:69:FB:7F:DE:41:B6:11:5E:06:5E:C4:38:7E:1E:63
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34342e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:14:53:98:36:0a:c6:63:af:ba:38:e2:b0:8b:5e:26:6d:0d:
         b8:fe:e6:d7:3c:2f:e5:93:08:c5:dd:e2:a1:3d:88:5d:ee:0d:
         a5:66:8e:23:02:98:15:ee:79:3c:25:e4:01:1f:eb:fa:3c:b0:
         ae:bf:81:ee:29:0a:97:27:67:d1:52:46:f8:60:b0:93:16:0d:
         9c:c6:ff:d1:7e:c5:c9:e2:f3:92:15:14:9c:fd:3a:f6:0d:52:
         99:d3:1e:a5:d3:1d:64:de:fd:00:35:c7:ba:21:d6:85:5b:8b:
         36:83:fc:ab:5f:66:ae:34:a9:a9:37:f5:79:52:3f:a2:3c:b0:
         1d:c0:52:30:43:18:b9:ae:df:4f:09:b1:94:6c:e4:38:e5:3d:
         b4:bb:45:27:3c:af:12:1b:11:ce:23:7a:a6:65:d7:c3:98:c6:
         65:5b:d4:11:ab:7f:be:8a:24:fe:8f:9f:37:83:f4:99:84:51:
         0b:42:e7:f9:aa:35:c9:1b:be:cf:22:55:67:3c:dd:0c:a7:e1:
         41:d9:75:e3:fb:f8:0f:e0:8b:13:29:8c:17:c7:26:8d:fb:53:
         63:84:dd:68:b6:36:75:66:5a:e6:69:26:36:d6:fd:23:48:bf:
         d9:1b:ef:65:11:7b:20:f8:44:65:4b:42:fa:70:b5:0d:41:8c:
         96:d8:16:5d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURgsLp4o8d+MH1fytnw8dyNEg7b8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1QUQ3NjJGOTkwRjI2NjA4N0Y0NkI1QzIyRTlFQTlF
Mjg4QkY4RTAeFw0yNTAzMDUyMzM1MjRaFw0yNjAzMDQyMzQwMjRaMDMxMTAvBgNV
BAMTKEY2MEVCMTUxMDY2OUZCN0ZERTQxQjYxMTVFMDY1RUM0Mzg3RTFFNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNd2me8cp0Wom+YGMRN8zn3Z0m
MK919UjwKMmAaiUnNBA67rlSzwyM98JGMyDHocROaN75pDxBC9rvxg+DD9+BZvcw
lBgyzRHl2/VpA0HXePoOlYxFLxIPPJD6UewWs13padi7Z6GD+VWHvhQiLnd3AedO
F2cO4TKyt04qGsCU6r5pPmqz2qICYiDM0hUgnmsxqKSe8AavTSWeP9GhbTEe5IUH
PuWchNsvJid6ec8rfmmTmZ91GIJdyWeo5qcrzCaWg54IvrQw8Wd1r/X97zIqpOoH
p5PXr1X1pug/lCKDvz5ww57/H2U0ZE+Kh2oK7aHuXqQMYLDvI7PZV5G+nsoXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9g6xUQZp+3/eQbYRXgZexDh+HmMwHwYDVR0j
BBgwFoAU01rXYvmQ8mYIf0a1wi6eqeKIv44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMS9EMzVBRDc2MkY5OTBGMjY2MDg3RjQ2QjVDMjJFOUVBOUUyODhCRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNUFENzYyRjk5MEYyNjYw
ODdGNDZCNUMyMkU5RUE5RTI4OEJGOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzEv
MzEzNzM3MmUzMTMzMzYyZTM0MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMy
MzgzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsYgsMA0GCSqGSIb3DQEBCwUAA4IBAQAIFFOYNgrG
Y6+6OOKwi14mbQ24/ubXPC/lkwjF3eKhPYhd7g2lZo4jApgV7nk8JeQBH+v6PLCu
v4HuKQqXJ2fRUkb4YLCTFg2cxv/RfsXJ4vOSFRSc/Tr2DVKZ0x6l0x1k3v0ANce6
IdaFW4s2g/yrX2auNKmpN/V5Uj+iPLAdwFIwQxi5rt9PCbGUbOQ45T20u0UnPK8S
GxHOI3qmZdfDmMZlW9QRq3++iiT+j583g/SZhFELQuf5qjXJG77PIlVnPN0Mp+FB
2XXj+/gP4IsTKYwXxyaN+1NjhN1otjZ1ZlrmaSY21v0jSL/ZG+9lEXsg+ERlS0L6
cLUNQYyW2BZd
-----END CERTIFICATE-----
Generated at Tue Apr 22 06:18:09 2025 by rpki-client