Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa
File:                     3137372e3133362e34372e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          bBEAz8cpPU0H/MOEKGHznPn+GFltFdhK9UyUDuY/oD4=
Subject key identifier:   88:7B:D6:9D:4E:62:F6:D7:0C:AC:B9:14:8D:74:B8:CD:E0:E4:EF:F1
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       45891EAE179B69735D0B4A41B13F5145C6307A27
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:25 +0000
ROA not before:           Wed 05 Mar 2025 23:35:25 +0000
ROA not after:            Wed 04 Mar 2026 23:40:25 +0000
asID:                     52871
IP address blocks:        177.136.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 07:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:89:1e:ae:17:9b:69:73:5d:0b:4a:41:b1:3f:51:45:c6:30:7a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:25 2025 GMT
            Not After : Mar  4 23:40:25 2026 GMT
        Subject: CN=887BD69D4E62F6D70CACB9148D74B8CDE0E4EFF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:a8:85:af:95:c7:41:08:df:7d:b9:66:b2:
                    61:74:a9:d1:c4:0b:2f:2f:39:60:56:8c:5f:2c:f7:
                    78:a9:3b:83:88:2a:5b:c3:78:e0:53:04:b3:a4:de:
                    16:b8:25:1d:4d:9c:14:8c:f8:09:e2:8c:b8:bf:43:
                    73:07:5b:df:5d:63:d5:42:e9:e5:fc:f4:b9:4c:26:
                    42:78:c2:49:78:a6:37:6a:89:63:50:84:79:c0:c1:
                    05:11:b0:5b:03:d5:c1:35:ac:43:59:98:15:de:ff:
                    0d:23:54:3b:37:c6:89:78:78:99:8b:21:1b:a2:91:
                    59:89:0b:a7:73:df:06:50:08:67:fd:5e:44:00:af:
                    f7:2b:ab:39:54:7c:9a:1e:9d:0d:cb:16:f9:38:78:
                    f3:68:d3:f2:ed:39:4c:7e:ca:1b:b5:47:23:e3:55:
                    da:f5:b1:1f:ae:a0:8b:23:d9:ea:ab:bb:aa:d6:f1:
                    1c:14:76:2d:6b:60:43:28:b1:b6:0e:fa:5c:9d:90:
                    1d:4e:26:f0:d9:e4:d2:b7:4f:46:9e:46:23:aa:fa:
                    10:bd:0d:c8:08:d8:8b:ef:96:9d:f3:5d:e3:59:84:
                    67:b4:b0:80:b6:a9:12:0e:f0:85:33:a0:a3:cd:b3:
                    42:2c:59:2b:e2:e8:00:8a:bd:9b:46:b0:92:9e:f4:
                    e8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7B:D6:9D:4E:62:F6:D7:0C:AC:B9:14:8D:74:B8:CD:E0:E4:EF:F1
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:4e:16:f2:4a:1f:66:d8:17:8b:91:1c:bb:00:85:5d:34:8f:
         1d:58:c9:60:6b:de:e2:eb:98:8d:a4:ed:d4:ec:ff:67:87:99:
         78:6c:d1:03:50:f1:4d:ad:a2:55:c9:59:34:a3:7a:68:dc:96:
         41:ed:d7:eb:61:70:ed:64:90:7f:6b:aa:b6:1b:4d:2b:74:4c:
         86:b3:73:f7:8b:c3:76:2a:57:52:fe:2e:43:08:9a:6a:1a:7d:
         01:e3:84:c2:3c:84:b8:ff:61:a1:97:35:2e:56:56:ad:4f:9b:
         a9:ad:01:73:52:4c:e3:30:ac:a5:5b:ad:6c:cf:ee:7d:e8:3f:
         d4:4e:4b:3d:bb:74:95:46:7c:19:4e:90:83:8c:56:af:a3:c5:
         a5:38:76:f2:4e:ef:b3:a5:36:b4:0e:12:73:4a:25:ac:4e:1a:
         40:f5:de:53:06:0f:30:29:41:33:21:ab:13:6b:b3:e4:b1:66:
         ca:e4:e8:90:4a:4c:b0:b7:a9:2c:9f:1b:98:cd:dc:2d:25:94:
         0b:9e:03:55:ca:04:ee:aa:69:9c:cc:94:0a:d1:b5:37:ec:05:
         01:eb:94:d5:96:77:68:bc:bf:4a:c5:13:51:89:a1:77:02:4c:
         11:b2:07:da:51:7f:d0:09:0d:b4:32:55:3a:63:67:bf:37:19:
         f2:fd:e3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:24:06 2025 by rpki-client