Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa
File:                     3137372e3133362e34372e302f32342d3234203d3e203532383731.roa (raw, json)
Hash identifier:          nyAQFmutHEu6ST3Dg4i0lJyJL7HEaE3xHE3ADVEDKEo=
Subject key identifier:   AB:CC:35:63:D3:36:B3:E2:D5:AC:92:83:08:FF:54:C7:E4:DA:DF:1B
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       14CE3242CFDBFEFB20D5C360D3004D8037E5A36F
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa
Signing time:             Wed 03 Apr 2024 23:12:24 +0000
ROA not before:           Wed 03 Apr 2024 23:07:24 +0000
ROA not after:            Wed 02 Apr 2025 23:12:24 +0000
asID:                     52871
IP address blocks:        177.136.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ce:32:42:cf:db:fe:fb:20:d5:c3:60:d3:00:4d:80:37:e5:a3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Apr  3 23:07:24 2024 GMT
            Not After : Apr  2 23:12:24 2025 GMT
        Subject: CN=ABCC3563D336B3E2D5AC928308FF54C7E4DADF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:43:0d:a7:45:d2:10:12:d9:4d:72:7c:ac:
                    81:3b:28:bf:c8:31:20:eb:93:99:0a:d9:d7:71:77:
                    cc:88:02:13:f6:81:e3:21:fe:bb:52:90:b2:d3:7b:
                    d3:8d:30:dc:92:ae:62:bc:65:1e:9d:c6:9c:44:ee:
                    3e:6a:43:c5:01:04:c9:04:61:8e:91:04:93:bd:af:
                    f9:4a:db:02:bb:e3:3e:95:19:f7:28:14:49:b9:0a:
                    5e:20:5a:8b:b5:cd:9a:58:46:3e:81:10:e0:56:34:
                    7b:a6:fc:81:68:da:77:79:e5:2e:fc:cb:2f:27:44:
                    7d:cd:b1:49:04:b7:58:e6:f0:3b:e9:d5:a0:7b:9a:
                    ac:2f:fd:59:34:f8:2e:57:b3:31:a5:46:23:2e:7b:
                    c8:7f:53:36:a0:99:5e:53:f5:51:f3:14:64:93:50:
                    76:f0:0a:e3:0b:40:74:73:15:34:a1:66:d0:54:db:
                    cd:6f:23:18:eb:3d:63:8f:86:6d:b8:e1:8a:bc:11:
                    96:52:39:95:54:80:2e:93:53:a6:49:84:af:ab:44:
                    28:13:de:a2:3d:1a:b1:a7:a6:98:a7:df:e1:31:98:
                    5a:c9:61:d3:38:3d:76:db:eb:bd:d9:e4:1b:fe:5e:
                    5a:ff:39:a1:87:ee:0b:26:8a:40:3e:7a:c0:22:f9:
                    9b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CC:35:63:D3:36:B3:E2:D5:AC:92:83:08:FF:54:C7:E4:DA:DF:1B
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34372e302f32342d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:e7:3b:5a:66:9b:05:33:1e:16:77:21:b1:34:37:2e:92:
         2c:31:c6:b3:15:40:8a:f9:82:9b:5b:9f:8b:cb:01:0f:ef:db:
         ba:a4:12:23:20:b1:e2:a8:03:d3:f2:9c:18:80:d9:ed:30:f2:
         cb:85:ca:59:7d:35:25:17:ab:dd:85:16:d9:63:34:fa:f5:4e:
         71:db:4f:73:36:f8:d4:fc:95:9a:49:2b:32:ab:a4:e8:3c:62:
         46:2a:68:be:18:74:3e:38:e9:e5:1b:2f:41:59:c5:09:fd:c9:
         4c:83:08:2d:d9:c3:08:77:d0:ff:fb:73:ed:4e:10:e1:a1:ea:
         b4:35:71:f6:a3:ed:52:81:25:35:78:73:be:19:fb:3d:0e:c4:
         d5:32:ff:ba:40:fd:16:24:6e:f1:71:36:08:e4:b3:fc:2b:e8:
         d6:2e:8a:40:7f:f9:2e:e3:e8:0c:2a:cc:ff:39:f4:2b:34:01:
         fd:d6:63:b2:64:9f:13:64:4c:c4:e2:e4:35:5b:17:6c:9e:80:
         fe:3d:7a:b2:0c:f4:60:9f:09:4f:b2:37:1b:a6:c6:47:6b:0d:
         fc:07:35:a3:a7:00:71:63:b2:2f:ff:c7:46:c9:4d:94:66:bb:
         8b:1d:56:93:bc:61:5a:ac:9b:16:ed:f7:10:ce:13:56:06:da:
         6b:90:0a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:21 2024 by rpki-client on console-fra.rpki-client.org