Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37312e302f32342d3234203d3e20323730393531.roa
File:                     3137372e33362e37312e302f32342d3234203d3e20323730393531.roa (raw, json)
Hash identifier:          5T2+0XB0DlBcQ+y+y2vwtE7XEVqcQE/QcBCw+GVC2fU=
Subject key identifier:   65:F3:AD:E5:BB:18:92:D3:E5:BC:77:A3:C1:85:BB:7A:66:51:6A:91
Certificate issuer:       /CN=2855A71E150CFAB4453167F74DEE4613F739EA02
Certificate serial:       4BB6E8728B139DA49811CD84A63E7B335C7FC0E5
Authority key identifier: 28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37312e302f32342d3234203d3e20323730393531.roa
Signing time:             Fri 09 May 2025 16:54:55 +0000
ROA not before:           Fri 09 May 2025 16:49:55 +0000
ROA not after:            Fri 08 May 2026 16:54:55 +0000
asID:                     270951
IP address blocks:        177.36.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl
                          rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 00:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b6:e8:72:8b:13:9d:a4:98:11:cd:84:a6:3e:7b:33:5c:7f:c0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855A71E150CFAB4453167F74DEE4613F739EA02
        Validity
            Not Before: May  9 16:49:55 2025 GMT
            Not After : May  8 16:54:55 2026 GMT
        Subject: CN=65F3ADE5BB1892D3E5BC77A3C185BB7A66516A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:32:34:c2:0d:0d:7d:f3:6b:bb:9a:fa:9e:
                    0b:4d:b6:f7:43:d2:b1:3c:bc:69:b1:2e:4f:a0:05:
                    59:c3:41:fe:b6:a2:e1:ab:3e:c6:fe:70:6b:4d:cf:
                    6c:f7:7a:77:64:34:7a:33:34:13:fd:3d:46:57:f3:
                    75:03:a0:91:2f:1f:51:fb:6f:46:bc:03:02:ae:09:
                    2b:e1:e6:25:d8:ab:da:94:71:81:2f:5c:4e:03:8e:
                    3c:c8:f3:6c:a0:f3:1d:1f:c6:72:17:f9:eb:45:42:
                    db:8c:74:a0:a5:44:4d:83:1b:d2:85:08:b4:f1:c7:
                    ee:23:ef:2b:76:e0:c8:c0:45:36:c2:26:01:1b:6a:
                    2d:b3:3f:28:89:b6:5f:86:46:45:d9:aa:8b:17:a3:
                    d3:44:f5:95:81:7e:94:8c:c1:78:08:e9:d8:73:00:
                    0d:97:28:ab:91:ab:2d:4c:41:7c:8a:27:40:95:e8:
                    60:1e:5e:3a:38:c6:70:d8:8b:34:53:60:2b:65:b8:
                    d9:48:44:c4:e4:24:c2:fb:29:73:c2:91:1d:c9:c4:
                    99:2d:69:7d:14:6b:7c:06:8c:eb:02:cf:b8:d4:c7:
                    c2:92:17:35:1a:97:a5:76:68:70:8b:83:9b:74:de:
                    3d:7f:1e:8f:21:da:87:09:8d:5e:20:46:26:36:a2:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F3:AD:E5:BB:18:92:D3:E5:BC:77:A3:C1:85:BB:7A:66:51:6A:91
            X509v3 Authority Key Identifier:
                keyid:28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37312e302f32342d3234203d3e20323730393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:2d:4c:89:d5:5c:03:7b:0e:cb:f0:e4:1a:47:01:85:de:65:
         5e:d4:d0:ea:e4:dc:fe:92:d1:f2:e0:09:0b:71:ad:63:45:37:
         e2:0e:6b:2a:c9:5a:13:2b:79:7b:2c:c8:c9:15:f5:e8:e3:7a:
         c1:00:4d:88:cb:1f:d9:d5:8b:36:62:6d:df:10:46:f5:28:76:
         f3:31:f0:c7:05:bd:27:90:e7:d2:22:1e:4d:22:60:4f:03:d3:
         dc:17:74:e0:33:5f:58:44:6c:a1:c7:a5:da:c2:5e:46:7a:25:
         6e:96:7b:40:87:51:da:6c:3b:08:20:64:82:7b:c0:8d:f0:9e:
         fd:d4:39:27:b0:9c:91:33:78:82:2b:67:5f:f1:7b:8a:86:73:
         30:f5:37:a7:97:b0:5e:d7:51:c3:22:b0:3e:20:b9:5b:39:77:
         66:dc:6f:02:d3:3d:42:41:ba:ef:44:62:ef:a9:af:29:26:c5:
         28:df:70:40:d4:4d:ec:11:5a:7c:66:af:72:77:e1:25:88:f9:
         e7:55:03:d2:61:98:fa:4e:04:44:12:67:bb:7f:c6:81:59:66:
         60:3b:3c:f8:9a:0d:87:8f:1f:71:6b:16:e2:c4:87:3b:72:3c:
         0a:9b:47:42:94:82:d7:dc:73:9e:d4:87:b3:bc:75:46:17:4d:
         a3:f3:71:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 06:45:41 2025 by rpki-client