Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa
File:                     3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (raw, json)
Hash identifier:          HXu5G76PoDswbja89zEnvWItivYXQ47CjdxozDjgRyo=
Subject key identifier:   5F:A2:91:0E:61:04:5F:1B:B7:39:EF:A9:1F:CC:A5:9F:48:C8:A8:E7
Certificate issuer:       /CN=3B323E2B6F70952EDC5BF6F9E68B220D04C813CB
Certificate serial:       3D3FD5DE64922B07C898802A12CC8D9E804BBDFB
Authority key identifier: 3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa
Signing time:             Thu 02 Jan 2025 18:52:54 +0000
ROA not before:           Thu 02 Jan 2025 18:47:54 +0000
ROA not after:            Thu 01 Jan 2026 18:52:54 +0000
asID:                     271216
IP address blocks:        177.36.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.crl
                          rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 16:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:3f:d5:de:64:92:2b:07:c8:98:80:2a:12:cc:8d:9e:80:4b:bd:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B323E2B6F70952EDC5BF6F9E68B220D04C813CB
        Validity
            Not Before: Jan  2 18:47:54 2025 GMT
            Not After : Jan  1 18:52:54 2026 GMT
        Subject: CN=5FA2910E61045F1BB739EFA91FCCA59F48C8A8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:be:4c:8b:31:39:f2:42:ad:2c:25:5e:28:
                    44:ec:fe:df:81:bb:b3:92:fa:f3:74:03:aa:e9:cd:
                    c8:0a:64:1a:12:a6:a0:3d:45:f6:55:c9:13:29:fc:
                    8f:52:bd:cd:98:53:66:55:fd:11:56:da:e6:cf:fb:
                    55:54:a8:a2:52:14:e1:0e:81:6f:50:52:a8:e9:90:
                    ed:bf:a8:84:3f:b1:8f:ae:0a:14:c9:6a:2e:74:f1:
                    55:8b:e6:8b:16:a0:a5:17:fb:5b:fe:6e:a4:c3:e3:
                    a3:54:80:19:e0:c1:c2:54:3b:23:6d:b1:68:5a:8a:
                    f9:9d:ad:09:6a:c4:ab:a3:0b:8c:ec:56:d8:16:23:
                    e0:54:0b:13:23:f1:74:e3:bc:22:ba:90:e6:a6:74:
                    84:94:53:5e:ba:2d:97:57:e1:a5:2b:d0:9d:83:f6:
                    ac:66:a9:b5:b9:c0:47:46:f9:f1:4a:d1:f1:ca:95:
                    61:35:17:c3:b6:2a:94:63:d8:c5:45:e7:b3:ca:4b:
                    ea:a0:f6:e6:4f:79:39:3b:1a:27:ff:a7:74:91:cb:
                    9f:ed:55:ce:0a:92:55:7c:23:3e:5d:7c:f1:e6:fb:
                    76:66:e0:7c:c8:d7:d9:82:94:81:da:d0:35:b0:3e:
                    fe:c8:9d:6b:5e:99:a0:c2:8b:5d:a2:96:c0:4c:24:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A2:91:0E:61:04:5F:1B:B7:39:EF:A9:1F:CC:A5:9F:48:C8:A8:E7
            X509v3 Authority Key Identifier:
                keyid:3B:32:3E:2B:6F:70:95:2E:DC:5B:F6:F9:E6:8B:22:0D:04:C8:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B323E2B6F70952EDC5BF6F9E68B220D04C813CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:7d:3a:55:5f:44:46:81:fe:9f:7a:28:1a:4b:35:82:7d:e3:
         9b:0a:63:58:19:3b:5a:67:8e:4b:c1:44:04:31:4a:23:12:5c:
         0f:c3:f6:60:21:38:44:8b:66:ef:77:39:2c:4b:57:78:9e:23:
         77:a4:bf:78:02:fb:53:fd:7e:bc:af:f8:f1:67:11:df:40:83:
         59:b9:82:24:a6:94:91:de:b7:bf:18:0b:1b:93:87:a9:8d:f9:
         5e:90:b6:ac:0f:c6:80:6c:e5:42:a3:3d:16:26:7b:78:96:78:
         da:94:be:2f:13:60:6d:91:9a:75:53:77:07:16:2d:fd:98:5f:
         f2:04:7e:33:57:0f:43:0c:1d:69:b9:b3:9a:18:f2:7b:9d:e0:
         ab:7c:41:3e:44:1c:82:1a:b4:69:7b:c9:85:2a:e6:4a:82:a7:
         ec:b2:77:18:53:a3:a8:35:ea:ab:88:72:50:6a:b7:89:e7:fc:
         bb:a6:e9:ba:d3:5f:a6:da:6a:e9:8d:11:6f:2f:dc:d8:3e:d3:
         ce:c1:97:06:df:81:f3:d0:8e:86:df:c0:f7:5b:29:14:c2:b0:
         74:2f:37:ea:f3:e1:13:d6:ef:87:fd:74:f7:ec:43:d2:6a:ab:
         6a:47:e6:7c:fd:e1:93:ed:81:ca:f0:ba:42:f5:95:6b:7a:bd:
         ba:e1:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 17:43:13 2025 by rpki-client