Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/3137372e39312e3131322e302f32322d3234203d3e20323633343339.roa
File:                     3137372e39312e3131322e302f32322d3234203d3e20323633343339.roa (raw, json)
Hash identifier:          hLX5wbqkwx2HkaiOzhbal3ghcKALez16hO2Rs2mTbLM=
Subject key identifier:   F6:8C:3E:C2:E0:F3:99:AE:33:AF:6C:D0:34:61:42:11:36:69:CC:A9
Certificate issuer:       /CN=35A70E253FA821C622D2A5E9A95C54F78E659073
Certificate serial:       434054BC09259ACEA2C395AD103FDA3337EBED26
Authority key identifier: 35:A7:0E:25:3F:A8:21:C6:22:D2:A5:E9:A9:5C:54:F7:8E:65:90:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35A70E253FA821C622D2A5E9A95C54F78E659073.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/3137372e39312e3131322e302f32322d3234203d3e20323633343339.roa
Signing time:             Thu 06 Mar 2025 04:26:41 +0000
ROA not before:           Thu 06 Mar 2025 04:21:41 +0000
ROA not after:            Thu 05 Mar 2026 04:26:41 +0000
asID:                     263439
IP address blocks:        177.91.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.crl
                          rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35A70E253FA821C622D2A5E9A95C54F78E659073.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:40:54:bc:09:25:9a:ce:a2:c3:95:ad:10:3f:da:33:37:eb:ed:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35A70E253FA821C622D2A5E9A95C54F78E659073
        Validity
            Not Before: Mar  6 04:21:41 2025 GMT
            Not After : Mar  5 04:26:41 2026 GMT
        Subject: CN=F68C3EC2E0F399AE33AF6CD0346142113669CCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:dd:f6:50:8c:14:e4:00:8c:dd:45:82:7c:
                    65:ff:c3:52:07:11:d3:a7:e7:d9:8b:ba:de:64:7d:
                    2b:31:85:96:19:e5:08:aa:f0:0d:d5:7f:b1:58:10:
                    6e:5d:c8:90:8a:45:ee:21:b6:37:22:9d:71:a7:af:
                    bf:73:b1:59:e5:d3:ec:32:7e:b6:61:c0:af:b3:67:
                    d8:86:03:e0:cf:fe:46:66:e0:7b:ac:dc:03:af:7b:
                    47:0b:15:29:f9:6f:f6:02:e2:4b:90:3e:4f:c0:35:
                    1e:75:3a:5a:72:02:6a:7b:61:5d:e2:88:49:a4:06:
                    e5:ad:84:22:02:46:8b:fb:59:45:4b:00:78:43:e3:
                    fe:60:f0:2b:c2:55:ab:3c:1d:ee:1b:d8:80:9a:e9:
                    fa:ac:29:ea:a5:5b:57:ff:4e:ae:03:e1:d4:64:b9:
                    06:86:c0:65:31:74:c7:21:88:87:ae:4b:7e:18:ad:
                    0f:a2:dc:3b:da:71:44:8c:5b:d7:12:29:65:d7:7f:
                    ee:37:53:87:f9:28:da:ee:20:e9:64:92:92:81:03:
                    88:27:eb:d5:3d:f0:cd:8f:64:84:a6:74:bf:73:5c:
                    99:3b:5d:a2:91:52:a6:8f:ce:07:e5:02:27:f9:31:
                    56:8c:22:25:40:6f:42:0b:79:37:2d:29:98:00:49:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8C:3E:C2:E0:F3:99:AE:33:AF:6C:D0:34:61:42:11:36:69:CC:A9
            X509v3 Authority Key Identifier:
                keyid:35:A7:0E:25:3F:A8:21:C6:22:D2:A5:E9:A9:5C:54:F7:8E:65:90:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/35A70E253FA821C622D2A5E9A95C54F78E659073.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35A70E253FA821C622D2A5E9A95C54F78E659073.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/1/3137372e39312e3131322e302f32322d3234203d3e20323633343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         f6:2e:9f:4f:10:a2:e0:11:20:5b:0e:a2:00:0b:ca:1a:84:30:
         65:30:6f:97:1d:8c:a2:99:8b:4b:d1:37:8a:e9:e8:ee:f1:d9:
         46:9f:5d:a8:0d:e3:61:b1:db:19:d6:41:94:eb:83:8e:c4:69:
         d4:f4:e9:e6:5d:5f:6c:cd:a9:91:6b:35:62:a6:db:32:58:2d:
         0e:10:c5:b5:56:f7:ee:41:f4:db:64:67:98:cf:91:fd:72:d4:
         75:a2:48:1a:d6:7c:a3:44:5b:af:11:08:be:7a:92:9d:28:f5:
         02:e9:c2:dc:64:ba:77:4f:49:67:a2:1d:36:a5:24:bd:c4:ab:
         cd:8f:63:c8:5e:bc:07:5d:df:6a:69:bf:b6:a4:02:05:23:78:
         a7:f7:d9:6e:70:22:4f:66:6f:93:8f:23:c0:b0:fb:66:c9:2b:
         98:6b:4b:63:9b:37:67:95:b5:a0:85:67:05:12:77:50:a4:ac:
         11:72:77:cd:34:06:b7:61:d8:e6:46:e5:cc:d4:99:b5:31:8b:
         40:78:ba:b8:b1:06:34:d8:ba:8a:b1:62:df:83:52:d7:cb:77:
         9e:35:ad:5f:2d:3b:f1:bf:7e:4a:13:74:9a:3b:48:df:c7:65:
         e1:e6:96:56:c2:9d:b2:83:a4:22:6f:10:73:11:0e:67:ab:cd:
         d5:25:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:10:40 2025 by rpki-client