Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e302e302f32332d3234203d3e203532383731.roa
File:                     3137372e3133362e302e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          6CetxhPlLAgSTylwU+ivb56Le9Qg3ef1TQxygTGZUwQ=
Subject key identifier:   F0:8B:BF:13:1A:AA:77:F3:18:2E:E4:6F:E5:35:D4:A5:02:87:E9:94
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       6F987495D703EC33CCF113547279585E9DDC2B44
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e302e302f32332d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:26 +0000
ROA not before:           Wed 05 Mar 2025 23:35:26 +0000
ROA not after:            Wed 04 Mar 2026 23:40:26 +0000
asID:                     52871
IP address blocks:        177.136.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:98:74:95:d7:03:ec:33:cc:f1:13:54:72:79:58:5e:9d:dc:2b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:26 2025 GMT
            Not After : Mar  4 23:40:26 2026 GMT
        Subject: CN=F08BBF131AAA77F3182EE46FE535D4A50287E994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:b1:f4:b2:19:b1:74:99:7f:bf:ba:5f:6b:
                    98:a3:aa:47:a8:09:76:87:a0:2e:23:8d:2f:dc:f9:
                    f0:47:9c:f0:50:69:ee:84:b3:d0:e1:85:68:54:18:
                    b6:c1:b1:6c:74:07:cc:4f:e9:04:50:22:23:36:94:
                    9b:7b:b5:ef:e9:96:d2:85:54:51:2f:14:ed:ef:1f:
                    77:8a:5f:da:13:e2:c4:62:47:e5:88:26:7d:4f:38:
                    bf:e0:10:1b:7a:ec:a1:fa:2b:ea:e8:0e:e7:86:28:
                    1a:07:9f:28:86:6e:8e:90:8b:2d:07:3b:2a:f7:d3:
                    59:43:86:84:ba:f0:62:2b:42:f0:40:bc:1b:06:ec:
                    4b:f8:be:98:b0:ec:ac:41:cf:0b:c5:2b:2b:03:d8:
                    cb:cd:b0:27:8e:50:52:3a:f3:f2:f4:49:05:71:a9:
                    2c:b9:23:6d:58:6e:25:50:36:dd:1b:a2:60:d9:50:
                    fa:de:66:78:44:79:b2:45:d3:1a:1b:ea:29:87:71:
                    c2:10:28:6a:d5:0e:22:57:36:95:28:44:ff:ab:7b:
                    74:a6:8e:35:ab:12:db:5c:fe:49:2e:e4:b7:bb:8d:
                    17:1b:6a:2c:b4:68:70:49:6c:8d:72:ba:76:c0:8f:
                    98:1e:cb:05:6e:4f:9f:3c:fa:1c:9b:54:0c:f3:ed:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8B:BF:13:1A:AA:77:F3:18:2E:E4:6F:E5:35:D4:A5:02:87:E9:94
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e302e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:48:ea:6c:87:63:b9:74:1d:c2:be:5d:8c:d2:6e:b7:2d:
         57:f4:34:d2:c9:2e:36:46:0e:34:9c:e8:b9:42:92:5a:bc:20:
         57:55:c3:1b:9f:01:fd:5a:58:70:08:40:79:de:85:33:a7:8b:
         22:43:d8:38:58:7a:71:57:07:f8:45:a3:2c:a0:bf:18:6b:c9:
         0e:80:a0:41:df:ca:e9:9d:98:1d:5a:97:84:9c:6c:38:4b:4b:
         1e:b1:46:5b:7c:96:90:59:cc:b0:0f:95:d7:35:96:5e:3c:e0:
         20:9d:c9:b5:84:ed:d6:db:c7:9c:02:e1:09:35:de:5c:69:e7:
         7b:13:75:02:8d:c4:6b:2e:d4:fb:31:f6:21:3e:f9:2a:90:fb:
         b8:a6:56:54:fd:e1:c7:37:aa:62:74:2d:1d:2f:a9:31:c8:ba:
         a5:00:16:c6:c7:10:55:3a:59:63:36:fc:8b:a9:68:36:21:26:
         bd:64:c9:26:cb:c8:85:14:51:48:16:8a:76:d3:aa:c0:30:50:
         71:45:eb:6a:93:d9:a1:b1:26:85:15:3e:96:83:12:98:39:2f:
         8e:4a:c3:3b:59:a3:a4:f7:86:f7:5b:13:05:2d:a4:97:49:28:
         5e:62:ae:fc:5f:8f:ed:34:af:a5:43:f6:bc:87:17:e5:8f:79:
         5b:b6:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:05 2025 by rpki-client on console.sobornost.net