Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e33322e302f32312d3234203d3e203532383731.roa
File:                     3137372e3133362e33322e302f32312d3234203d3e203532383731.roa (raw, json)
Hash identifier:          Stcjd6ptAihLsIDc0tJ9+ws6jIOSNuUQpOcRN/1WuNs=
Subject key identifier:   EB:27:22:DA:F8:DC:57:21:3D:A4:DB:B1:A4:B8:C9:08:6B:51:B7:DD
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       4EAF7DE0F5722F4B9DE74B8635EF9EBAAC9B9E93
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e33322e302f32312d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:25 +0000
ROA not before:           Wed 05 Mar 2025 23:35:25 +0000
ROA not after:            Wed 04 Mar 2026 23:40:25 +0000
asID:                     52871
IP address blocks:        177.136.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:af:7d:e0:f5:72:2f:4b:9d:e7:4b:86:35:ef:9e:ba:ac:9b:9e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:25 2025 GMT
            Not After : Mar  4 23:40:25 2026 GMT
        Subject: CN=EB2722DAF8DC57213DA4DBB1A4B8C9086B51B7DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:68:80:54:ff:c1:58:67:c6:cc:27:62:5e:75:
                    a5:f8:82:15:31:67:de:0c:1d:06:76:af:67:88:84:
                    b3:71:d6:6a:4e:e4:03:39:4b:db:95:d5:4c:f3:11:
                    33:67:df:6d:38:3c:c4:59:67:59:ad:0e:c0:9d:85:
                    c5:64:47:53:a0:78:ab:3d:46:10:97:39:3f:74:03:
                    56:b4:d0:67:9b:6d:83:69:67:bf:70:8f:1b:72:63:
                    43:b8:00:15:d7:04:78:2a:ff:76:2c:52:84:25:2c:
                    f9:d6:28:39:79:ed:e9:84:dd:b4:2d:68:83:3f:f1:
                    19:a6:ab:b5:65:31:d0:1b:b7:e2:a8:ff:d1:40:41:
                    c6:54:2a:4a:66:4c:06:ca:49:0d:fb:d7:c3:4f:d2:
                    bf:60:ee:2c:a3:06:0d:db:58:c6:2e:9d:56:86:2b:
                    da:68:6d:a1:5c:c2:1c:b4:ff:24:93:6c:5e:78:8b:
                    76:ee:d0:4e:c7:d4:96:fc:a9:b4:c7:4c:b0:9e:49:
                    36:36:ac:24:5e:5c:b1:37:84:d9:63:e1:54:78:a7:
                    a0:45:e0:1a:2f:b4:32:7a:69:e4:e6:63:c5:99:7e:
                    0c:58:01:af:d5:41:8c:2f:40:12:37:9a:90:1d:2b:
                    9c:01:45:69:7b:28:65:e3:ab:87:48:ce:ed:7a:86:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:27:22:DA:F8:DC:57:21:3D:A4:DB:B1:A4:B8:C9:08:6B:51:B7:DD
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e33322e302f32312d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:5a:11:6e:a9:7c:cc:6d:09:08:45:4b:b4:3d:39:c7:d7:92:
         b5:0b:3e:4c:eb:ef:23:78:da:92:de:15:b8:43:72:74:ee:98:
         fd:24:95:eb:a5:69:7a:e6:54:f7:1a:bd:fd:b1:9c:e4:1e:16:
         9a:2a:25:f7:6c:ec:37:53:0c:0c:a8:3a:69:d7:df:aa:23:8e:
         b5:4e:e6:8b:6e:e7:20:00:fc:64:f5:6a:85:85:29:60:56:bc:
         42:dc:b4:ea:87:ad:95:ba:0f:5d:06:65:72:22:e6:77:bf:7d:
         c0:2c:03:68:c0:e8:c8:51:ba:a9:31:80:1c:a7:86:62:19:97:
         07:cc:d3:a9:fe:3e:1f:8e:57:9a:d0:68:4f:cd:73:60:99:74:
         23:cf:38:2b:e5:c0:da:11:80:a4:d6:1e:c8:53:71:7d:d3:f0:
         85:77:f2:fa:f7:b7:f8:5e:a0:c4:c3:9e:b3:8e:68:22:bd:45:
         2c:01:83:f6:79:f0:49:6e:0e:18:e2:85:5f:8c:cf:29:1e:e0:
         ea:e8:78:9b:22:28:50:7b:6c:e7:e8:da:a8:b2:07:1f:13:26:
         10:e0:d1:5c:29:86:ba:c4:3e:f6:24:eb:ba:b8:23:8e:f7:1e:
         79:5f:0c:1a:70:c1:46:6a:f5:4d:9d:40:28:94:91:1b:6d:b3:
         fa:79:40:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTq994PVyL0ud50uGNe+euqybnpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1QUQ3NjJGOTkwRjI2NjA4N0Y0NkI1QzIyRTlFQTlF
Mjg4QkY4RTAeFw0yNTAzMDUyMzM1MjVaFw0yNjAzMDQyMzQwMjVaMDMxMTAvBgNV
BAMTKEVCMjcyMkRBRjhEQzU3MjEzREE0REJCMUE0QjhDOTA4NkI1MUI3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfaIBU/8FYZ8bMJ2JedaX4ghUx
Z94MHQZ2r2eIhLNx1mpO5AM5S9uV1UzzETNn3204PMRZZ1mtDsCdhcVkR1OgeKs9
RhCXOT90A1a00GebbYNpZ79wjxtyY0O4ABXXBHgq/3YsUoQlLPnWKDl57emE3bQt
aIM/8Rmmq7VlMdAbt+Ko/9FAQcZUKkpmTAbKSQ3718NP0r9g7iyjBg3bWMYunVaG
K9pobaFcwhy0/ySTbF54i3bu0E7H1Jb8qbTHTLCeSTY2rCReXLE3hNlj4VR4p6BF
4BovtDJ6aeTmY8WZfgxYAa/VQYwvQBI3mpAdK5wBRWl7KGXjq4dIzu16hik1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6yci2vjcVyE9pNuxpLjJCGtRt90wHwYDVR0j
BBgwFoAU01rXYvmQ8mYIf0a1wi6eqeKIv44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVQzTnVzSEVzWDN1c1BVNWhocnExOVhiWWpTZmh5dHJaYTVnTUdHcGJ6
TUcvMS9EMzVBRDc2MkY5OTBGMjY2MDg3RjQ2QjVDMjJFOUVBOUUyODhCRjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzNUFENzYyRjk5MEYyNjYw
ODdGNDZCNUMyMkU5RUE5RTI4OEJGOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVUM051c0hFc1gzdXNQVTVoaHJxMTlYYllqU2ZoeXRyWmE1Z01HR3Biek1HLzEv
MzEzNzM3MmUzMTMzMzYyZTMzMzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMy
MzgzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsYggMA0GCSqGSIb3DQEBCwUAA4IBAQBGWhFuqXzM
bQkIRUu0PTnH15K1Cz5M6+8jeNqS3hW4Q3J07pj9JJXrpWl65lT3Gr39sZzkHhaa
KiX3bOw3UwwMqDpp19+qI461TuaLbucgAPxk9WqFhSlgVrxC3LTqh62Vug9dBmVy
IuZ3v33ALANowOjIUbqpMYAcp4ZiGZcHzNOp/j4fjlea0GhPzXNgmXQjzzgr5cDa
EYCk1h7IU3F90/CFd/L697f4XqDEw56zjmgivUUsAYP2efBJbg4Y4oVfjM8pHuDq
6HibIihQe2zn6NqosgcfEyYQ4NFcKYa6xD72JOu6uCOO9x55XwwacMFGavVNnUAo
lJEbbbP6eUDQ
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:05 2025 by rpki-client on console.sobornost.net