Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e342e302f32322d3234203d3e203532383731.roa
File:                     3137372e3133362e342e302f32322d3234203d3e203532383731.roa (raw, json)
Hash identifier:          53/3n3ojnETUC7lmGcjFNXF6ic+zzaaKt76Jas4Gpgk=
Subject key identifier:   D5:7F:DF:33:6A:E2:58:7E:30:C4:CD:85:6F:A4:A5:B6:93:89:76:98
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       4188E422DF22913F2D5DBD886A14732177A53810
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e342e302f32322d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:23 +0000
ROA not before:           Wed 05 Mar 2025 23:35:23 +0000
ROA not after:            Wed 04 Mar 2026 23:40:23 +0000
asID:                     52871
IP address blocks:        177.136.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:88:e4:22:df:22:91:3f:2d:5d:bd:88:6a:14:73:21:77:a5:38:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:23 2025 GMT
            Not After : Mar  4 23:40:23 2026 GMT
        Subject: CN=D57FDF336AE2587E30C4CD856FA4A5B693897698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:1a:7c:6c:31:46:f9:5b:73:2b:e5:6a:f2:
                    7f:83:a4:3a:01:8c:e8:74:80:54:08:e6:3e:2e:05:
                    01:02:eb:13:b0:4b:bb:34:02:79:ab:4a:b3:35:8f:
                    62:6b:af:4f:58:5f:e1:15:65:31:ee:79:47:cb:e5:
                    99:97:f8:fd:97:4f:d3:d5:31:cd:0a:54:9b:20:6a:
                    cc:67:76:30:f7:cf:7f:f5:9f:66:25:6c:4c:b9:88:
                    b4:fa:f8:c5:5c:c3:a5:cf:09:f2:0a:53:cf:00:50:
                    05:b1:40:df:b8:be:7b:83:cb:5d:86:45:ae:32:f4:
                    fd:2e:40:11:05:88:e4:f5:4e:de:a9:e3:5f:32:ec:
                    1d:23:9e:6e:87:45:d1:4e:c2:15:30:84:9f:ab:81:
                    6d:dd:63:bf:8c:8c:2a:15:76:1b:69:cf:f0:32:cf:
                    3a:92:68:ee:e3:6d:f2:39:99:ef:61:bf:aa:22:98:
                    d1:73:df:af:02:eb:46:f2:9e:dc:a2:77:10:19:88:
                    fc:45:bc:85:22:37:a2:9b:25:88:c1:13:7a:96:23:
                    92:08:f0:cf:83:a9:fa:9b:80:5a:db:59:94:56:5a:
                    0b:cf:39:98:e9:6f:ed:a8:1f:4a:d1:4d:be:19:d9:
                    29:f9:5f:64:0d:c1:d4:bc:15:30:62:a9:bf:d8:fc:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7F:DF:33:6A:E2:58:7E:30:C4:CD:85:6F:A4:A5:B6:93:89:76:98
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e342e302f32322d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:7d:73:22:34:d5:8b:cc:f3:91:f0:46:74:28:f5:90:0d:58:
         e5:59:66:28:d2:a1:6b:8c:39:cc:8e:b6:3c:52:37:51:36:4d:
         93:b5:70:5a:5f:cf:b6:be:05:0f:ca:b4:8e:65:98:bf:14:46:
         a8:3b:c9:ed:e0:e9:7e:55:78:f8:ca:11:8d:43:b3:86:9c:d9:
         99:56:4a:25:a5:96:d5:e5:8c:eb:8c:95:bb:48:88:c9:2a:05:
         b3:e4:21:f7:d1:99:0b:8d:df:41:dd:88:9d:d1:de:18:e4:e4:
         c3:34:82:bb:03:16:67:1c:a3:bd:01:20:bd:76:e4:dd:3d:89:
         ef:ae:67:04:4d:01:37:9b:01:d0:01:7d:7f:71:8a:a9:47:34:
         af:b9:6e:44:ac:a6:2f:d4:47:b5:12:34:60:a5:70:2f:9f:1b:
         55:82:3a:a0:c4:a0:8f:a1:7c:85:52:db:08:3e:e1:b9:6a:9f:
         d8:bf:e4:8f:22:1a:1a:c7:6a:4b:72:44:61:4f:23:d8:c6:59:
         fb:47:c1:85:8c:ee:3d:e4:1c:f6:6b:40:3e:20:b7:9b:16:ef:
         49:0e:bf:4a:d7:30:99:3e:7f:07:0b:26:6e:c9:11:44:c7:8f:
         0d:dc:1b:9e:7a:a5:04:81:c6:33:a5:73:74:f9:0d:6e:cf:ba:
         58:53:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:05 2025 by rpki-client on console.sobornost.net