Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34302e302f32332d3234203d3e203532383731.roa
File:                     3137372e3133362e34302e302f32332d3234203d3e203532383731.roa (raw, json)
Hash identifier:          0yAVDxLO35eumYrYoAwT3cTK3KD2TPFlrSqe9YBe/uk=
Subject key identifier:   7F:DB:96:53:8A:FA:D7:31:48:29:E1:AA:5E:93:E1:AA:88:87:8C:F0
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       2F416432FF4BF8892139D16F19165523CFF2453E
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34302e302f32332d3234203d3e203532383731.roa
Signing time:             Wed 05 Mar 2025 23:40:24 +0000
ROA not before:           Wed 05 Mar 2025 23:35:24 +0000
ROA not after:            Wed 04 Mar 2026 23:40:24 +0000
asID:                     52871
IP address blocks:        177.136.40.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 12:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:41:64:32:ff:4b:f8:89:21:39:d1:6f:19:16:55:23:cf:f2:45:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Mar  5 23:35:24 2025 GMT
            Not After : Mar  4 23:40:24 2026 GMT
        Subject: CN=7FDB96538AFAD7314829E1AA5E93E1AA88878CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:92:f7:80:2f:d7:ac:18:dc:19:62:c4:05:
                    25:34:aa:9b:00:bb:29:84:1d:5a:47:f2:12:c0:fb:
                    8c:40:bc:54:54:98:e5:74:8c:42:28:7c:c7:7b:d9:
                    4b:f8:8a:74:83:99:b2:37:60:4b:8e:e1:f0:46:29:
                    a4:7e:4d:59:13:47:4e:d0:1d:b6:c3:48:ea:18:c0:
                    29:c2:ee:bd:5e:61:ec:40:75:15:06:19:a3:22:9d:
                    b2:a7:be:ab:bf:b1:65:ec:da:08:f1:32:0d:13:52:
                    89:9f:ae:09:ff:7e:d5:0e:b9:5a:05:f8:d9:3d:68:
                    19:8b:37:30:a7:25:19:97:93:49:f6:82:97:f8:81:
                    f6:e0:b6:e8:71:a4:49:95:f8:c6:87:7e:fc:b0:82:
                    1f:78:41:2f:4a:27:15:75:c1:48:05:1e:8d:3e:7c:
                    ce:e6:e2:f0:5b:4e:de:52:8b:cb:be:7a:e1:77:04:
                    23:8c:66:bc:23:5d:c3:92:98:c8:67:c0:5e:d4:a1:
                    55:67:b7:20:5d:af:00:90:de:f4:25:48:fe:2b:ea:
                    48:b8:9b:00:72:0b:e4:87:de:c6:34:d5:7b:69:69:
                    a8:8e:63:3b:15:75:0c:81:02:cb:c7:5e:d7:f7:e8:
                    2f:00:2b:c2:40:61:21:c8:79:30:ba:0c:ca:5e:03:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DB:96:53:8A:FA:D7:31:48:29:E1:AA:5E:93:E1:AA:88:87:8C:F0
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3137372e3133362e34302e302f32332d3234203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:c4:61:1b:e6:d8:58:f8:f1:61:c5:7a:da:23:d5:11:07:e7:
         49:82:8c:e4:e4:e1:d7:53:c8:19:74:bd:e0:f7:d3:27:7f:40:
         91:7c:6b:2b:ef:24:fe:33:81:2b:7b:25:65:28:c3:ec:d6:04:
         14:56:eb:cf:ba:71:c0:c4:4f:5e:a8:d5:29:59:5c:40:00:cd:
         83:57:36:23:51:45:42:85:40:5a:97:fc:dc:17:2b:0e:a3:a3:
         3c:22:dd:b0:d0:7f:ac:89:7a:cb:50:72:18:9f:2d:91:4e:63:
         56:db:f5:05:73:8c:88:b6:0a:7e:85:09:20:05:39:2d:28:73:
         65:55:14:0d:2d:63:00:14:87:1d:9d:55:52:d9:90:db:a6:b7:
         82:fe:7f:6f:4e:c2:c3:ff:97:1f:bf:16:fa:4c:c1:85:c0:14:
         d3:db:d5:2f:1b:57:51:bc:1b:a3:cd:db:7e:55:c8:5b:28:a5:
         16:3e:9d:e5:45:1e:56:2e:95:91:04:a5:9d:af:4f:c4:6a:9c:
         16:fe:2b:4a:a6:a8:af:58:7f:68:76:dc:53:b1:2a:5f:d0:c9:
         1a:6a:63:07:6c:87:db:45:90:48:5a:03:01:a9:9a:43:cd:8b:
         f8:48:61:13:18:0a:c5:fe:8e:5d:d6:0c:94:a1:18:0e:96:d6:
         ca:55:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:24:05 2025 by rpki-client on console.sobornost.net