Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e36382e302f32342d3234203d3e20323730393531.roa
File:                     3137372e33362e36382e302f32342d3234203d3e20323730393531.roa (raw, json)
Hash identifier:          7Okh+SXRNQjQa5fOkXfDbosLb0nUEjaGjU4QjG6p7dU=
Subject key identifier:   CA:C0:C1:A3:32:DE:54:B2:A8:E2:68:69:F3:FD:86:15:5C:A9:EC:F6
Certificate issuer:       /CN=2855A71E150CFAB4453167F74DEE4613F739EA02
Certificate serial:       34DE4806010E7C81B7CB85D0268DB31ED009C923
Authority key identifier: 28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e36382e302f32342d3234203d3e20323730393531.roa
Signing time:             Fri 09 May 2025 16:54:38 +0000
ROA not before:           Fri 09 May 2025 16:49:38 +0000
ROA not after:            Fri 08 May 2026 16:54:38 +0000
asID:                     270951
IP address blocks:        177.36.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl
                          rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 09:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:de:48:06:01:0e:7c:81:b7:cb:85:d0:26:8d:b3:1e:d0:09:c9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855A71E150CFAB4453167F74DEE4613F739EA02
        Validity
            Not Before: May  9 16:49:38 2025 GMT
            Not After : May  8 16:54:38 2026 GMT
        Subject: CN=CAC0C1A332DE54B2A8E26869F3FD86155CA9ECF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:21:f4:5b:55:9a:bd:65:e5:77:2d:a1:8f:f4:
                    2e:6c:2d:0c:cc:7d:ec:14:12:6f:29:6c:fc:b1:bc:
                    28:bb:24:63:4b:7e:19:71:e5:3d:e4:4e:5f:07:63:
                    56:28:4c:92:89:0e:da:da:78:5a:9c:54:7a:9e:70:
                    d6:02:6a:7e:e3:25:8d:e6:f7:5e:a8:7e:40:da:3e:
                    c1:e1:a9:07:e6:0e:1f:45:13:a2:9e:f8:cf:9b:06:
                    25:f6:96:4c:09:cc:a8:5c:70:ea:fa:7a:ee:94:2c:
                    03:69:21:64:06:83:58:6c:44:ee:17:92:6f:d0:d9:
                    65:31:38:ad:7a:c4:6d:9b:9c:4c:a0:2d:7f:1f:23:
                    24:c7:48:36:39:dc:7f:98:83:36:94:8c:b1:0e:c6:
                    98:bc:26:8b:e8:d8:84:50:98:09:ad:02:84:70:d9:
                    c0:52:0f:5a:a7:f7:d8:ad:c0:e2:cc:d8:27:ad:2a:
                    9f:5a:b1:ad:bf:92:de:60:bd:22:b9:ca:1f:db:cd:
                    39:8c:15:2f:4e:1f:68:16:5c:37:c9:81:be:35:21:
                    54:3c:d6:03:5c:04:df:8c:08:69:57:69:95:ea:83:
                    9a:97:7f:90:94:df:9d:84:af:12:31:80:53:d3:25:
                    98:13:26:3d:a2:f1:53:e0:3b:38:e9:82:aa:4d:1b:
                    ba:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C0:C1:A3:32:DE:54:B2:A8:E2:68:69:F3:FD:86:15:5C:A9:EC:F6
            X509v3 Authority Key Identifier:
                keyid:28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e36382e302f32342d3234203d3e20323730393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:5d:b1:3a:16:4e:59:93:40:f2:32:f2:6c:55:2b:cb:51:
         27:3f:dd:2b:5a:4c:db:14:54:e1:9b:4f:3d:9a:f8:d3:c6:ef:
         fe:a3:96:a7:3b:10:40:25:2c:9d:3e:bb:4b:36:b2:4d:9b:fa:
         c2:20:1a:c4:2c:8a:68:fd:76:27:c7:f2:a9:f7:41:9a:91:a2:
         c2:cc:6a:91:d7:fd:18:03:59:5f:3e:b0:8f:6b:7f:55:52:0c:
         64:8e:f9:19:d0:24:ec:0e:a9:a3:cd:16:5e:5e:02:7a:45:cb:
         8c:98:16:b3:8f:3c:96:f9:26:35:0b:12:25:25:9e:ec:fe:55:
         89:51:ab:e5:11:86:98:63:3e:7b:c2:7e:21:c9:d5:9a:ce:88:
         44:b6:41:ad:f8:f4:38:a0:ce:c1:ac:e6:07:51:35:99:27:86:
         b9:9b:32:ae:32:ab:6c:b8:c3:9f:32:57:b9:86:84:6a:08:be:
         65:db:82:a8:19:4e:6d:c4:b5:83:ce:b5:95:9c:05:61:4c:b4:
         61:a6:aa:4b:76:61:2c:a8:ea:1d:37:4f:1c:8c:6a:ba:1d:e8:
         a2:1f:ad:28:7b:50:42:3d:63:a8:9d:52:ca:50:4a:92:b9:2b:
         b3:83:a5:6e:14:5d:a5:a3:88:c7:7c:5e:af:f1:34:55:52:31:
         29:7a:6c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 14:07:16 2025 by rpki-client