Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37302e302f32332d3233203d3e20323730393531.roa
File:                     3137372e33362e37302e302f32332d3233203d3e20323730393531.roa (raw, json)
Hash identifier:          T0uisPhEBXv8mI4+ibqv1hEDBIpV4KI+/rJcBTNDy94=
Subject key identifier:   1E:26:1D:A5:36:BF:97:F7:D4:99:ED:AE:80:E2:97:23:47:BA:15:96
Certificate issuer:       /CN=2855A71E150CFAB4453167F74DEE4613F739EA02
Certificate serial:       6B5C7863388661AE884319C857A34F85DAE63504
Authority key identifier: 28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37302e302f32332d3233203d3e20323730393531.roa
Signing time:             Fri 09 May 2025 16:54:43 +0000
ROA not before:           Fri 09 May 2025 16:49:43 +0000
ROA not after:            Fri 08 May 2026 16:54:43 +0000
asID:                     270951
IP address blocks:        177.36.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl
                          rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 08:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5c:78:63:38:86:61:ae:88:43:19:c8:57:a3:4f:85:da:e6:35:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855A71E150CFAB4453167F74DEE4613F739EA02
        Validity
            Not Before: May  9 16:49:43 2025 GMT
            Not After : May  8 16:54:43 2026 GMT
        Subject: CN=1E261DA536BF97F7D499EDAE80E2972347BA1596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:35:80:0b:ff:4c:a9:f6:45:70:03:9b:b4:
                    d1:f9:0f:3d:b3:40:62:99:70:15:1e:58:f5:87:1c:
                    d8:98:7d:1a:28:35:3e:bd:7b:02:ff:6b:92:8c:e6:
                    4f:86:72:f4:d9:f5:89:1b:ca:9a:7a:4d:03:b7:b4:
                    59:bc:ce:63:1c:c0:d8:90:03:47:75:4f:e7:c1:73:
                    b7:f0:21:bf:3c:09:2a:c6:a5:cc:a5:02:73:80:03:
                    a4:a1:46:75:27:3d:be:e3:76:a5:35:d4:5f:3c:ab:
                    f9:9c:de:c9:fd:a6:1a:b7:40:b8:16:8f:68:2f:51:
                    47:19:d8:47:48:45:ce:5a:cb:25:b1:7f:51:53:21:
                    5e:64:aa:97:c8:18:15:42:b1:6f:8e:c3:c3:fe:4c:
                    32:49:d2:bd:b7:0e:04:95:71:9f:b4:32:64:6a:28:
                    10:d3:cf:ef:6f:be:7b:5f:ba:6c:c5:4f:ab:b1:21:
                    66:1a:c4:72:3d:34:04:da:90:4d:fb:9e:61:38:e1:
                    33:58:04:d7:5a:70:e6:b4:7c:a0:0d:80:d5:3e:e9:
                    8f:37:77:b3:2c:95:ff:e0:9f:67:ac:34:38:49:1f:
                    e9:98:83:6e:6a:2c:3e:f7:9e:31:4e:7c:e0:07:81:
                    2b:d0:18:b7:3f:31:63:c9:e9:1a:eb:51:66:a5:93:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:26:1D:A5:36:BF:97:F7:D4:99:ED:AE:80:E2:97:23:47:BA:15:96
            X509v3 Authority Key Identifier:
                keyid:28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37302e302f32332d3233203d3e20323730393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:3b:4d:d4:43:bc:0c:4a:25:54:4e:33:4f:30:1a:43:6b:10:
         42:d4:86:c7:24:74:a3:17:eb:3a:5b:29:89:fd:f5:45:7d:2b:
         12:da:b6:1c:7e:16:b7:4a:0d:c8:2c:da:c4:7a:5e:38:31:25:
         7a:de:81:8c:93:d6:63:80:81:af:bc:9e:9b:09:50:29:e9:df:
         47:5f:37:13:36:b1:73:51:ad:bc:5b:bd:4d:37:ab:42:31:aa:
         69:ab:74:c2:96:c9:da:9b:a0:0e:6f:be:2f:82:70:35:aa:2a:
         7c:7e:95:24:da:7e:7d:a3:e2:e8:72:23:6f:8a:5e:ee:86:78:
         1e:50:f1:e7:83:91:e0:6b:30:12:71:63:51:ac:27:09:3a:8b:
         27:8b:86:ef:3b:7d:c8:cb:38:88:63:30:69:43:5d:48:df:a0:
         02:88:e1:ec:67:5a:5c:a4:7d:89:cc:a8:7d:c5:82:53:0d:0a:
         31:8d:05:06:b7:d7:05:40:41:3f:59:68:73:cc:82:1e:5c:8a:
         8b:46:f1:d8:87:3f:9a:0f:ff:8e:26:eb:9b:cb:2b:05:85:07:
         53:ea:cc:68:e2:50:19:3c:0f:96:18:b6:78:7e:0a:89:20:70:
         d2:31:38:9b:4f:b0:02:b4:f4:28:6c:cc:0d:8b:92:14:9a:4d:
         82:94:6a:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa1x4YziGYa6IQxnIV6NPhdrmNQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg1NUE3MUUxNTBDRkFCNDQ1MzE2N0Y3NERFRTQ2MTNG
NzM5RUEwMjAeFw0yNTA1MDkxNjQ5NDNaFw0yNjA1MDgxNjU0NDNaMDMxMTAvBgNV
BAMTKDFFMjYxREE1MzZCRjk3RjdENDk5RURBRTgwRTI5NzIzNDdCQTE1OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FDWAC/9MqfZFcAObtNH5Dz2z
QGKZcBUeWPWHHNiYfRooNT69ewL/a5KM5k+GcvTZ9Ykbypp6TQO3tFm8zmMcwNiQ
A0d1T+fBc7fwIb88CSrGpcylAnOAA6ShRnUnPb7jdqU11F88q/mc3sn9phq3QLgW
j2gvUUcZ2EdIRc5ayyWxf1FTIV5kqpfIGBVCsW+Ow8P+TDJJ0r23DgSVcZ+0MmRq
KBDTz+9vvntfumzFT6uxIWYaxHI9NATakE37nmE44TNYBNdacOa0fKANgNU+6Y83
d7Mslf/gn2esNDhJH+mYg25qLD73njFOfOAHgSvQGLc/MWPJ6RrrUWalkzXzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHiYdpTa/l/fUme2ugOKXI0e6FZYwHwYDVR0j
BBgwFoAUKFWnHhUM+rRFMWf3Te5GE/c56gIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTF6Ym5Yajk4NGtMNFdrWHU4UW5CeFA5Q21XaVpKZTZFaTRwanpZRndv
cXEvMC8yODU1QTcxRTE1MENGQUI0NDUzMTY3Rjc0REVFNDYxM0Y3MzlFQTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4NTVBNzFFMTUwQ0ZBQjQ0
NTMxNjdGNzRERUU0NjEzRjczOUVBMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxemJuWGo5ODRrTDRXa1h1OFFuQnhQOUNtV2laSmU2RWk0cGp6WUZ3b3FxLzAv
MzEzNzM3MmUzMzM2MmUzNzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMw
MzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsSRGMA0GCSqGSIb3DQEBCwUAA4IBAQAzO03UQ7wM
SiVUTjNPMBpDaxBC1IbHJHSjF+s6WymJ/fVFfSsS2rYcfha3Sg3ILNrEel44MSV6
3oGMk9ZjgIGvvJ6bCVAp6d9HXzcTNrFzUa28W71NN6tCMappq3TClsnam6AOb74v
gnA1qip8fpUk2n59o+LociNvil7uhngeUPHng5HgazAScWNRrCcJOosni4bvO33I
yziIYzBpQ11I36ACiOHsZ1pcpH2JzKh9xYJTDQoxjQUGt9cFQEE/WWhzzIIeXIqL
RvHYhz+aD/+OJuubyysFhQdT6sxo4lAZPA+WGLZ4fgqJIHDSMTibT7ACtPQobMwN
i5IUmk2ClGrU
-----END CERTIFICATE-----
Generated at Sat May 17 08:35:57 2025 by rpki-client