Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa
File:                     3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa (raw, json)
Hash identifier:          g9WUIRkPju6bbS1ycdg/t9Hev2dJzedgTk/JYiB5TBE=
Subject key identifier:   04:8D:E5:C8:36:D2:31:48:A5:37:28:5B:8A:57:BB:E7:1F:2E:F4:F4
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       3E5D7D7E62D0A718B460D30500E0019BA470FAAF
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:40 +0000
ROA not before:           Wed 05 Mar 2025 20:54:40 +0000
ROA not after:            Wed 04 Mar 2026 20:59:40 +0000
asID:                     52685
IP address blocks:        177.136.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5d:7d:7e:62:d0:a7:18:b4:60:d3:05:00:e0:01:9b:a4:70:fa:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:40 2025 GMT
            Not After : Mar  4 20:59:40 2026 GMT
        Subject: CN=048DE5C836D23148A537285B8A57BBE71F2EF4F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:15:e5:e8:5a:5f:5d:a2:ca:84:a5:44:d9:
                    3d:78:21:7e:db:09:67:b6:71:c1:91:50:b2:7b:9a:
                    55:43:69:c8:1e:bd:9a:00:ae:3d:21:60:a9:31:e3:
                    27:1c:d4:c1:53:0e:02:6e:50:62:ce:fc:1b:ef:d2:
                    8c:8d:8c:5b:3f:c6:20:c0:bd:b1:c4:d9:f8:e0:32:
                    c1:1b:d3:35:7a:f0:ba:18:21:50:76:12:9b:73:fa:
                    6d:b0:c7:ba:05:d5:cb:3c:98:0b:10:45:fc:6a:ec:
                    f4:86:7d:28:41:e2:3f:5a:ce:b8:41:7a:56:50:67:
                    76:ee:b4:74:7c:da:a5:52:be:21:71:05:f3:9a:7c:
                    94:28:ec:84:da:30:db:f9:85:66:57:15:30:8a:ed:
                    6c:3c:a4:ff:b5:97:cd:69:e8:cf:b0:bb:c7:77:17:
                    39:5e:ab:fb:02:5e:70:88:67:43:8a:ae:94:1c:67:
                    f0:a3:a7:f2:6c:32:6c:b3:cf:67:ce:fd:2e:7c:52:
                    9a:82:7f:56:7e:6f:ce:91:a1:87:71:b1:f6:9b:f4:
                    2e:77:0b:10:97:54:88:60:9c:93:cf:cb:1e:81:e7:
                    ff:94:b8:14:0f:14:6d:d6:ff:ce:5d:41:e3:81:42:
                    c0:e8:50:1a:96:1e:37:91:5c:98:a1:18:0f:f0:1c:
                    d6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8D:E5:C8:36:D2:31:48:A5:37:28:5B:8A:57:BB:E7:1F:2E:F4:F4
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b8:26:91:49:09:4b:87:ce:c9:18:13:73:76:c3:57:64:26:be:
         70:fd:1b:c4:99:0d:2e:0c:c7:96:18:61:0c:cd:e9:de:c8:ea:
         20:a5:7a:bc:3b:50:d8:27:14:c3:f2:9d:8d:ed:d9:06:c2:3a:
         4e:e8:63:ce:44:22:bf:b1:9a:b1:3e:e8:c9:85:66:69:d6:b5:
         ee:3e:24:cb:04:be:82:d3:fc:84:67:1a:69:f5:83:dd:44:d5:
         25:62:f4:4b:97:8d:09:e3:5e:5c:12:f2:7c:00:d0:08:4b:40:
         55:2e:2d:ee:54:90:cf:d0:d0:64:aa:f1:9e:53:76:26:5c:87:
         a6:74:4b:83:88:f5:0a:a2:93:9c:1e:37:d9:7a:88:b7:4a:69:
         6f:19:bc:49:c6:a3:31:42:ac:9e:3b:4d:00:25:7f:eb:b0:39:
         16:4b:e1:7c:80:6e:68:e0:b9:10:05:08:92:64:5f:97:60:bc:
         27:aa:1f:77:2b:78:42:66:d1:42:89:61:51:a4:91:6f:4e:1a:
         1f:2c:0a:ed:95:3b:4c:c3:b9:3d:f7:9a:22:21:23:2e:85:be:
         0d:6e:9e:4d:7d:fd:76:c6:48:ca:7e:5f:bb:24:e0:44:cf:3d:
         a6:45:3b:8b:fa:22:ba:f5:b5:56:85:37:ee:0b:9a:f3:d0:75:
         12:12:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:52 2025 by rpki-client