Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa
File:                     3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa (raw, json)
Hash identifier:          cwANpg453rDveQ8qqxgcvwnB2GQuFp9h1Qs1sYTsb/0=
Subject key identifier:   48:28:82:33:F3:B2:34:7C:EA:AF:C8:A3:B0:65:4E:FB:38:89:0D:EE
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       553776109575094E98ECB5EA53871D7707023642
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:54 +0000
ROA not before:           Wed 03 Apr 2024 19:58:54 +0000
ROA not after:            Wed 02 Apr 2025 20:03:54 +0000
asID:                     52685
IP address blocks:        177.136.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:37:76:10:95:75:09:4e:98:ec:b5:ea:53:87:1d:77:07:02:36:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:54 2024 GMT
            Not After : Apr  2 20:03:54 2025 GMT
        Subject: CN=48288233F3B2347CEAAFC8A3B0654EFB38890DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1b:14:5b:12:40:b9:78:ae:1d:ac:be:d5:3e:
                    09:da:5c:36:93:85:79:43:2c:8f:4f:24:f6:29:85:
                    4b:53:d2:89:c4:93:5e:45:c8:6a:96:ae:18:b4:9d:
                    fc:ec:a3:92:b6:89:2a:ad:f2:4d:bf:0f:69:d7:c7:
                    b4:ed:98:b7:5c:d2:fe:d4:6f:48:9d:ba:b2:98:8c:
                    61:04:6a:12:4d:a4:02:b8:4b:67:3b:20:fd:9b:66:
                    36:ba:8f:25:7e:54:71:43:83:58:df:82:39:10:f4:
                    78:15:86:c7:85:5e:b0:00:e6:f3:e9:ee:a5:bd:b8:
                    7f:64:e6:3f:5f:71:b5:fe:ef:a8:e7:54:23:b5:0a:
                    e0:1c:48:f1:7d:46:1b:6e:ec:04:59:d3:f6:87:27:
                    13:c7:ef:f1:be:f3:66:b7:35:84:4c:81:d5:11:87:
                    43:89:fe:30:14:e6:ec:4e:45:9c:09:68:fd:a1:69:
                    b1:d7:f3:4b:96:2f:7f:81:28:79:69:e8:de:f2:af:
                    90:ab:f6:01:0a:8e:b7:1f:c9:9e:cd:85:d1:08:fe:
                    21:20:a1:c5:9c:2d:2d:41:28:b6:89:02:86:8f:7d:
                    1a:11:d2:d1:ad:43:6f:32:25:f5:08:01:5e:e6:37:
                    85:a1:6e:b0:85:d2:af:e7:6a:fb:97:70:ea:a7:9c:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:28:82:33:F3:B2:34:7C:EA:AF:C8:A3:B0:65:4E:FB:38:89:0D:EE
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32312d3231203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:4d:01:48:5b:a2:30:36:3f:93:e3:0b:c8:ad:39:3d:4e:f6:
         98:5f:d4:16:24:a4:48:1b:f9:11:ca:07:7a:43:a5:b7:72:14:
         20:77:7c:c8:c1:81:fd:a1:45:e5:11:36:b8:9f:13:ed:87:a0:
         dc:3d:3e:ba:cf:3e:c7:e4:6e:44:b9:82:9c:22:b9:31:66:3a:
         f4:67:5e:09:8b:2c:7e:3b:10:3b:b5:3a:b8:14:7f:62:8f:d3:
         68:b7:bb:da:be:bb:df:0f:86:d6:ea:4f:67:5e:90:dd:ae:5d:
         13:f4:ce:66:10:8a:17:28:f2:e6:96:7b:ea:0e:03:ff:2b:2d:
         83:f0:80:28:81:c4:a6:7d:f7:8c:f1:3b:2a:d1:cc:43:a5:dc:
         78:dd:67:75:82:d9:3b:3a:03:1e:95:2e:26:41:e3:36:98:e1:
         26:1b:39:ad:03:4c:92:12:b0:fc:9c:a6:74:f1:82:fe:3d:19:
         4b:a6:8b:9b:94:d3:da:52:74:42:ee:77:07:7b:c1:53:51:24:
         89:e2:b7:30:25:08:08:9f:98:e5:6c:f1:d9:3a:a0:4c:69:71:
         4a:82:25:c6:7d:d1:2b:9b:c7:8e:e9:af:c0:9d:f2:e5:be:4f:
         31:36:d2:ae:bc:9a:b9:5b:4e:f6:22:29:c7:a5:0b:01:30:29:
         ec:08:47:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org