Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa
File:                     3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa (raw, json)
Hash identifier:          7lfQG60NKoq1T6CyHopcDq6j9dBEcrl1dVj4VCHrbfk=
Subject key identifier:   C1:7E:DA:FD:B5:AD:02:41:79:A3:DF:38:10:83:12:03:F5:12:67:F7
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       77E90DD98DDE6AE9F1742658FAA4524169E89B84
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:52 +0000
ROA not before:           Wed 03 Apr 2024 19:58:52 +0000
ROA not after:            Wed 02 Apr 2025 20:03:52 +0000
asID:                     52685
IP address blocks:        177.136.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e9:0d:d9:8d:de:6a:e9:f1:74:26:58:fa:a4:52:41:69:e8:9b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:52 2024 GMT
            Not After : Apr  2 20:03:52 2025 GMT
        Subject: CN=C17EDAFDB5AD024179A3DF3810831203F51267F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:d4:1f:1b:af:32:21:45:1e:3d:ba:2d:97:
                    eb:7b:d6:d0:0e:be:cf:d1:65:65:c6:9b:ce:6a:e0:
                    9b:cf:d0:d8:02:47:85:78:29:90:aa:da:66:0b:b3:
                    68:ff:4d:ec:57:00:d3:e1:ff:a8:50:f4:14:37:f4:
                    b5:b5:4c:b6:9c:8a:53:4c:f3:4c:3a:c2:30:52:15:
                    e0:0c:c8:d0:e9:1b:78:fe:6e:90:9f:80:49:70:27:
                    ce:49:1b:d2:11:1e:87:2c:80:41:1d:fa:b8:6d:c3:
                    cf:ab:d8:d0:0c:cb:89:e3:c2:52:42:e9:5d:45:fb:
                    71:d1:b2:97:8e:b7:0f:14:bc:ff:d2:96:42:df:29:
                    ff:6e:b8:21:80:94:df:7e:a8:90:9d:48:51:63:da:
                    55:7d:14:3a:58:1a:8f:54:f2:01:d3:0f:04:44:3f:
                    ce:bf:cb:70:dd:19:a3:8d:3b:54:70:30:25:0c:d2:
                    f9:58:ca:c2:32:ae:89:ca:36:6b:21:35:e7:68:5b:
                    81:e3:53:47:f0:98:2d:cf:48:f4:d1:40:ec:d2:e6:
                    c3:75:f2:aa:20:ce:2b:6d:30:bb:43:a3:19:1d:33:
                    71:d5:a0:01:d5:0d:b5:37:14:e7:b8:35:2a:18:5f:
                    7f:7e:60:b3:48:a0:d6:e2:16:84:b4:27:8e:64:1c:
                    64:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7E:DA:FD:B5:AD:02:41:79:A3:DF:38:10:83:12:03:F5:12:67:F7
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230382e302f32322d3232203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:fe:8c:20:3d:d8:a3:b9:71:91:be:b1:89:3b:3a:f1:82:a1:
         de:e1:33:8c:ee:0f:45:88:5c:56:a4:24:2a:6e:b0:fa:c7:00:
         20:e4:65:e1:98:32:11:e5:92:86:68:d6:96:cb:73:8c:66:db:
         f1:d2:a6:b9:aa:20:b5:7f:8c:c0:90:42:95:d5:dd:4c:89:a4:
         96:4a:d6:3b:a0:3a:fd:56:fb:98:03:64:ad:7b:46:f1:3f:5c:
         98:33:f3:3b:f1:3b:7b:f0:cc:f5:ac:5e:d0:45:b1:4d:8f:6c:
         0e:63:03:0c:11:20:f0:1a:82:63:17:d7:45:eb:1e:15:47:93:
         80:db:10:ed:da:24:ab:c6:3f:9c:23:a6:f1:fe:8e:9c:17:bb:
         2a:f0:a6:ed:9b:b3:89:69:b8:e2:3b:a3:dd:7f:39:03:32:24:
         cb:99:64:9d:3d:63:b2:f5:d2:db:ca:47:d2:7b:7f:e6:79:29:
         3c:85:66:e9:2e:2a:be:d7:5c:dc:04:95:0d:a5:28:30:c4:8d:
         26:79:cf:ba:0b:3d:87:b6:09:68:05:89:6d:90:e8:97:2e:21:
         be:88:a3:d6:90:d2:e1:94:40:d3:06:ee:f4:31:c3:7d:0f:8c:
         ab:92:9f:c8:03:53:c1:3a:62:b0:6a:6f:a7:ea:55:ea:e7:c7:
         a3:48:bf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org