Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230392e302f32342d3234203d3e203532363835.roa
File:                     3137372e3133362e3230392e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          zsjHZmsWUcfeUfuaUFpwobipNG2foFMReDhoL+i+MsM=
Subject key identifier:   AA:73:77:B5:67:1A:48:51:6D:AB:39:8B:9A:A5:EB:54:DF:EF:57:6D
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       3E71B18A6C234D9E40C61E0C105A7307C1D9FFB3
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230392e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:54 +0000
ROA not before:           Wed 03 Apr 2024 19:58:54 +0000
ROA not after:            Wed 02 Apr 2025 20:03:54 +0000
asID:                     52685
IP address blocks:        177.136.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:71:b1:8a:6c:23:4d:9e:40:c6:1e:0c:10:5a:73:07:c1:d9:ff:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:54 2024 GMT
            Not After : Apr  2 20:03:54 2025 GMT
        Subject: CN=AA7377B5671A48516DAB398B9AA5EB54DFEF576D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:16:81:7b:f8:9f:2c:f4:0f:a5:38:03:b3:
                    4c:e5:d7:36:02:91:4a:73:87:13:75:50:47:bc:16:
                    d3:99:0d:fe:b8:c5:dc:1a:11:0d:07:94:8e:09:33:
                    26:53:c3:a7:86:a6:dd:66:f1:a6:ea:99:f2:45:39:
                    94:04:19:89:e8:51:f4:b1:7a:ef:cd:86:4e:00:78:
                    34:77:30:5a:da:f4:24:b2:ee:2e:04:a7:16:3b:7a:
                    66:37:df:24:44:25:16:1c:d9:d7:f9:37:09:1c:c8:
                    d7:5c:76:8c:59:da:98:b7:4f:ff:9f:2f:f4:56:87:
                    3e:83:12:00:61:66:9c:34:6a:e3:79:6b:2e:7f:7a:
                    4f:88:2a:63:3e:72:cb:6d:a1:92:76:58:16:1b:a3:
                    36:10:4b:b1:cf:7f:33:07:83:a5:99:e9:9a:c8:33:
                    71:d8:91:2f:11:a3:68:f2:a4:8a:4f:ee:2a:15:82:
                    3c:2d:26:1b:c8:8f:11:18:70:1a:3d:20:c7:56:0d:
                    59:79:ba:cd:25:6d:c0:ea:d7:fe:46:2b:1f:46:cc:
                    cf:59:82:22:81:74:d7:15:79:c9:8f:55:3a:93:43:
                    4f:e9:75:bc:21:e4:b5:3f:22:74:7d:54:e7:96:f4:
                    f7:50:98:41:15:49:7e:a2:2d:9b:63:10:1c:ea:7e:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:73:77:B5:67:1A:48:51:6D:AB:39:8B:9A:A5:EB:54:DF:EF:57:6D
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3230392e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:92:86:f9:d0:f1:70:2e:5d:88:e7:b5:7d:f2:ad:5c:d5:46:
         49:b3:6c:5b:9c:65:a5:97:67:83:ae:18:42:f7:ea:ab:d9:77:
         46:dd:78:81:b1:53:44:95:9f:76:2d:29:a8:aa:83:df:22:68:
         cd:cd:8b:26:52:fd:c6:eb:ba:4f:7d:65:79:a2:dc:28:e1:6e:
         cd:50:64:b4:84:dc:80:12:04:18:ac:da:80:08:7f:60:c6:f7:
         55:e0:c0:8a:1a:7a:84:83:26:39:89:96:fb:dc:03:98:aa:46:
         fb:50:69:06:18:e3:0d:06:16:a8:21:a6:21:ca:bc:c7:36:55:
         8a:92:c7:42:d0:58:6d:7b:5c:c3:00:d9:4e:69:ed:d8:5b:c6:
         23:2e:1b:72:1a:53:d6:7e:16:64:04:b3:57:1e:89:22:b1:40:
         c9:ec:61:a3:ab:e8:9e:10:e8:26:a6:85:0b:36:cf:ed:63:a6:
         f2:63:39:a2:98:74:09:06:ae:2b:03:ab:e3:33:7a:e5:79:0b:
         34:cc:d8:c7:ae:b2:fc:e4:75:c1:e8:21:1d:83:fd:c0:71:73:
         13:ab:ae:ef:5d:69:43:34:e4:15:f0:17:f7:73:fd:fe:b7:9e:
         40:77:0e:3d:2e:19:51:93:e5:1e:26:9a:13:dc:d9:14:79:a0:
         4d:7b:4b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org