Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa
File:                     3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          BWD6Ci+mI84DWKJgLAAKdfFLiczTHUwlVbTpON2P4l8=
Subject key identifier:   21:D7:AD:96:A2:A5:BD:A6:E2:C8:BC:3F:8B:D9:4F:C3:40:29:AD:8E
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       48D0557C124BABAB13E2FEC7D4E3B92A41903216
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:53 +0000
ROA not before:           Wed 03 Apr 2024 19:58:53 +0000
ROA not after:            Wed 02 Apr 2025 20:03:53 +0000
asID:                     52685
IP address blocks:        177.136.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d0:55:7c:12:4b:ab:ab:13:e2:fe:c7:d4:e3:b9:2a:41:90:32:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:53 2024 GMT
            Not After : Apr  2 20:03:53 2025 GMT
        Subject: CN=21D7AD96A2A5BDA6E2C8BC3F8BD94FC34029AD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:50:80:4d:2d:09:7b:bb:a3:08:e0:f8:d6:eb:
                    ce:b0:48:1b:a8:9d:46:ee:50:f8:b4:09:f8:3f:67:
                    34:28:3d:f2:d6:ed:d2:aa:f2:5a:d8:ab:91:0d:2c:
                    7f:82:b8:bb:9d:d8:c3:4a:df:07:50:3a:6c:8b:c3:
                    81:04:b1:12:46:56:7d:0e:f3:a6:6f:83:fa:d0:61:
                    a6:ee:f8:8b:d4:a4:ef:7b:11:a8:97:08:ee:4a:1f:
                    9d:8f:e7:18:b5:8b:09:e7:3d:42:17:68:73:39:40:
                    fd:5b:4e:5d:54:1f:6d:a3:43:f3:3e:d7:d3:04:22:
                    b8:01:ef:2e:28:66:5d:30:d5:55:6e:a7:01:d6:e4:
                    46:e9:c3:28:23:4b:b5:75:b8:29:02:36:af:85:d7:
                    86:04:01:42:04:9f:a9:bf:11:c0:8f:4b:5e:9f:d0:
                    f4:fc:8d:96:b7:ea:bc:95:fc:9e:41:a5:31:7d:3c:
                    ce:81:35:8f:6c:27:90:fd:00:3d:45:25:8b:d6:a2:
                    55:89:64:5b:a5:18:a6:3c:79:cf:58:d0:5f:b0:be:
                    0a:9a:e4:7a:92:4e:6a:5b:9e:bf:94:df:80:6a:00:
                    9b:0b:31:b9:ba:e9:a4:90:56:c9:4e:87:11:d8:30:
                    6a:67:54:8f:3a:9a:db:e3:a5:59:a3:02:d7:02:bb:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D7:AD:96:A2:A5:BD:A6:E2:C8:BC:3F:8B:D9:4F:C3:40:29:AD:8E
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231302e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:e4:48:72:5c:4e:dd:1b:cc:95:e1:e7:44:41:12:9b:c4:5a:
         be:6d:ea:84:af:dd:5e:6e:66:d7:70:72:e2:38:63:e4:5e:3d:
         4c:07:98:4f:6a:1b:7d:1c:5d:f4:5b:03:08:d1:54:44:ed:4d:
         40:a7:d3:b6:ca:3d:36:1c:d1:13:19:a9:61:cc:0e:c9:e4:5c:
         a7:06:8a:97:5c:50:8c:a9:3c:ff:32:70:0c:9e:4d:c2:86:2a:
         71:f2:90:2d:15:b6:13:e5:45:48:04:6f:ee:b4:29:9a:29:3d:
         26:6b:ed:47:5d:af:b7:ea:52:ab:91:9a:93:9b:dc:33:d6:e7:
         1c:54:d8:d5:f2:47:df:8e:66:c9:0b:c7:45:29:0d:b8:7a:75:
         71:d1:8a:39:0e:cc:2a:46:26:77:67:74:9b:aa:3b:ef:07:68:
         ba:92:ec:e2:ba:d7:b8:ad:fd:42:bf:b9:66:f8:19:7d:fb:6e:
         8c:6e:19:46:63:df:8d:c8:88:c3:db:6c:af:75:ac:ce:e9:3c:
         dd:7b:b7:33:a0:f3:c4:2b:bd:1b:42:88:7d:46:86:2d:1b:10:
         e7:d9:bb:98:25:3f:fc:c5:9b:06:66:9b:98:12:ec:a8:8e:45:
         fa:f3:09:a2:63:05:88:f3:77:db:ab:41:bb:19:83:8f:b2:64:
         20:06:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org