Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa
File:                     3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa (raw, json)
Hash identifier:          sRm7tCeNR9AKyjYi+221sHBfXOQUqvz3R2srAWXJRl4=
Subject key identifier:   C6:75:1F:5B:0C:50:8A:E2:CA:08:A4:6C:7A:DE:99:C5:A3:8D:20:CF
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       515AF56170ACFABDB912C811FBACCF5263530500
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:54 +0000
ROA not before:           Wed 03 Apr 2024 19:58:54 +0000
ROA not after:            Wed 02 Apr 2025 20:03:54 +0000
asID:                     52685
IP address blocks:        177.136.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5a:f5:61:70:ac:fa:bd:b9:12:c8:11:fb:ac:cf:52:63:53:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:54 2024 GMT
            Not After : Apr  2 20:03:54 2025 GMT
        Subject: CN=C6751F5B0C508AE2CA08A46C7ADE99C5A38D20CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:73:d3:8f:93:32:e5:4a:59:3d:34:4f:f9:
                    cc:6b:00:ec:fa:00:c7:b9:74:93:26:ad:b6:0a:8f:
                    60:6c:a4:8c:90:30:7e:8a:40:d0:54:29:a8:a5:30:
                    eb:bf:74:60:69:55:26:8d:15:1b:4b:e4:bf:1b:ce:
                    79:5d:78:ae:9f:77:80:bf:5d:45:54:9e:9b:28:39:
                    6e:a9:80:8a:1d:ea:e1:bf:8e:71:38:24:f3:a9:cb:
                    a0:3f:95:0c:b6:7a:7c:95:b4:be:84:59:57:95:90:
                    70:d8:af:31:95:d2:e2:b7:71:aa:6f:65:97:ff:19:
                    c6:fe:ee:08:70:cc:89:9c:5f:db:f2:2c:cc:6f:2c:
                    c7:21:20:ee:41:24:63:3f:19:49:14:33:b2:ea:c8:
                    52:a9:2a:15:d5:b6:a9:47:62:2a:fc:28:8b:52:36:
                    c0:3a:b4:6e:86:98:f5:e6:13:08:17:7a:3b:2f:b0:
                    e2:02:e4:a0:81:5d:4d:49:ea:fb:f1:c0:7f:5d:47:
                    9a:d6:a1:9f:a0:66:25:67:36:3e:a7:53:fa:44:09:
                    f7:a6:53:05:cc:bd:de:92:c9:8e:3d:59:f4:e8:71:
                    32:54:a8:3f:81:3a:6b:20:cd:13:01:61:f9:14:c1:
                    0a:33:2f:c4:f8:0b:99:64:7e:27:0f:85:cf:40:2d:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:75:1F:5B:0C:50:8A:E2:CA:08:A4:6C:7A:DE:99:C5:A3:8D:20:CF
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231322e302f32322d3232203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:4e:20:c0:a5:73:ae:b0:28:d3:7d:2c:a6:75:63:82:da:5c:
         6e:b6:77:a4:18:de:53:f2:fe:fa:b0:07:c8:61:30:3a:cd:af:
         77:04:55:27:dc:ae:ee:1c:3b:fd:ad:ad:99:bc:dc:ac:7e:81:
         6b:69:d7:1c:11:80:af:38:16:0c:ec:82:ad:57:e1:aa:3a:fa:
         f5:ba:26:31:2e:b8:40:df:d9:07:fe:32:0b:05:a3:5a:88:d6:
         d4:d2:53:83:d6:b7:1e:c8:e5:98:64:ac:79:7e:50:12:8e:d3:
         f3:f9:5f:b2:bc:fc:a6:6c:56:71:c6:53:5b:8d:f4:27:b9:5b:
         77:1d:e7:6b:bb:74:08:b6:27:d1:26:d5:4d:15:96:7c:86:cb:
         d8:20:3f:bf:c0:30:11:08:dd:05:08:a0:16:c0:26:4c:ec:27:
         f6:fe:c5:cf:55:76:74:13:fe:87:d9:87:d0:e8:f7:63:a6:41:
         e3:a9:82:81:10:db:e5:35:8b:e0:a1:79:7a:a0:92:7d:a1:f9:
         1c:6e:73:cf:f9:69:ff:9f:83:c2:f1:e1:1d:a2:1d:48:9a:a8:
         d2:18:f0:94:47:2b:e7:01:02:1b:4a:fa:20:ce:b2:6c:7f:16:
         da:59:06:88:3a:02:ad:3a:fc:3d:bf:56:8e:eb:71:f5:8d:e7:
         bd:ba:cf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org