Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa
File:                     3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          2IYWyJCSbFpqbY8tB49pL6W9hGHtjFFy5+7Kz+Nd5DU=
Subject key identifier:   AF:F6:F6:56:21:8E:F5:AF:67:CB:F4:3F:BA:21:AE:91:97:C1:E8:FA
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       407708526E8A10DDA78AC9FEDBF19C696FE2F3DF
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:56 +0000
ROA not before:           Wed 03 Apr 2024 19:58:56 +0000
ROA not after:            Wed 02 Apr 2025 20:03:56 +0000
asID:                     52685
IP address blocks:        177.136.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:77:08:52:6e:8a:10:dd:a7:8a:c9:fe:db:f1:9c:69:6f:e2:f3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:56 2024 GMT
            Not After : Apr  2 20:03:56 2025 GMT
        Subject: CN=AFF6F656218EF5AF67CBF43FBA21AE9197C1E8FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:84:55:0f:39:62:e2:d9:84:a3:67:ad:85:09:
                    6b:48:37:28:d1:b7:64:9d:1f:00:af:eb:4f:2b:5a:
                    82:30:2a:92:9e:7b:88:f9:15:a8:55:14:fd:47:7c:
                    39:32:b1:42:60:8d:0e:6f:25:5a:8d:ff:38:b2:27:
                    6c:1e:dd:1c:b9:28:c8:e3:c0:fa:d3:ba:83:10:da:
                    45:ec:0b:7e:aa:40:4f:04:58:c8:6e:d8:3c:d6:91:
                    3d:b7:9b:18:d4:9c:28:f0:be:6a:88:9e:25:ac:dc:
                    1d:37:52:cb:8e:ba:9c:fd:55:de:77:46:ff:fd:b8:
                    40:18:78:a0:ef:24:c0:f3:3c:ba:c4:3c:63:53:bf:
                    d0:34:d6:a2:6f:6c:cd:c4:00:86:28:ad:58:51:79:
                    92:a9:fe:39:99:b0:89:c8:c9:33:a2:a2:10:6c:6f:
                    de:21:5b:44:63:0f:84:09:43:ab:a7:80:72:02:24:
                    71:63:f9:a4:ea:aa:d0:d7:be:73:a4:1f:ad:e5:ec:
                    70:b9:51:ab:fd:2a:11:03:a0:0d:a2:c5:8d:be:29:
                    89:0e:93:85:0c:d6:c4:95:68:70:46:f9:1c:6a:1a:
                    48:aa:a2:a5:eb:8c:14:3c:32:6e:84:84:bb:1c:46:
                    96:13:20:26:55:e0:f3:2e:fb:be:f8:e0:ad:6a:f1:
                    b2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F6:F6:56:21:8E:F5:AF:67:CB:F4:3F:BA:21:AE:91:97:C1:E8:FA
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231332e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:02:eb:e3:54:3c:46:4f:41:b9:8b:39:c4:ce:79:f6:ca:70:
         f8:19:bc:57:0f:3e:91:ac:56:9d:e7:53:d0:20:63:12:13:66:
         5c:ec:7d:b9:f9:fb:0c:a6:86:ca:00:23:6f:b3:bc:6f:85:00:
         e8:be:ca:e3:b6:db:99:64:e7:72:d6:12:60:3d:4a:f6:68:ec:
         f8:d4:aa:96:9c:a2:de:52:42:41:23:d9:c9:82:56:cb:38:d7:
         b1:1e:df:5c:aa:f1:bd:d9:3b:0c:96:a9:a8:42:6d:da:cb:50:
         49:de:49:1c:82:b1:0e:07:8b:fa:2c:6c:d0:f4:f2:8f:fe:c0:
         e5:c5:fb:1a:4a:b6:bc:7a:bd:32:3c:c5:e0:72:1d:24:21:1d:
         e4:5f:0c:6b:e5:b7:6f:dd:26:df:af:f9:c2:f1:56:4f:9a:5c:
         53:06:9b:d8:10:99:e2:67:26:fb:50:ae:3a:b8:4c:4e:81:a7:
         fa:0b:66:84:76:f1:5b:2f:16:79:77:7f:5d:4a:c2:6f:e3:e8:
         07:fe:b3:42:de:d1:db:07:fc:bf:ac:b2:d7:5a:31:09:36:0d:
         34:bd:a4:2d:af:b7:25:17:d9:cf:af:8c:c9:57:82:6d:9b:9a:
         1c:c1:ba:ac:9d:6a:a4:9b:d4:4f:3a:30:f3:f2:bc:31:f1:3c:
         ac:bc:dd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org