Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa
File:                     3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          YjzBUdgWISf7+nwVbHUbN/0m+T2vIcUHkgNrScloTR4=
Subject key identifier:   8D:E8:75:C0:22:92:47:99:87:E9:27:13:0E:8B:50:41:D2:D4:6C:83
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       4820FDE9C76CB9AF724871016E6A308E01325A48
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:50 +0000
ROA not before:           Wed 03 Apr 2024 19:58:50 +0000
ROA not after:            Wed 02 Apr 2025 20:03:50 +0000
asID:                     52685
IP address blocks:        177.136.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:20:fd:e9:c7:6c:b9:af:72:48:71:01:6e:6a:30:8e:01:32:5a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:50 2024 GMT
            Not After : Apr  2 20:03:50 2025 GMT
        Subject: CN=8DE875C02292479987E927130E8B5041D2D46C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:e6:db:90:ea:15:b3:2a:db:44:55:b2:e4:
                    c6:72:d0:0e:1c:7c:4f:d6:1e:f9:ba:4c:5b:fc:cb:
                    08:eb:dd:4d:ad:e5:8c:8f:80:15:a7:62:38:c7:1f:
                    a1:62:eb:a6:84:4d:93:6d:c7:9e:79:78:ae:5d:1a:
                    88:f6:db:72:a8:24:93:68:11:f2:cd:1b:ec:98:24:
                    17:79:74:d0:91:61:72:cb:fd:4b:ff:04:69:86:25:
                    6c:4a:bf:c9:e3:70:73:39:9b:10:ea:54:9f:99:6b:
                    a7:d2:59:de:3f:d6:12:6b:8d:11:32:9a:15:f0:9a:
                    e5:77:0f:28:d8:a1:a5:bf:63:02:1d:54:d1:ae:a0:
                    03:28:75:9f:92:a1:71:94:bf:0b:7f:d7:b6:4e:e4:
                    5f:2d:9f:9c:98:6d:a6:38:bc:64:d9:ee:39:c9:e6:
                    98:7c:3a:cd:01:77:6a:67:8e:59:5d:81:3f:70:22:
                    2d:71:73:6e:b3:d2:bf:64:24:46:47:3c:1d:b2:c2:
                    10:68:c4:e6:35:4e:66:a5:96:19:17:18:11:0e:c3:
                    76:88:08:35:e9:19:12:44:53:33:36:42:72:3a:70:
                    cb:1d:ac:14:6b:34:8a:2f:ae:2a:34:79:76:24:e9:
                    94:f3:25:82:28:0b:f4:5f:14:70:87:9f:f7:17:60:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E8:75:C0:22:92:47:99:87:E9:27:13:0E:8B:50:41:D2:D4:6C:83
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e3133362e3231342e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ce:e5:fe:3c:63:40:53:b0:9d:ed:30:60:6c:f1:1b:28:37:
         0f:c7:da:87:fe:a6:b1:1d:07:d9:e5:11:bb:5a:0b:b5:c6:f3:
         e6:5d:ab:ad:69:f0:1c:7a:66:5f:b0:32:1c:bf:d3:a4:2e:de:
         56:c1:b8:a9:11:8a:a3:d8:06:ab:55:b1:fb:5c:00:86:d3:45:
         b3:d7:8f:c7:6c:e5:99:c9:02:8a:26:ca:e5:ad:15:0a:65:62:
         42:b7:52:e9:d7:f9:f6:b3:c0:fb:1d:bf:50:c2:25:8e:da:ea:
         22:f2:1c:1f:d9:88:59:f7:6c:a0:f8:a1:8f:22:f2:7e:cf:06:
         10:87:b7:a5:cc:20:3d:b7:6e:ac:e1:5f:bf:78:71:7f:a1:86:
         e4:9f:8f:e3:5d:92:86:a0:e9:d0:ed:69:6c:c4:68:92:9f:69:
         9c:04:cf:1b:c8:92:57:0a:c0:cf:7e:8d:4f:1a:d6:95:c1:34:
         ca:9c:59:a2:ab:4b:c8:c9:8e:f9:4a:d4:47:58:c9:0a:0c:97:
         d2:e9:5a:13:a3:1a:70:8f:fe:a5:d6:90:38:2e:a9:26:57:ac:
         06:e2:9f:bf:e6:b6:f0:3a:19:ac:29:68:dc:0f:cb:30:1a:68:
         5c:fc:d7:24:05:7d:51:34:a1:ac:58:2d:55:02:ba:40:54:24:
         6c:66:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org