Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32322d3232203d3e203532363835.roa
File:                     3137372e37332e32342e302f32322d3232203d3e203532363835.roa (raw, json)
Hash identifier:          7bpPNG0LqmCE+u07IHVlJFfU+j6sI8543W1TJYdMkL8=
Subject key identifier:   BA:9B:1F:CD:CC:35:BF:86:85:54:43:9A:2B:57:52:B7:FF:5D:C5:EA
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       27EB9EFEA01721D0661BEFAB999EDD55DBF7F9FA
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32322d3232203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:54 +0000
ROA not before:           Wed 03 Apr 2024 19:58:54 +0000
ROA not after:            Wed 02 Apr 2025 20:03:54 +0000
asID:                     52685
IP address blocks:        177.73.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:eb:9e:fe:a0:17:21:d0:66:1b:ef:ab:99:9e:dd:55:db:f7:f9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:54 2024 GMT
            Not After : Apr  2 20:03:54 2025 GMT
        Subject: CN=BA9B1FCDCC35BF868554439A2B5752B7FF5DC5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:26:82:62:e5:bd:25:b9:66:49:7e:14:69:
                    4a:b6:64:8a:91:24:0e:74:9d:43:0f:a4:27:0d:63:
                    9c:93:d5:8a:fc:ac:90:d0:2e:04:66:dd:a7:f1:98:
                    1a:e1:38:bc:eb:1e:37:8a:9b:0b:15:9e:81:0c:8a:
                    ef:19:66:b5:1a:d1:59:a0:bd:39:61:55:3d:14:22:
                    d3:33:e0:0c:e0:80:41:57:77:eb:99:b1:ab:2c:3d:
                    aa:8a:be:01:8b:d3:d1:e4:15:a4:2e:bb:86:c6:7c:
                    86:ab:5f:23:9c:ca:fc:55:c7:95:ad:77:d0:f7:ab:
                    f9:ae:0d:e0:1d:b8:db:e2:27:9f:8e:fa:3e:43:66:
                    c0:e8:08:e3:62:bb:45:e8:7f:43:95:33:c7:aa:a1:
                    62:40:a6:fd:36:70:bd:e6:a5:6f:ae:99:07:12:3e:
                    d1:6d:a8:86:5d:d2:3c:b8:47:e1:0b:ee:03:a3:df:
                    93:40:8d:7c:38:af:63:cf:51:d1:49:8f:a4:76:df:
                    6b:41:db:74:6a:f6:71:eb:47:7f:4b:dc:85:f8:44:
                    de:c2:3b:93:c1:82:6a:65:2c:18:34:4e:dd:3d:bc:
                    43:72:d9:2f:11:6b:b0:30:7b:16:41:92:03:bd:74:
                    f5:d7:2b:58:22:6d:24:f1:42:7b:c5:cb:4c:5b:ac:
                    54:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9B:1F:CD:CC:35:BF:86:85:54:43:9A:2B:57:52:B7:FF:5D:C5:EA
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32342e302f32322d3232203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:17:0d:bb:58:a2:2b:01:3a:29:e3:05:df:05:23:5c:9b:
         70:3e:07:46:73:14:b1:e5:02:10:c5:f3:4a:11:17:f7:e5:1b:
         77:fa:bf:e8:72:b6:3e:28:1a:9e:ff:f2:fe:a5:61:4b:b3:f1:
         b2:28:2f:8b:77:5e:c0:04:55:73:ae:86:88:33:93:5f:06:ae:
         cb:15:bc:23:85:88:b0:1a:f0:b5:97:fc:0c:74:aa:6e:b4:6e:
         88:24:37:0a:b8:83:85:9e:60:09:ca:ad:0b:ca:1e:8f:5a:b6:
         4a:16:68:62:07:67:22:ef:f3:d6:66:84:c7:3f:a2:75:34:4c:
         2b:7b:68:a7:bb:8e:c7:64:bc:1a:89:c0:a7:00:79:df:60:cd:
         48:14:a8:08:39:4a:34:90:d5:e9:0b:5c:e3:c1:56:7e:3f:0f:
         07:0b:fc:03:70:c3:68:22:1a:b3:35:87:1f:80:0c:c1:9f:20:
         11:b1:db:07:41:b2:5c:48:dc:89:4c:4c:df:f3:f6:c2:7a:70:
         67:b3:b2:7a:de:08:eb:10:18:e8:03:f1:e0:f0:d4:72:64:93:
         93:6f:6d:eb:62:96:45:5a:23:28:b7:2c:3f:fe:a5:af:14:aa:
         dd:c5:a8:ac:12:13:63:60:1c:34:31:0a:86:56:f5:3d:d1:f3:
         d9:2a:f9:68
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJ+ue/qAXIdBmG++rmZ7dVdv3+fowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDRjY3NzRCNTJEOEE2MDg3NTIzMDNDMDhEODEzOUFC
QjY5RTNGMDAeFw0yNDA0MDMxOTU4NTRaFw0yNTA0MDIyMDAzNTRaMDMxMTAvBgNV
BAMTKEJBOUIxRkNEQ0MzNUJGODY4NTU0NDM5QTJCNTc1MkI3RkY1REM1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhSaCYuW9JblmSX4UaUq2ZIqR
JA50nUMPpCcNY5yT1Yr8rJDQLgRm3afxmBrhOLzrHjeKmwsVnoEMiu8ZZrUa0Vmg
vTlhVT0UItMz4AzggEFXd+uZsassPaqKvgGL09HkFaQuu4bGfIarXyOcyvxVx5Wt
d9D3q/muDeAduNviJ5+O+j5DZsDoCONiu0Xof0OVM8eqoWJApv02cL3mpW+umQcS
PtFtqIZd0jy4R+EL7gOj35NAjXw4r2PPUdFJj6R232tB23Rq9nHrR39L3IX4RN7C
O5PBgmplLBg0Tt09vENy2S8Ra7AwexZBkgO9dPXXK1gibSTxQnvFy0xbrFQBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUupsfzcw1v4aFVEOaK1dSt/9dxeowHwYDVR0j
BBgwFoAUOM9ndLUtimCHUjA8CNgTmrtp4/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMS8zOENGNjc3NEI1MkQ4QTYwODc1MjMwM0MwOEQ4MTM5QUJCNjlFM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0Y2Nzc0QjUyRDhBNjA4
NzUyMzAzQzA4RDgxMzlBQkI2OUUzRjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzEv
MzEzNzM3MmUzNzMzMmUzMjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM2
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFJGDANBgkqhkiG9w0BAQsFAAOCAQEAaoEXDbtYoisB
OinjBd8FI1ybcD4HRnMUseUCEMXzShEX9+Ubd/q/6HK2Piganv/y/qVhS7Pxsigv
i3dewARVc66GiDOTXwauyxW8I4WIsBrwtZf8DHSqbrRuiCQ3CriDhZ5gCcqtC8oe
j1q2ShZoYgdnIu/z1maExz+idTRMK3top7uOx2S8GonApwB532DNSBSoCDlKNJDV
6Qtc48FWfj8PBwv8A3DDaCIaszWHH4AMwZ8gEbHbB0GyXEjciUxM3/P2wnpwZ7Oy
et4I6xAY6APx4PDUcmSTk29t62KWRVojKLcsP/6lrxSq3cWorBITY2AcNDEKhlb1
PdHz2Sr5aA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org