Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32352e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e32352e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          EXDqj3viLEIciiKqakVgEfZNG8M70S4Zw+elswRK02k=
Subject key identifier:   3D:6E:FE:DC:5D:28:6B:06:ED:07:3C:53:0D:36:DD:AC:F1:FD:83:1F
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       24CCDB60813C74CA3A3B1BEAF1C3DAA8BDDC0FD1
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32352e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:41 +0000
ROA not before:           Wed 05 Mar 2025 20:54:41 +0000
ROA not after:            Wed 04 Mar 2026 20:59:41 +0000
asID:                     52685
IP address blocks:        177.73.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cc:db:60:81:3c:74:ca:3a:3b:1b:ea:f1:c3:da:a8:bd:dc:0f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:41 2025 GMT
            Not After : Mar  4 20:59:41 2026 GMT
        Subject: CN=3D6EFEDC5D286B06ED073C530D36DDACF1FD831F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:01:05:b5:fd:41:4b:cd:74:c7:5d:a3:a6:
                    aa:57:61:e9:57:86:9d:d3:bd:17:f0:80:49:fe:2f:
                    bd:06:10:00:88:48:75:c3:6f:5d:36:64:b4:0a:3b:
                    b0:94:3a:81:1d:a5:d3:f9:23:09:23:55:33:de:3c:
                    bd:0b:78:6f:b7:e4:10:21:af:4c:4f:b2:f7:4e:5c:
                    e0:68:5f:ea:7c:a6:31:96:50:36:c8:35:3f:0a:2b:
                    94:a2:80:0a:b3:d4:4f:f7:8a:82:ba:10:38:d2:48:
                    68:2b:98:32:80:97:90:56:d9:0a:34:77:92:0e:3a:
                    28:0b:6f:c1:67:b7:f8:d9:ce:f1:29:7e:98:69:56:
                    60:f4:9e:e7:8e:fb:c5:87:34:59:f0:dc:b3:28:0d:
                    ee:17:43:ca:4a:bb:2d:b5:1f:eb:ff:a1:34:e1:69:
                    d4:71:5a:4d:59:e8:5f:23:d5:32:c5:5d:d0:e1:aa:
                    d3:db:59:c1:a4:c0:a0:dc:f8:bc:9c:a7:e2:3f:86:
                    1e:b5:be:7a:16:02:76:78:b4:2d:a6:52:94:d9:9e:
                    e0:ba:f8:c8:89:34:6c:a1:8a:51:7a:e8:a8:56:35:
                    51:f5:d3:36:c6:57:27:ec:80:fa:e2:00:6b:e3:ac:
                    6f:6f:52:bf:98:22:ec:d1:31:41:49:b1:f4:9a:65:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6E:FE:DC:5D:28:6B:06:ED:07:3C:53:0D:36:DD:AC:F1:FD:83:1F
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32352e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:81:9e:30:25:26:44:3d:f9:db:a0:c7:ea:16:52:e0:e3:19:
         b9:21:28:83:16:ce:1e:14:f7:e9:28:f9:f4:d1:01:a1:94:8f:
         62:b9:6c:55:82:ae:1d:b3:27:bc:df:02:7e:96:e1:64:99:6c:
         96:4b:4e:ba:03:1a:71:ac:55:06:da:d8:1b:1c:ed:cd:44:ca:
         f1:20:01:7f:91:b4:ee:c5:50:91:9d:10:cd:c9:aa:c5:ec:dd:
         10:14:88:25:dc:2a:af:14:c3:83:4a:70:d7:a2:a7:5a:90:ae:
         90:3e:4e:bf:28:0b:ba:9b:d0:07:9f:88:26:01:3a:98:89:41:
         d5:32:4f:40:96:72:68:f7:2c:3d:0f:4f:c3:07:bf:7e:62:77:
         35:26:18:6d:1d:0c:21:b4:ce:f5:54:c5:8d:2e:cc:5e:ae:e3:
         26:af:67:ce:dd:88:5f:5f:8e:f1:69:89:80:15:ae:3d:17:aa:
         19:34:f5:30:8c:b9:44:d7:fe:54:61:09:52:ef:ba:85:92:38:
         c4:32:fb:63:aa:3a:2f:ff:c6:ce:20:90:a2:91:6a:6f:5e:75:
         83:6c:1a:86:3e:85:b4:88:d0:fa:cd:f6:26:0c:91:4e:a9:f1:
         87:e1:a1:d5:11:65:23:2a:3b:1e:a3:79:93:96:04:39:b4:f8:
         ac:3e:ee:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:25 2025 by rpki-client