Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32332d3233203d3e203532363835.roa
File:                     3137372e37332e32362e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          /G+YTe0sG/ncJyHL202btzyFjondYS2lwMfeYMmrT5k=
Subject key identifier:   4E:C6:93:E3:76:7A:56:12:9C:D3:D7:20:C8:20:F6:DA:BC:88:C9:A6
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       70720850D7E01EB05996E0CA3D71C5787D854F58
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32332d3233203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:53 +0000
ROA not before:           Wed 03 Apr 2024 19:58:53 +0000
ROA not after:            Wed 02 Apr 2025 20:03:53 +0000
asID:                     52685
IP address blocks:        177.73.26.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:72:08:50:d7:e0:1e:b0:59:96:e0:ca:3d:71:c5:78:7d:85:4f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:53 2024 GMT
            Not After : Apr  2 20:03:53 2025 GMT
        Subject: CN=4EC693E3767A56129CD3D720C820F6DABC88C9A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:59:e3:f8:ea:6c:47:0d:a9:b8:13:60:7b:
                    70:69:e1:49:d3:0a:9b:33:83:2b:95:36:1e:be:30:
                    34:88:33:10:02:89:8b:96:2b:4a:ad:f4:83:a7:57:
                    64:20:c6:b5:ab:b1:54:42:27:03:c8:df:e1:13:84:
                    ed:2d:08:71:a7:fc:91:41:e2:96:cc:e0:bf:ec:b6:
                    fe:d1:a1:5a:a5:28:6d:ed:ec:f1:36:b1:f8:85:26:
                    aa:26:b7:9a:fc:e3:98:e3:fb:62:52:4e:39:68:bd:
                    bd:8c:33:20:2c:99:e3:ce:d8:12:08:b4:31:73:0a:
                    dc:09:20:2c:98:11:ba:6f:c6:cb:a4:77:17:6b:62:
                    76:fd:ae:20:53:75:cb:8a:a3:9f:71:04:ab:bf:b3:
                    d5:ad:c2:42:73:0e:af:7e:78:cb:0a:2c:9d:a6:52:
                    dc:db:b5:5e:f8:24:04:25:c8:cb:7c:45:e0:c2:ab:
                    c2:01:4b:84:35:2d:83:80:16:12:3f:c6:e6:1f:7f:
                    e7:e5:02:17:67:5a:49:d4:62:b2:c6:88:47:08:59:
                    74:73:5a:49:3c:79:fa:ef:7a:20:3e:59:4b:5c:a3:
                    7d:06:ca:e0:78:8e:0a:5f:fb:2a:5f:c9:fa:49:3b:
                    1a:ad:8f:58:5f:97:95:52:bc:57:f0:df:73:4e:68:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C6:93:E3:76:7A:56:12:9C:D3:D7:20:C8:20:F6:DA:BC:88:C9:A6
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:79:ad:77:f6:13:3b:52:9c:a5:64:3e:e3:b4:e5:f2:06:44:
         cc:b8:c2:79:82:27:d0:22:b0:57:25:92:40:a5:89:42:e2:5d:
         62:ac:23:c4:e7:57:ae:f4:f8:04:b8:56:f5:2e:1b:9e:d6:5c:
         5d:c2:66:c6:69:7a:77:ab:58:79:a8:cd:36:05:02:fd:c6:bf:
         65:5e:70:43:26:f2:e2:5d:c7:33:c3:4c:fc:1f:a9:c6:91:92:
         76:c2:b6:68:3b:93:19:f1:d0:72:e5:75:7b:e8:4d:6e:2a:07:
         e0:83:7a:50:73:07:5c:61:9b:6c:6f:e0:d3:8a:4d:5b:79:48:
         d5:b5:ab:1e:5e:9b:5c:52:32:a4:00:2e:11:d4:5f:f1:b2:80:
         4f:00:e0:de:bf:45:cb:ad:15:61:f4:84:84:39:bd:56:0b:46:
         15:10:b1:29:08:69:0d:aa:b4:c6:9e:f7:fd:e4:77:7b:00:5e:
         64:2b:59:25:14:37:1d:02:d0:2c:1e:61:ab:33:df:9e:a9:09:
         43:15:1a:11:4e:2b:f3:b2:21:fd:f1:5c:c7:3b:f9:d6:51:79:
         f0:9f:76:1f:5b:e2:fb:1f:58:28:e7:15:fc:62:00:3d:5f:99:
         94:cb:ec:85:d1:42:e4:4b:dd:30:0c:85:84:60:16:47:f8:86:
         cf:46:e1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org