Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32332d3233203d3e203532363835.roa
File:                     3137372e37332e32362e302f32332d3233203d3e203532363835.roa (raw, json)
Hash identifier:          AApOqETbNxJlnhDrIAKvPcRxFxNtpcBndciUW9fVhTM=
Subject key identifier:   35:F2:DE:38:31:9F:3C:24:E5:59:20:B6:E7:55:56:0C:B5:46:C7:95
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       4132292EDD30649BE17EEC4A903697DA23840ED7
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32332d3233203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:40 +0000
ROA not before:           Wed 05 Mar 2025 20:54:40 +0000
ROA not after:            Wed 04 Mar 2026 20:59:40 +0000
asID:                     52685
IP address blocks:        177.73.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 04:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:32:29:2e:dd:30:64:9b:e1:7e:ec:4a:90:36:97:da:23:84:0e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:40 2025 GMT
            Not After : Mar  4 20:59:40 2026 GMT
        Subject: CN=35F2DE38319F3C24E55920B6E755560CB546C795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:ba:d1:61:50:28:70:16:a5:0a:ef:0a:dc:
                    6d:7f:fb:ad:20:19:a1:0f:be:48:7f:ba:f3:ab:eb:
                    ca:23:05:36:a9:07:36:ee:05:cb:63:d6:3a:a7:f3:
                    0f:c5:66:ef:b6:c0:d4:08:ae:9c:93:f7:ff:30:ef:
                    48:96:cd:b2:8c:84:36:fc:f5:ed:9d:da:95:a0:f3:
                    08:bc:39:0d:fc:53:4a:21:92:f0:81:bc:00:32:77:
                    22:29:ee:67:c5:0f:d2:29:dd:67:6d:8f:3b:e7:38:
                    a6:e4:b3:ba:d8:e9:97:21:99:7d:c3:50:21:e2:04:
                    ed:04:b0:6e:60:39:a3:5a:a6:41:b2:1e:af:b7:4f:
                    7c:f9:59:19:89:e6:b9:f9:f7:dc:e5:78:54:d0:c9:
                    22:1a:31:c8:80:15:0f:38:ff:90:ab:22:22:6f:03:
                    81:b3:1c:14:7d:42:55:df:9a:e0:f5:5b:e2:42:da:
                    32:ab:34:ab:bf:bc:1a:90:ba:d0:84:f6:5c:73:a7:
                    94:fb:83:41:67:a3:55:6a:f8:4a:19:0c:82:d4:1c:
                    9a:5d:9e:33:37:b2:52:4e:71:ef:45:44:90:5a:9f:
                    05:b5:3c:93:2b:ba:97:10:fa:5f:a7:66:92:69:a0:
                    8b:84:61:59:a1:c2:19:56:b4:e8:a1:6c:68:fc:5d:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F2:DE:38:31:9F:3C:24:E5:59:20:B6:E7:55:56:0C:B5:46:C7:95
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32362e302f32332d3233203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:45:b0:51:20:cf:33:84:cb:ab:cb:94:4b:e5:0f:fe:d3:
         f3:93:e0:97:45:8e:f4:da:52:88:1b:13:d7:63:c2:87:af:8c:
         c8:f6:03:3a:9d:af:ed:1f:4a:22:64:9f:b3:a9:c8:1a:07:fa:
         5d:20:96:76:30:83:1d:58:55:12:2e:43:22:d0:c3:16:7a:8b:
         21:0e:06:cc:d9:6b:17:97:fb:40:fc:e5:96:c9:06:6b:85:e5:
         0e:68:98:84:1e:0c:53:7b:df:d9:c9:67:d8:97:38:83:c8:91:
         ae:41:c6:bd:48:6c:2d:de:6d:8e:b4:10:a5:b2:29:e2:65:59:
         79:62:a3:78:c8:6a:a1:a8:2c:70:e9:e7:23:af:0f:b9:8d:a5:
         17:ac:e0:62:40:20:0a:2d:60:78:c7:d7:53:20:61:df:99:15:
         0a:04:9d:6a:f9:06:44:ab:b3:84:bc:8f:6d:b0:0e:eb:e7:5a:
         f3:3c:e7:41:57:80:3c:21:b4:4e:bd:58:14:ac:41:a6:b8:e9:
         f2:4a:31:67:a9:7d:51:c0:e6:bf:eb:5c:0d:c5:46:5b:08:52:
         4c:f8:04:64:2b:16:f9:5d:03:d6:88:5a:8d:a5:f3:ba:4a:06:
         12:03:fe:bd:af:64:47:83:d8:f7:79:f9:c9:dd:95:28:2d:36:
         78:c7:70:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:27:13 2025 by rpki-client