Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32322d3232203d3e203532363835.roa
File:                     3137372e37332e32382e302f32322d3232203d3e203532363835.roa (raw, json)
Hash identifier:          XOMZZZV9pePzZfZCN5rHNjshKMbCcZkYd+4kPtHgwUc=
Subject key identifier:   E4:35:C1:32:AF:F8:3D:08:1F:0A:D7:5D:E8:9A:A5:8A:A2:B9:88:07
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       515A3F0DB2B7FAEA1766DAACADA8D62DE3CA482E
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32322d3232203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:53 +0000
ROA not before:           Wed 03 Apr 2024 19:58:53 +0000
ROA not after:            Wed 02 Apr 2025 20:03:53 +0000
asID:                     52685
IP address blocks:        177.73.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5a:3f:0d:b2:b7:fa:ea:17:66:da:ac:ad:a8:d6:2d:e3:ca:48:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:53 2024 GMT
            Not After : Apr  2 20:03:53 2025 GMT
        Subject: CN=E435C132AFF83D081F0AD75DE89AA58AA2B98807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:c1:0f:64:49:15:36:59:c9:16:ff:f4:54:
                    d6:24:5e:03:52:ab:5c:eb:b8:ed:6c:4c:5b:c1:6a:
                    f4:cf:7a:ae:db:f6:6b:50:c8:3e:93:10:e6:64:95:
                    26:b9:79:44:28:a7:1f:5b:1d:4e:93:6a:53:c9:82:
                    ed:65:ee:ae:62:6a:9f:a8:05:27:18:c7:64:73:db:
                    3b:a4:38:40:55:90:4d:23:b8:61:b3:84:52:96:be:
                    64:34:9c:61:35:c4:7f:17:4f:40:98:a6:30:c3:5f:
                    53:16:e5:52:81:b3:94:0b:61:a6:92:20:42:8b:5f:
                    a5:66:42:8f:c9:6f:ea:de:c2:96:9e:50:5d:cb:25:
                    da:ab:96:70:ae:8b:2a:3e:13:8c:41:73:f7:22:65:
                    26:52:04:93:fe:66:1d:48:2f:58:81:bf:53:d1:38:
                    f5:a7:0c:4b:4b:d2:b7:bd:3f:00:28:ba:a4:ec:56:
                    ed:74:8a:07:1d:a7:75:5d:da:51:0a:9f:7c:1b:44:
                    5b:47:21:a3:43:97:97:b1:55:8c:80:0d:5e:b2:b6:
                    09:a0:68:00:3c:a0:a2:c5:33:d5:92:2f:b6:bc:7b:
                    7c:f6:2b:01:19:1c:19:f5:97:5b:7b:ad:3f:0b:90:
                    2a:b8:ee:f4:66:bf:a5:05:cd:14:f3:c4:f5:36:0a:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:35:C1:32:AF:F8:3D:08:1F:0A:D7:5D:E8:9A:A5:8A:A2:B9:88:07
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32322d3232203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:ef:f8:81:21:9e:7a:ff:9e:bb:ce:77:1f:4b:66:2a:f0:c7:
         58:0b:de:08:04:bb:89:92:34:a3:9b:5c:1a:4a:70:f2:ea:87:
         e7:9d:5f:00:74:e1:90:43:e0:88:63:4c:05:b2:4a:a3:89:93:
         3c:3d:3a:0f:e4:0b:71:a7:6d:4b:fd:6e:00:a2:ee:55:6b:2b:
         2f:f4:5b:14:2e:dd:65:5c:f2:b3:f4:7a:8e:42:c1:1f:20:27:
         87:b1:a3:90:65:5d:ce:c6:ef:0b:63:6d:8f:b6:45:ea:e7:9b:
         7e:77:16:2d:2a:1c:98:55:43:de:04:2e:5d:4d:04:78:6d:3e:
         ef:3a:07:53:5c:7b:ff:d2:1c:04:99:4d:d1:b0:5f:aa:d1:94:
         cb:e5:b7:7e:ae:c4:05:db:93:6b:d2:7e:8a:ae:0a:89:8c:53:
         6a:37:40:c2:1c:17:36:e6:0d:d8:6c:d1:c1:f8:2f:a7:42:f0:
         86:a9:a0:3d:83:3e:08:99:4c:08:07:b4:6b:a8:bd:16:2b:80:
         6a:89:83:b2:9a:a4:0d:a9:53:ea:cc:50:ee:90:a7:dc:48:a8:
         24:09:53:dd:d1:4f:95:85:9e:7b:a9:2d:26:29:dd:d8:cc:a6:
         93:2e:26:03:f5:3d:a2:3b:84:c3:02:75:f6:fb:e0:da:78:b4:
         d0:6c:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org