Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e32382e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          EsmLP+Dd8IKa3/VgP/uEh/NCqOznSKGZUHAw8D7WHcE=
Subject key identifier:   06:77:52:DA:FF:E7:E3:F3:49:88:B9:07:21:B2:8E:BA:FB:CA:85:76
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       674887199149DFF8ADD274E75EDDAFD7A63FF3B5
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:44 +0000
ROA not before:           Wed 05 Mar 2025 20:54:44 +0000
ROA not after:            Wed 04 Mar 2026 20:59:44 +0000
asID:                     52685
IP address blocks:        177.73.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:48:87:19:91:49:df:f8:ad:d2:74:e7:5e:dd:af:d7:a6:3f:f3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:44 2025 GMT
            Not After : Mar  4 20:59:44 2026 GMT
        Subject: CN=067752DAFFE7E3F34988B90721B28EBAFBCA8576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:51:dd:a9:56:0a:17:54:e3:d4:ca:df:ee:
                    f5:4f:99:df:ba:70:88:ce:1e:13:31:5d:4d:79:18:
                    a1:e0:81:54:52:b0:61:5c:4a:ae:19:a2:09:61:69:
                    86:8d:d2:09:ba:07:f8:ec:b0:a5:89:98:c4:65:7e:
                    0b:77:89:87:bb:da:68:8e:80:24:fe:08:17:c5:03:
                    b3:5b:4a:b5:18:50:c1:08:43:44:bf:bc:00:3f:b6:
                    b8:80:09:ee:0f:07:4e:36:d9:ed:03:4c:7e:20:a1:
                    cf:d2:03:ab:64:e8:fd:0c:5e:01:87:97:00:29:53:
                    6d:4a:83:6c:95:ad:f9:32:4f:9f:52:b7:41:72:1d:
                    d1:a4:9c:a7:2a:8b:17:94:81:49:50:05:ba:6d:10:
                    58:71:99:14:8a:78:01:54:00:50:f7:46:62:00:95:
                    38:95:24:08:77:fd:23:99:ba:30:ca:8d:2d:3c:b5:
                    1a:04:0e:ec:c4:97:58:d0:50:4e:a6:fc:f2:f5:12:
                    50:e2:3d:8b:cb:70:24:43:63:62:ec:9e:25:5b:b9:
                    e0:d2:89:d2:3f:81:b6:00:56:1c:47:a0:60:8d:97:
                    2a:6a:dd:d6:48:37:7b:b6:17:85:38:c7:bf:c7:fd:
                    2b:49:a7:18:db:19:b1:e9:7b:69:2a:24:ee:93:8f:
                    d1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:52:DA:FF:E7:E3:F3:49:88:B9:07:21:B2:8E:BA:FB:CA:85:76
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ca:a7:cd:62:91:9c:b4:46:3b:86:5e:59:ac:b7:98:e3:ed:
         5f:54:a7:f2:12:c6:28:81:c6:25:91:da:e6:27:d8:40:54:85:
         9a:11:e8:a6:b8:ee:28:01:80:71:e4:d1:61:be:6e:9a:31:a3:
         29:96:16:2d:5c:8a:b6:4a:c4:5f:4b:1b:34:1e:cc:bc:46:f5:
         56:35:14:59:ad:d1:cd:3e:cf:e0:49:47:ff:af:c2:93:fe:73:
         63:7d:4c:b0:be:0b:b5:50:80:e0:55:d6:6c:b4:31:36:b3:94:
         5d:d9:8d:dc:e7:ff:f0:b3:d3:ae:77:aa:d9:70:64:b7:e7:e3:
         3a:e6:f4:36:00:5a:aa:5d:39:95:08:3d:8a:71:9b:75:86:28:
         20:a9:07:3f:08:93:fc:50:2d:1c:16:52:4e:29:9f:b4:ba:83:
         ab:aa:9a:2b:d5:41:64:06:fe:0d:ce:04:df:b5:e8:b3:d1:46:
         86:1c:af:ad:91:6f:9f:95:f7:29:a6:b4:bd:ec:47:21:b4:79:
         a4:eb:fe:e5:af:0a:27:3b:db:a8:4b:49:7a:45:66:7e:41:72:
         2b:74:0e:bf:f0:30:fd:6d:53:29:3e:ab:54:e1:0b:7d:3b:b4:
         e0:b1:ba:10:47:9a:0e:78:a0:57:55:63:8a:90:e4:be:82:8b:
         2f:d8:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:28 2025 by rpki-client