Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e32382e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          gSAE10JDBj6z1Nmmd2vE7CcpQVMzS42aHGSUSleBtPg=
Subject key identifier:   80:5C:43:C9:67:8C:9F:A9:CC:2C:EC:FE:89:C7:AD:93:F3:B9:5A:11
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       27852F4F72EB0FE7EC2CF4276EF32E0A1949393F
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:53 +0000
ROA not before:           Wed 03 Apr 2024 19:58:53 +0000
ROA not after:            Wed 02 Apr 2025 20:03:53 +0000
asID:                     52685
IP address blocks:        177.73.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:85:2f:4f:72:eb:0f:e7:ec:2c:f4:27:6e:f3:2e:0a:19:49:39:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:53 2024 GMT
            Not After : Apr  2 20:03:53 2025 GMT
        Subject: CN=805C43C9678C9FA9CC2CECFE89C7AD93F3B95A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:52:22:48:d9:bf:32:1d:96:d3:c7:8f:c6:
                    97:28:6e:27:19:38:18:60:dc:77:ea:00:05:ec:56:
                    ed:53:0d:70:e4:1a:60:06:4c:e3:d4:c5:c6:34:31:
                    7d:4e:21:5f:2e:07:76:ff:e5:85:76:df:59:ec:f8:
                    81:fa:2a:56:e1:6f:25:64:b0:7f:e1:89:a5:a1:e5:
                    20:74:60:5c:78:43:f4:8d:7f:23:e8:31:97:e3:fb:
                    1e:28:52:5a:37:8e:c4:c1:9a:d8:7d:63:97:22:78:
                    27:6b:fc:9f:7e:a5:6d:0e:8a:8e:00:9c:c2:03:a0:
                    9f:bd:37:a2:a2:9b:48:5d:5d:b2:9b:5a:80:f3:48:
                    cc:24:eb:a0:75:9f:14:f1:a3:30:90:53:99:58:a3:
                    2a:af:98:5b:5c:62:53:1f:db:c1:bb:11:0e:df:d3:
                    7b:4f:6a:a1:17:4b:0b:ed:56:5e:96:6b:2c:a1:bb:
                    5d:39:4b:f4:8e:36:7f:e0:16:b5:df:75:02:e8:d5:
                    fb:20:a2:e6:8d:0e:fb:ff:f4:a3:8f:de:bf:b4:ea:
                    eb:ef:82:bc:65:47:f7:6e:1e:b1:15:bb:13:84:f5:
                    ee:f3:bd:b9:df:f4:37:72:b6:b0:49:4d:37:88:76:
                    d3:e7:9c:27:df:c0:02:ef:34:b5:9a:9e:46:55:15:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5C:43:C9:67:8C:9F:A9:CC:2C:EC:FE:89:C7:AD:93:F3:B9:5A:11
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32382e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:96:1c:cb:05:d5:71:bd:b4:a8:dc:1d:9f:61:47:fc:83:5e:
         e0:ac:ca:d0:8e:53:bb:77:6c:d3:33:07:4b:e9:2e:e5:f9:8b:
         79:20:ef:2e:a1:e0:a0:c9:2d:21:20:50:f9:74:64:ed:82:11:
         c4:f1:c7:42:b3:8f:a8:43:c2:91:c2:16:d7:20:8a:ae:bd:80:
         b9:2d:d7:6e:04:31:d4:e4:b6:3d:17:71:23:bf:ff:89:8e:23:
         f2:f6:40:21:d2:b9:5c:a2:2b:f1:6c:d0:24:e4:e3:c6:2d:30:
         d4:e8:e4:48:61:ef:16:cd:4c:d0:1b:32:af:71:a6:49:58:6b:
         81:4b:a7:1b:42:eb:0b:08:68:94:71:bc:38:8a:b6:fd:1a:d0:
         0b:83:2b:22:e3:1d:ea:c0:76:2e:61:49:7e:cd:4f:e2:57:44:
         62:1f:5b:f4:3c:22:74:ad:0a:e5:17:46:84:af:d1:36:95:9d:
         df:6a:a4:be:36:16:82:1d:18:eb:64:35:25:f4:59:4f:18:18:
         51:1a:57:c4:09:99:d1:bb:4f:2f:0c:ba:b0:c8:83:8c:b9:39:
         f9:7a:aa:8e:7d:0d:94:e7:b5:fa:9d:7b:6e:27:c4:f4:55:c7:
         33:50:f5:26:c8:d5:1f:89:80:e3:23:ed:ad:9e:ee:5a:57:88:
         74:5a:ea:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org