Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32392e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e32392e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          a9Cpe85D2PNu7wvY0Pff8KeduSVOrPEumJ79CeHpeM0=
Subject key identifier:   23:44:C7:8F:20:82:76:91:DC:BE:C9:F9:65:80:C9:7D:C3:92:4B:8F
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       6E575C1CC716FF39714FA0D4652AF24EDA03402A
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32392e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:51 +0000
ROA not before:           Wed 03 Apr 2024 19:58:51 +0000
ROA not after:            Wed 02 Apr 2025 20:03:51 +0000
asID:                     52685
IP address blocks:        177.73.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:57:5c:1c:c7:16:ff:39:71:4f:a0:d4:65:2a:f2:4e:da:03:40:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:51 2024 GMT
            Not After : Apr  2 20:03:51 2025 GMT
        Subject: CN=2344C78F20827691DCBEC9F96580C97DC3924B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:ad:aa:d3:4c:b5:55:cb:8c:61:5e:3f:df:0b:
                    ae:34:69:cc:e6:ca:a2:86:75:5c:59:cf:01:fd:29:
                    c7:67:8e:0f:4f:ef:24:9d:e7:af:72:8e:1c:58:43:
                    bc:7f:4c:a7:93:6e:60:cb:35:36:ab:8a:55:c6:97:
                    f6:b9:a0:a7:c9:7d:8f:61:a0:fe:fb:ed:d9:14:a2:
                    dd:4b:57:5f:4d:1c:e5:a5:90:b0:f9:19:cd:d0:b2:
                    5e:5d:d1:a4:12:4a:90:cb:9e:10:8a:c2:b6:94:79:
                    cf:a6:b1:73:46:88:74:c2:5f:88:03:1f:8d:83:2d:
                    3a:81:2b:2d:57:ea:36:f6:3d:32:c0:ff:ab:5c:ed:
                    cf:75:2e:01:ca:c0:62:c5:7c:bd:cf:04:3a:6f:e8:
                    b2:34:cf:71:0b:df:7a:40:8c:b6:8f:6b:f8:4e:ea:
                    c3:ef:65:bc:4e:a2:24:9a:e0:23:ff:b9:e3:6f:c2:
                    14:18:c8:88:42:41:66:aa:e0:af:c6:df:2a:dc:e4:
                    e3:75:b2:df:0b:c3:cd:7a:3f:30:fb:7e:f0:19:f6:
                    1a:3b:66:bf:e6:f7:08:c3:66:17:d2:3d:e2:7b:f0:
                    3b:41:74:ef:72:b3:f1:79:6b:07:19:bd:f5:41:0e:
                    86:b0:9a:a7:79:9a:13:ab:d6:1c:7f:8d:e6:3d:d6:
                    1a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:44:C7:8F:20:82:76:91:DC:BE:C9:F9:65:80:C9:7D:C3:92:4B:8F
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e32392e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:bf:0c:9f:b5:ca:49:bd:6e:31:3f:12:44:4d:3e:cb:fe:d5:
         3c:22:c3:a5:9f:a9:77:88:38:ad:ab:0d:48:f3:cb:f4:ad:31:
         1e:2d:8e:d9:7d:72:57:d5:24:c8:25:c2:73:a4:9f:c1:23:7a:
         76:d3:42:23:55:f7:79:03:7d:ae:05:a3:75:3c:1e:bc:11:be:
         9d:9a:3e:c4:01:b2:62:6a:1d:f4:b9:b3:50:d7:22:88:d0:f0:
         9d:80:65:c9:ef:96:0b:cb:d3:75:0d:15:6a:e5:c1:81:f5:cd:
         de:7c:7d:fd:22:9f:ff:39:3f:4f:24:01:ed:fa:07:f9:1c:b2:
         d6:0b:c6:4f:c5:c9:4d:32:7c:04:6c:fb:7d:c0:95:1d:a1:7d:
         be:4d:40:d4:70:76:34:08:d0:91:42:14:3c:bf:c2:7f:f6:02:
         a2:d7:01:26:7a:2f:e3:43:2b:f1:e2:11:38:50:f7:5c:4a:9c:
         00:ea:b6:41:f1:15:d5:ee:4c:6f:0c:64:ae:71:a2:15:bf:9a:
         dc:21:55:11:0a:6b:89:30:cf:63:fe:fb:27:c5:23:0f:81:a8:
         22:0e:8e:7a:96:72:69:6c:65:26:26:c1:7e:49:00:a7:18:06:
         52:57:ff:00:0b:09:6f:d2:93:13:08:3b:53:71:d5:11:57:d8:
         a2:a9:d3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org