Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e33312e302f32342d3234203d3e203532363835.roa
File:                     3137372e37332e33312e302f32342d3234203d3e203532363835.roa (raw, json)
Hash identifier:          c88dj+0yLRMY/vw75ZyFzma0IWatM6866uebIRcRxnw=
Subject key identifier:   BB:27:0A:59:A0:89:74:D9:BD:5C:DF:09:AB:45:16:5B:5A:3F:82:36
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       0CB4FE18A76D589BE8B5C8678A2C8ACA429689B4
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e33312e302f32342d3234203d3e203532363835.roa
Signing time:             Wed 03 Apr 2024 20:03:55 +0000
ROA not before:           Wed 03 Apr 2024 19:58:55 +0000
ROA not after:            Wed 02 Apr 2025 20:03:55 +0000
asID:                     52685
IP address blocks:        177.73.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b4:fe:18:a7:6d:58:9b:e8:b5:c8:67:8a:2c:8a:ca:42:96:89:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Apr  3 19:58:55 2024 GMT
            Not After : Apr  2 20:03:55 2025 GMT
        Subject: CN=BB270A59A08974D9BD5CDF09AB45165B5A3F8236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:d5:79:40:fe:61:a7:02:7d:94:f1:e3:da:
                    11:34:99:35:9b:67:e9:14:65:31:b6:94:19:3d:cd:
                    ac:b0:82:a3:fd:58:d2:4f:a6:49:70:07:6c:3f:0e:
                    8d:e3:01:9c:b3:44:51:6d:27:8d:f6:56:0f:6c:24:
                    ab:1c:84:90:3e:da:6b:96:0e:cc:f7:cb:7f:8e:ac:
                    f1:6d:35:73:14:c8:c2:27:62:a6:ae:0b:4a:c4:01:
                    88:22:a1:26:57:16:25:df:8c:08:21:87:b0:07:0b:
                    a5:be:1e:7d:84:5e:be:27:70:fc:ba:60:eb:5b:5b:
                    ec:81:08:64:82:42:b6:f9:22:1e:6e:f5:2a:88:68:
                    58:39:8b:64:c2:0b:46:19:d0:c3:5f:0d:49:de:98:
                    93:b7:fa:f6:6a:dc:25:d2:13:d6:2c:34:7b:b9:e8:
                    be:f6:5c:4b:33:6b:ac:52:30:4d:17:c4:94:76:0c:
                    10:40:b2:52:0a:69:15:c6:00:33:94:d8:4a:78:53:
                    06:64:be:63:57:bc:71:e7:ad:2f:e9:6a:98:f5:c1:
                    0b:8d:5e:11:06:33:02:47:a9:71:ce:08:31:6e:8e:
                    68:3f:e0:6a:a2:2a:5b:0e:c4:6c:89:95:9b:62:fa:
                    ee:09:8d:bd:07:ab:03:8d:20:4f:e7:81:e3:e9:07:
                    cf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:27:0A:59:A0:89:74:D9:BD:5C:DF:09:AB:45:16:5B:5A:3F:82:36
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/3137372e37332e33312e302f32342d3234203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:40:a4:a1:5e:85:e7:bf:68:bc:df:4e:da:16:d7:df:7b:
         d8:80:5c:55:ee:fb:8b:eb:79:53:c5:b4:cd:f6:71:09:b4:cf:
         ec:7a:28:0d:b6:9b:c5:a5:66:f4:b4:00:aa:b9:3e:4a:6a:53:
         1c:d0:d5:5f:9b:e9:d3:43:8a:5b:7f:d6:61:15:54:b7:ea:f3:
         a3:71:02:ee:9d:51:e5:59:ac:97:40:47:bf:93:f7:fe:65:90:
         67:9f:04:a6:d1:8a:da:23:7b:a6:ec:d4:3c:3e:fa:e2:8d:e2:
         1c:4a:0b:4e:ec:f9:7b:41:3c:93:e5:fc:9e:2a:b7:8b:54:1f:
         db:dc:5b:d1:15:b0:a7:ab:aa:1c:c4:d9:04:4f:8b:b7:15:b8:
         ed:58:8c:2e:15:3f:44:50:bb:4d:ab:74:23:33:a0:75:94:7f:
         97:2f:69:bf:ba:cb:77:ff:4b:f0:af:28:52:b6:f8:39:68:83:
         05:4a:cd:44:1c:d4:89:8b:a8:38:a4:29:4a:15:83:0f:b9:88:
         84:34:a8:87:b3:6e:64:c0:4b:b6:56:85:d2:9d:fd:70:35:5d:
         83:dd:72:ea:b4:6d:99:22:26:53:69:a1:72:10:90:43:3b:b1:
         71:23:38:8a:6f:a7:b4:2b:e3:df:b4:6a:4a:32:52:8d:d8:c8:
         a5:d0:7c:d7
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDLT+GKdtWJvotchniiyKykKWibQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDRjY3NzRCNTJEOEE2MDg3NTIzMDNDMDhEODEzOUFC
QjY5RTNGMDAeFw0yNDA0MDMxOTU4NTVaFw0yNTA0MDIyMDAzNTVaMDMxMTAvBgNV
BAMTKEJCMjcwQTU5QTA4OTc0RDlCRDVDREYwOUFCNDUxNjVCNUEzRjgyMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0tV5QP5hpwJ9lPHj2hE0mTWb
Z+kUZTG2lBk9zaywgqP9WNJPpklwB2w/Do3jAZyzRFFtJ432Vg9sJKschJA+2muW
Dsz3y3+OrPFtNXMUyMInYqauC0rEAYgioSZXFiXfjAghh7AHC6W+Hn2EXr4ncPy6
YOtbW+yBCGSCQrb5Ih5u9SqIaFg5i2TCC0YZ0MNfDUnemJO3+vZq3CXSE9YsNHu5
6L72XEsza6xSME0XxJR2DBBAslIKaRXGADOU2Ep4UwZkvmNXvHHnrS/papj1wQuN
XhEGMwJHqXHOCDFujmg/4GqiKlsOxGyJlZti+u4Jjb0HqwONIE/ngePpB8/pAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUuycKWaCJdNm9XN8Jq0UWW1o/gjYwHwYDVR0j
BBgwFoAUOM9ndLUtimCHUjA8CNgTmrtp4/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxREpGcTZ4WFd5QTduV041RkdnOE53RXNmWG5tWEtqS2d6bVNBVFBz
THQvMS8zOENGNjc3NEI1MkQ4QTYwODc1MjMwM0MwOEQ4MTM5QUJCNjlFM0YwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4Q0Y2Nzc0QjUyRDhBNjA4
NzUyMzAzQzA4RDgxMzlBQkI2OUUzRjAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MURKRnE2eFhXeUE3bldONUZHZzhOd0VzZlhubVhLaktnem1TQVRQc0x0LzEv
MzEzNzM3MmUzNzMzMmUzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM2
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFJHzANBgkqhkiG9w0BAQsFAAOCAQEAcbVApKFehee/
aLzfTtoW19972IBcVe77i+t5U8W0zfZxCbTP7HooDbabxaVm9LQAqrk+SmpTHNDV
X5vp00OKW3/WYRVUt+rzo3EC7p1R5Vmsl0BHv5P3/mWQZ58EptGK2iN7puzUPD76
4o3iHEoLTuz5e0E8k+X8niq3i1Qf29xb0RWwp6uqHMTZBE+LtxW47ViMLhU/RFC7
Tat0IzOgdZR/ly9pv7rLd/9L8K8oUrb4OWiDBUrNRBzUiYuoOKQpShWDD7mIhDSo
h7NuZMBLtlaF0p39cDVdg91y6rRtmSImU2mhchCQQzuxcSM4im+ntCvj37RqSjJS
jdjIpdB81w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:59 2024 by rpki-client on console-ams.rpki-client.org