Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133382e302f32342d3330203d3e203238313838.roa
File:                     3137372e31322e3133382e302f32342d3330203d3e203238313838.roa (raw, json)
Hash identifier:          K9DKda5t392tiYtXM2YvIqDZCsekHR50KQeF0Qx6po0=
Subject key identifier:   69:C7:3D:79:94:07:79:49:D1:0A:C5:22:48:98:47:3D:2C:2A:6C:E3
Certificate issuer:       /CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
Certificate serial:       6561B084C94D28C17936D0B7AEBB90769E6136ED
Authority key identifier: E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133382e302f32342d3330203d3e203238313838.roa
Signing time:             Wed 05 Feb 2025 22:57:58 +0000
ROA not before:           Wed 05 Feb 2025 22:52:58 +0000
ROA not after:            Wed 04 Feb 2026 22:57:58 +0000
asID:                     28188
IP address blocks:        177.12.138.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl
                          rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 13:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:61:b0:84:c9:4d:28:c1:79:36:d0:b7:ae:bb:90:76:9e:61:36:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E38AC2CFB299715B3B6D5866C15CF353BE48A770
        Validity
            Not Before: Feb  5 22:52:58 2025 GMT
            Not After : Feb  4 22:57:58 2026 GMT
        Subject: CN=69C73D7994077949D10AC5224898473D2C2A6CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3a:bc:73:c8:b5:4c:b7:71:07:06:37:f0:10:
                    19:a0:cc:09:bf:04:b0:79:eb:a9:6d:05:58:1c:98:
                    8b:57:25:fc:45:36:e5:2b:12:3e:db:f7:57:46:9d:
                    f2:07:a2:88:a0:1c:db:75:d4:ad:b3:e4:8c:46:11:
                    5f:7f:c6:35:42:51:17:15:81:cd:e7:43:c3:c7:51:
                    4b:1b:d4:16:7c:b3:04:27:6f:b7:7d:10:ee:fa:e2:
                    e8:65:10:02:fe:b1:11:28:47:2c:a6:43:36:8d:f6:
                    59:a7:99:3b:13:fd:8a:1c:0a:43:c4:4f:12:33:5b:
                    84:b2:fd:75:cb:0e:51:67:4d:10:fe:87:6a:4a:19:
                    9c:81:38:77:fb:4f:44:61:4f:4a:fa:63:d5:ce:01:
                    12:49:37:97:51:31:a3:b0:f5:30:40:c1:09:ae:0b:
                    77:b2:13:1e:c8:e4:b2:0f:fc:a8:54:13:6f:f5:bd:
                    bc:6c:f9:ab:6d:88:9b:9d:11:8c:9b:3d:1d:47:93:
                    90:45:86:77:17:df:4a:c4:66:13:1d:02:f4:f9:8d:
                    53:57:f4:b5:5f:2f:d2:b6:84:09:e4:49:94:56:4f:
                    23:3f:44:21:ed:63:b4:e5:6c:c9:56:a0:78:cc:ef:
                    72:da:9c:9f:84:d8:af:24:7d:94:9d:b7:f8:2f:c5:
                    a0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C7:3D:79:94:07:79:49:D1:0A:C5:22:48:98:47:3D:2C:2A:6C:E3
            X509v3 Authority Key Identifier:
                keyid:E3:8A:C2:CF:B2:99:71:5B:3B:6D:58:66:C1:5C:F3:53:BE:48:A7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/E38AC2CFB299715B3B6D5866C15CF353BE48A770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E38AC2CFB299715B3B6D5866C15CF353BE48A770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKNtGA7spd4f5R3QACa56rczYDQyAc81wqo5cjBDU3d/0/3137372e31322e3133382e302f32342d3330203d3e203238313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:c8:db:b4:37:17:3a:75:32:d2:60:98:fb:51:69:c6:d4:f7:
         a8:05:d1:2f:3e:fb:08:7a:37:9e:89:6c:14:70:9b:20:6a:8b:
         70:7e:5d:2e:ae:d9:80:fe:67:30:07:82:86:3e:46:ce:4e:70:
         a4:bd:9d:2d:fa:34:5f:59:e7:6a:9a:bc:21:a2:40:be:82:a3:
         a9:ba:c3:65:59:c5:51:ae:3c:a2:39:14:28:98:d3:41:ac:d8:
         20:48:bd:32:86:e1:8e:f5:e9:3b:d6:83:ba:8a:53:35:64:7b:
         ac:9b:b2:e7:a7:f8:0b:21:23:6a:d6:c3:26:aa:f1:66:a2:aa:
         de:3f:c6:d0:2f:11:08:f6:29:a2:a1:97:b2:2e:3f:20:77:b1:
         82:15:d1:42:b6:e5:a4:af:ba:5c:5f:63:e1:6e:e0:17:76:0d:
         51:5a:2f:fb:e4:40:00:7c:5d:43:67:ff:8f:86:1e:6b:76:8a:
         54:29:69:69:5c:8c:0b:97:62:13:95:4d:03:15:3d:1a:f1:73:
         62:c1:b9:4f:00:98:db:84:5b:a4:c7:cc:aa:cf:7d:4b:a0:4d:
         74:69:a9:da:dd:ea:a8:c7:72:be:e4:cb:5c:93:1d:41:29:f2:
         f6:8a:44:50:2f:a9:05:23:2d:3f:a1:dd:97:50:e4:27:6a:47:
         46:03:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:24 2025 by rpki-client