Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3137372e33382e35362e302f32312d3332203d3e203532393434.roa
File:                     3137372e33382e35362e302f32312d3332203d3e203532393434.roa (raw, json)
Hash identifier:          6kkxke4zH3VIRG7QbjbzvJqmremBjuPuqbM8L5Yd3vM=
Subject key identifier:   7A:0F:22:31:64:B7:1F:90:10:A5:FC:61:07:96:78:09:F1:B9:74:74
Certificate issuer:       /CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Certificate serial:       5B1F6C468DD517683FA2559052870764DE647E95
Authority key identifier: 2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3137372e33382e35362e302f32312d3332203d3e203532393434.roa
Signing time:             Tue 11 Mar 2025 20:27:53 +0000
ROA not before:           Tue 11 Mar 2025 20:22:53 +0000
ROA not after:            Tue 10 Mar 2026 20:27:53 +0000
asID:                     52944
IP address blocks:        177.38.56.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl
                          rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1f:6c:46:8d:d5:17:68:3f:a2:55:90:52:87:07:64:de:64:7e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
        Validity
            Not Before: Mar 11 20:22:53 2025 GMT
            Not After : Mar 10 20:27:53 2026 GMT
        Subject: CN=7A0F223164B71F9010A5FC6107967809F1B97474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ee:4e:0f:c2:3b:97:60:10:eb:b3:85:44:7f:
                    b9:41:34:97:7e:77:bf:e2:7f:a5:86:7d:e4:81:d9:
                    14:80:c0:16:76:bb:5b:b9:92:1c:81:db:72:78:43:
                    cb:0b:9f:90:46:a5:65:81:4b:ed:2d:b7:d5:61:81:
                    75:e2:c1:d9:c8:26:78:22:a0:bf:c0:a8:08:84:6f:
                    4c:c9:05:02:0b:9e:2c:ef:e6:66:b7:3d:d7:37:96:
                    2e:6a:b5:80:c8:ad:30:28:b1:ab:e8:55:72:48:1d:
                    58:09:55:a8:9a:e8:b1:06:1b:5b:63:56:19:b8:61:
                    74:61:cc:9d:e7:32:9a:83:74:5c:5b:13:f6:02:cc:
                    7b:33:d8:89:74:26:a8:b3:99:2a:ce:b6:f1:ab:d8:
                    f5:35:9f:1d:5f:40:d1:ad:7f:b7:ab:83:7b:75:9c:
                    cf:0a:ef:5c:13:47:59:10:96:e2:5b:30:5c:a6:6e:
                    95:63:1a:c2:ca:97:6a:3e:70:63:36:1e:d5:54:36:
                    de:00:bc:f0:04:89:15:4b:22:23:c1:c1:cd:a6:14:
                    58:28:4b:cf:2c:08:44:2d:f6:65:37:bb:b3:f0:de:
                    52:79:e6:72:5a:4f:11:b0:14:fd:9d:99:c9:a4:cb:
                    0f:c5:40:ad:30:5b:8e:d8:d9:81:00:f6:dd:e5:42:
                    84:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0F:22:31:64:B7:1F:90:10:A5:FC:61:07:96:78:09:F1:B9:74:74
            X509v3 Authority Key Identifier:
                keyid:2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3137372e33382e35362e302f32312d3332203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c1:9e:a2:66:df:19:a0:36:d3:e2:7b:c3:d5:3c:63:1e:38:99:
         72:24:74:55:77:e3:b7:2f:48:be:e1:aa:54:08:ba:16:7a:40:
         86:21:6e:88:73:fa:0c:c3:79:5a:99:25:8d:bd:fb:d9:7f:4f:
         90:fd:00:86:4d:0a:c6:df:5b:22:c8:aa:17:e9:2c:b4:c5:37:
         14:f5:f0:ba:24:02:2c:eb:4c:29:f0:fa:c9:31:95:19:eb:0f:
         76:2e:66:e5:16:5d:0f:b4:b3:99:92:bc:32:c9:64:1e:7e:9b:
         bc:d2:4a:04:aa:08:57:7c:b3:9d:63:2b:d5:43:9b:ca:dc:12:
         6b:4b:92:5e:c3:a4:8b:8b:42:26:8d:36:b4:17:56:de:72:a9:
         89:a6:df:5e:ab:f6:63:90:1a:ef:3b:45:08:6d:52:5a:a6:a3:
         56:34:b5:8e:ba:93:44:3f:d9:fd:bc:5d:12:2d:dd:9f:e2:2f:
         2d:f0:ee:9f:69:c4:7b:80:19:d7:73:31:1a:ed:a6:82:62:0b:
         1a:3e:ef:b6:47:ef:5b:e3:c7:ab:6a:28:da:e4:8f:6d:21:99:
         cb:e9:dd:6c:55:48:1c:1f:81:f6:89:13:0a:cf:0c:0e:7a:6c:
         8b:d6:fb:35:04:33:02:7e:7d:5c:fe:40:54:d6:c9:43:7a:b0:
         5a:85:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:59:02 2025 by rpki-client