Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138342e302f32312d3231203d3e203532373538.roa
File:                     3137372e33382e3138342e302f32312d3231203d3e203532373538.roa (raw, json)
Hash identifier:          PnO4BKGmYAlQOonAQLfKLekKmP+ZbKvBmFRUgkLMGRo=
Subject key identifier:   75:AF:6D:4D:86:54:07:3F:64:A6:53:21:07:9F:ED:76:61:52:C9:60
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       2DBEC4B09AB239FE929B7254C4FD005C2D27CD0C
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138342e302f32312d3231203d3e203532373538.roa
Signing time:             Fri 07 Mar 2025 14:41:00 +0000
ROA not before:           Fri 07 Mar 2025 14:36:00 +0000
ROA not after:            Fri 06 Mar 2026 14:41:00 +0000
asID:                     52758
IP address blocks:        177.38.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:be:c4:b0:9a:b2:39:fe:92:9b:72:54:c4:fd:00:5c:2d:27:cd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Mar  7 14:36:00 2025 GMT
            Not After : Mar  6 14:41:00 2026 GMT
        Subject: CN=75AF6D4D8654073F64A65321079FED766152C960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:56:9e:15:6f:7d:cd:71:c1:18:e8:7d:1c:eb:
                    e8:ac:d4:7c:03:24:d2:a1:a5:3e:da:3a:d8:b9:7e:
                    aa:28:56:05:6c:a0:e1:a2:e9:3a:6b:78:0d:83:dc:
                    ca:d5:0c:1b:97:42:67:1d:1d:17:b3:55:97:ad:db:
                    bd:1f:d6:e3:17:9e:33:9b:08:74:e5:2d:7e:9f:e2:
                    a0:90:00:7f:8c:da:b9:38:31:f2:20:48:98:58:88:
                    a1:1a:30:c3:7f:d2:88:39:97:90:91:c0:5e:af:e3:
                    43:e1:9c:80:2b:27:ba:ac:83:69:36:78:9a:64:18:
                    d0:ea:e4:b5:2d:85:4e:63:fe:e4:a7:f0:03:ca:0c:
                    6a:31:18:df:cc:89:4b:fe:ae:f7:2f:b7:00:20:23:
                    51:5c:61:64:f4:98:33:3b:e2:79:e1:79:c6:55:77:
                    95:79:82:63:09:f0:c2:c8:0f:4f:5f:1a:e5:3c:f1:
                    d9:6f:80:fb:a4:5a:b1:cc:a8:81:1b:9c:09:27:01:
                    62:d7:9c:05:eb:c3:ec:a4:07:9b:f5:bd:cc:20:08:
                    13:25:8a:98:51:87:0b:bd:eb:51:d3:c8:22:b0:e4:
                    97:a8:02:3f:80:8c:8d:15:6c:a8:a5:fe:83:97:ef:
                    e4:38:a3:2e:ee:14:a9:3d:4b:6c:5e:f2:b0:9b:3c:
                    b4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AF:6D:4D:86:54:07:3F:64:A6:53:21:07:9F:ED:76:61:52:C9:60
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138342e302f32312d3231203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:5c:ab:23:38:c0:c1:11:3a:41:3d:6a:1b:83:f0:b6:3c:e3:
         99:f8:42:21:53:7c:18:02:ce:43:35:59:e4:08:13:5b:6c:07:
         7b:44:ed:62:9f:15:f3:c3:a5:40:59:59:00:63:49:38:9e:1b:
         14:e4:49:a2:17:d7:6f:19:44:63:04:c7:76:96:c0:24:7f:98:
         04:93:35:22:0a:c2:aa:13:8c:c8:7d:ae:4f:af:16:a3:44:96:
         30:c2:f7:4e:78:26:61:30:e5:7c:67:bf:06:be:2b:6c:d3:2d:
         a1:b6:fe:89:54:4f:b9:67:a1:be:13:46:3b:cc:8b:56:26:0a:
         1a:63:45:25:74:95:d5:5f:3a:3e:2e:be:b0:cd:bb:80:4c:87:
         33:96:17:74:92:3c:6a:7d:3d:f3:06:0f:5a:54:96:b1:66:e8:
         d0:fe:4e:2e:4c:09:ee:f6:cf:b8:e3:a0:15:0f:24:f2:13:0c:
         aa:90:65:02:a8:6b:aa:ef:b1:b5:50:1a:22:91:ad:74:b8:c6:
         db:38:dc:68:8b:dc:24:eb:11:a1:c6:3f:e6:cd:ff:2d:58:4a:
         40:58:ac:a8:74:af:5b:32:cf:85:e0:ff:e3:0e:0b:9d:56:a2:
         23:ab:35:28:fd:bd:ca:a0:ad:61:6f:09:ca:ee:06:fd:17:a3:
         8e:97:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:09:00 2025 by rpki-client