Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138352e302f32342d3234203d3e203532373538.roa
File:                     3137372e33382e3138352e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          mzYLplt2BlgugeMZvXCuYlkqgXwiRRvUyhPAyg7LoA8=
Subject key identifier:   11:30:CC:F7:D5:13:70:27:B0:DB:88:2C:65:AC:31:7F:82:66:13:97
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       032A2744C2915B718F24D66F8556D808EFBC1D4D
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138352e302f32342d3234203d3e203532373538.roa
Signing time:             Thu 13 Mar 2025 19:05:01 +0000
ROA not before:           Thu 13 Mar 2025 19:00:01 +0000
ROA not after:            Thu 12 Mar 2026 19:05:01 +0000
asID:                     52758
IP address blocks:        177.38.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2a:27:44:c2:91:5b:71:8f:24:d6:6f:85:56:d8:08:ef:bc:1d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Mar 13 19:00:01 2025 GMT
            Not After : Mar 12 19:05:01 2026 GMT
        Subject: CN=1130CCF7D5137027B0DB882C65AC317F82661397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:39:07:24:98:bc:81:3c:18:05:6e:2d:7f:2c:
                    19:fe:fa:2a:08:2b:24:52:e3:58:b1:25:bb:33:2b:
                    16:66:b5:79:34:91:e6:bf:ff:63:e5:85:65:0d:e9:
                    49:a8:63:77:81:dc:76:b9:82:22:46:3c:c1:74:5e:
                    06:3e:6d:fb:5e:b5:44:06:bb:2d:62:b3:a8:5c:e2:
                    67:19:72:d6:90:78:be:e1:ab:c1:14:13:fb:93:4a:
                    8b:69:58:af:9b:7a:62:e1:1b:3c:b0:fc:27:89:e7:
                    d3:e5:a7:19:d8:a3:ef:8b:3d:e9:24:95:29:d1:f9:
                    1e:df:d7:5a:5a:f5:a9:5f:a1:e9:c9:f5:39:d1:44:
                    0c:3f:b4:4a:3a:f7:24:93:c7:dd:02:e2:47:84:08:
                    a6:22:72:18:75:ce:b0:85:b2:25:b1:6e:9e:8d:b3:
                    57:22:c0:2d:a9:c3:cd:6d:a6:6b:c8:1a:21:d5:af:
                    a1:b6:ea:88:76:23:e3:6b:ce:34:94:b6:1c:16:1e:
                    3a:5f:98:7e:08:a5:e5:84:43:0f:6c:b3:54:94:a9:
                    b4:2f:70:2e:7d:c2:55:85:80:eb:0e:79:5a:c1:69:
                    d4:11:6b:70:a1:8e:f1:7b:31:14:9f:c7:01:ad:e6:
                    d6:e6:19:f4:49:7b:e2:70:2a:24:43:1b:fc:3b:ff:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:30:CC:F7:D5:13:70:27:B0:DB:88:2C:65:AC:31:7F:82:66:13:97
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138352e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:07:88:8b:2d:ea:c1:80:ba:85:f0:61:d2:1a:96:3a:63:9a:
         2a:64:af:b4:38:97:3c:76:9d:2d:1f:6f:54:2e:b7:ee:64:25:
         44:7f:50:6e:23:76:a9:7d:b7:d6:e5:e9:ae:02:fc:58:20:d0:
         00:1a:ae:5a:42:61:9b:85:26:1f:eb:28:88:44:24:ec:a2:7e:
         78:b1:61:d1:d9:dc:f5:ba:0d:b5:56:33:7c:cc:c6:31:ec:44:
         91:06:b6:12:19:0f:60:6f:e1:32:14:de:1f:0d:96:0c:dc:69:
         63:3a:6b:d0:81:3c:45:24:e4:2d:f0:12:d3:0d:1a:0d:0a:9c:
         9d:5b:dd:79:4a:4f:53:4c:22:e5:de:6b:a9:a2:68:8f:b6:a2:
         9c:9e:c0:a4:85:ef:15:93:64:a0:45:69:8d:e5:d2:54:be:b2:
         8d:83:6d:d4:83:76:8b:69:ae:eb:77:8b:61:2c:e5:8c:39:5f:
         bd:42:0d:c1:f8:38:7d:5e:3f:50:86:47:05:11:62:ef:15:74:
         eb:c3:e0:7c:43:6e:1a:dd:d6:94:df:5b:b9:52:b4:8b:7a:5d:
         35:4c:70:bb:ee:28:7d:cc:63:e3:4a:d7:32:5a:4a:c2:43:da:
         f0:be:cf:54:2f:ad:d8:13:7d:d2:f5:fd:94:2a:17:43:73:8a:
         4f:78:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:16:46 2025 by rpki-client