Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138362e302f32342d3234203d3e203532373538.roa
File:                     3137372e33382e3138362e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          kRsLEXc8kXG5eLwEKxSLs6IEugtpm7a4SCBgSdUKSAo=
Subject key identifier:   D7:BC:3E:3E:75:40:79:A8:F5:AD:C3:D9:2F:2C:A2:84:C3:58:6E:B3
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       7F2C6124EB81AB0910E8374B7E61E037B1B2A314
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138362e302f32342d3234203d3e203532373538.roa
Signing time:             Fri 07 Mar 2025 14:41:00 +0000
ROA not before:           Fri 07 Mar 2025 14:36:00 +0000
ROA not after:            Fri 06 Mar 2026 14:41:00 +0000
asID:                     52758
IP address blocks:        177.38.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2c:61:24:eb:81:ab:09:10:e8:37:4b:7e:61:e0:37:b1:b2:a3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Mar  7 14:36:00 2025 GMT
            Not After : Mar  6 14:41:00 2026 GMT
        Subject: CN=D7BC3E3E754079A8F5ADC3D92F2CA284C3586EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0e:6b:7e:ee:5e:83:69:a2:40:d5:56:0d:88:
                    5c:42:05:43:ac:43:9b:8b:c3:89:5d:ca:90:ff:28:
                    04:62:f7:d0:af:d0:a9:59:e3:6f:f2:af:1a:1d:d1:
                    76:c4:51:ad:d3:ad:3f:6b:16:21:64:b4:51:0e:83:
                    16:38:b6:4e:fe:e1:6b:e2:60:90:ca:53:d6:d5:d9:
                    94:13:94:f0:9a:2f:b8:2c:99:67:f9:33:52:f6:a4:
                    99:97:0e:e9:eb:38:54:cb:dd:ae:91:19:15:f4:5f:
                    94:20:90:61:6f:44:7a:3d:87:5b:dd:07:55:c8:5a:
                    07:e9:56:f7:07:7a:55:d5:3f:ea:a2:44:b4:72:66:
                    65:41:17:c3:bd:a2:2b:f2:98:ff:8c:a3:88:12:fb:
                    f4:89:a6:cb:68:f4:94:79:5b:c5:45:85:e7:e4:6c:
                    6b:6a:2f:80:ef:b5:4c:f4:b3:a3:6f:27:fb:6b:9a:
                    3b:2f:db:86:3f:9a:30:15:15:01:f5:ac:28:d8:43:
                    67:83:b7:09:71:4d:69:c6:7f:e2:49:db:51:ff:f9:
                    22:59:ce:71:92:bc:e7:1a:f2:04:b3:f2:ff:94:2c:
                    a0:5e:88:4f:c4:c5:2c:a0:ee:34:e6:78:d7:7a:25:
                    5c:d6:26:da:29:b2:cc:a7:a3:45:4a:18:72:2d:4b:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BC:3E:3E:75:40:79:A8:F5:AD:C3:D9:2F:2C:A2:84:C3:58:6E:B3
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138362e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:2f:d6:31:c0:2e:4f:3a:f9:16:ed:f2:11:f3:47:e1:d7:3f:
         48:b7:6a:bc:ab:18:ce:ff:4c:02:a4:20:bf:bb:e5:ad:9a:9b:
         dd:16:46:15:6b:84:8a:6a:ab:2d:c5:9a:ea:49:3e:a7:27:c1:
         04:d9:f3:5b:56:aa:08:5a:03:5b:a5:b4:d9:1d:f5:37:19:35:
         a2:82:0c:a3:e6:5c:53:32:cd:80:b3:98:3b:29:19:4c:58:03:
         f1:bb:b0:7f:15:34:50:b8:77:c5:0b:47:61:96:d0:f0:da:63:
         3c:3e:47:3e:f6:5b:6c:3a:4f:c9:6b:46:40:23:9f:b0:59:37:
         a5:fb:c4:ac:98:bc:9e:ed:ac:3a:ad:d6:81:04:aa:77:34:b6:
         bb:e8:33:52:b7:07:64:c6:ba:4e:12:56:ba:f4:db:ea:51:a6:
         df:8f:26:a6:98:b9:68:38:f9:70:1c:e0:f0:1c:6c:31:41:3f:
         23:8b:59:08:8e:26:8a:b9:f0:5c:12:09:7e:7f:35:e4:4c:eb:
         db:30:25:06:03:89:d3:56:1d:40:61:3a:7f:c2:f7:d2:7f:59:
         62:59:24:a2:6e:72:51:0a:43:58:25:0e:d7:93:1f:8c:c0:34:
         c7:f4:50:7f:91:57:e9:63:a2:04:cd:14:c2:27:c7:f2:c5:9a:
         17:47:a0:a0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfyxhJOuBqwkQ6DdLfmHgN7GyoxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFNDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRF
MzcwQzZEQjAeFw0yNTAzMDcxNDM2MDBaFw0yNjAzMDYxNDQxMDBaMDMxMTAvBgNV
BAMTKEQ3QkMzRTNFNzU0MDc5QThGNUFEQzNEOTJGMkNBMjg0QzM1ODZFQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQDmt+7l6DaaJA1VYNiFxCBUOs
Q5uLw4ldypD/KARi99Cv0KlZ42/yrxod0XbEUa3TrT9rFiFktFEOgxY4tk7+4Wvi
YJDKU9bV2ZQTlPCaL7gsmWf5M1L2pJmXDunrOFTL3a6RGRX0X5QgkGFvRHo9h1vd
B1XIWgfpVvcHelXVP+qiRLRyZmVBF8O9oivymP+Mo4gS+/SJpsto9JR5W8VFhefk
bGtqL4DvtUz0s6NvJ/trmjsv24Y/mjAVFQH1rCjYQ2eDtwlxTWnGf+JJ21H/+SJZ
znGSvOca8gSz8v+ULKBeiE/ExSyg7jTmeNd6JVzWJtopssyno0VKGHItS2LZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU17w+PnVAeaj1rcPZLyyihMNYbrMwHwYDVR0j
BBgwFoAUs+Rf8/0h+3dfdQMLeyTAJONwxtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMS9CM0U0NUZGM0ZEMjFGQjc3NUY3NTAzMEI3QjI0QzAyNEUzNzBDNkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRTQ1RkYzRkQyMUZCNzc1
Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEv
MzEzNzM3MmUzMzM4MmUzMTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSa6MA0GCSqGSIb3DQEBCwUAA4IBAQCTL9YxwC5P
OvkW7fIR80fh1z9It2q8qxjO/0wCpCC/u+WtmpvdFkYVa4SKaqstxZrqST6nJ8EE
2fNbVqoIWgNbpbTZHfU3GTWiggyj5lxTMs2As5g7KRlMWAPxu7B/FTRQuHfFC0dh
ltDw2mM8Pkc+9ltsOk/Ja0ZAI5+wWTel+8SsmLye7aw6rdaBBKp3NLa76DNStwdk
xrpOEla69NvqUabfjyammLloOPlwHODwHGwxQT8ji1kIjiaKufBcEgl+fzXkTOvb
MCUGA4nTVh1AYTp/wvfSf1liWSSibnJRCkNYJQ7Xkx+MwDTH9FB/kVfpY6IEzRTC
J8fyxZoXR6Cg
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:13:53 2025 by rpki-client