Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138372e302f32342d3234203d3e203532373538.roa
File:                     3137372e33382e3138372e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          J2T/Bh40XL/Kc0CiomF/xIuLAI66dZrmSW0BITNHOVA=
Subject key identifier:   C1:6A:EE:62:44:B0:6D:22:9E:BC:B3:16:07:6B:B2:CB:CF:05:08:59
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       3A22EBFFC24BF8DD833D45A16DF4CF49FCD2B806
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138372e302f32342d3234203d3e203532373538.roa
Signing time:             Fri 05 Apr 2024 03:07:34 +0000
ROA not before:           Fri 05 Apr 2024 03:02:34 +0000
ROA not after:            Fri 04 Apr 2025 03:07:34 +0000
asID:                     52758
IP address blocks:        177.38.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:22:eb:ff:c2:4b:f8:dd:83:3d:45:a1:6d:f4:cf:49:fc:d2:b8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Apr  5 03:02:34 2024 GMT
            Not After : Apr  4 03:07:34 2025 GMT
        Subject: CN=C16AEE6244B06D229EBCB316076BB2CBCF050859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:ce:82:89:bc:61:6b:59:e0:9c:55:86:fc:
                    fc:a6:a9:69:e2:fa:96:c6:fc:dc:e0:24:38:8a:fb:
                    0f:ff:a5:89:f5:b7:7b:fa:41:c8:c3:77:63:7c:5a:
                    82:cd:5c:af:50:b2:e5:90:73:88:3c:7a:ac:73:50:
                    0f:4c:c3:af:4c:61:eb:69:b6:60:f9:42:18:fc:b7:
                    88:9c:3a:ca:fa:68:3b:54:4f:97:8d:0b:83:c3:57:
                    fc:53:d7:1a:b4:1a:db:48:35:7e:3c:bc:cb:69:cb:
                    43:a5:44:55:22:4f:4d:f2:ce:09:7b:7f:1a:31:d9:
                    65:ff:13:a1:6d:87:2b:e1:99:99:6f:28:66:44:98:
                    7d:3e:0b:d2:34:90:0a:a5:e4:dd:89:3f:9d:f4:c0:
                    39:fe:cd:c8:0d:c1:04:c0:c0:62:43:73:87:f3:95:
                    9e:9c:d1:95:55:b9:24:d6:43:d5:ca:be:37:2e:5c:
                    d9:ab:17:24:e7:b4:95:d1:17:50:1a:fd:34:90:f0:
                    41:6d:91:cd:6f:fe:f2:96:3e:16:04:2e:7b:ba:c1:
                    0c:2b:9e:fa:5b:40:72:a0:69:8f:fb:59:aa:b7:d9:
                    cd:71:a5:f8:0a:d9:f1:09:9c:61:48:0d:46:c5:35:
                    dd:1e:35:f3:75:10:d9:6f:aa:75:dc:a8:bc:e6:50:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6A:EE:62:44:B0:6D:22:9E:BC:B3:16:07:6B:B2:CB:CF:05:08:59
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138372e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:67:29:d3:4c:ab:49:d0:01:22:6f:c3:53:c0:5f:be:2a:29:
         5a:7b:08:ac:49:fb:c0:4e:d2:09:58:5e:7a:7a:94:0c:b5:0e:
         bd:ca:97:1c:e1:3b:27:3a:ab:4b:fe:93:8a:25:28:5b:8a:8e:
         05:e3:67:0e:d7:30:98:1c:d3:e6:78:3a:9f:6d:59:b7:97:d0:
         c4:66:2b:54:7c:4b:79:94:91:34:af:b7:07:b4:5d:31:b7:57:
         fe:60:13:13:31:1b:a7:1c:29:d1:89:97:ae:12:d7:92:b2:fc:
         5f:5b:c0:28:1f:db:9b:63:a0:76:02:91:b3:84:ef:8c:2b:9d:
         9c:a8:f7:65:1f:d0:11:99:f5:1c:00:3e:b1:75:1c:0f:9e:db:
         0c:a7:98:65:49:1f:7d:97:bf:a2:a9:16:19:88:24:78:6b:7d:
         8f:93:8f:9c:10:3d:6e:7e:2d:bf:a4:32:ab:04:2b:7f:b4:47:
         b9:8e:17:3a:a1:e7:d9:e7:0f:c9:1a:1a:66:be:05:19:5e:a0:
         f2:c8:25:6f:da:6b:cd:a8:cc:ed:84:be:49:bf:ae:37:11:3e:
         40:27:e9:5b:61:7f:b7:53:fa:5b:0c:e2:41:25:41:08:e8:c1:
         97:62:ea:e5:d5:dc:f2:38:b2:0b:54:4b:d9:d2:d6:c3:2a:e3:
         c6:19:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:53 2024 by rpki-client on console-fra.rpki-client.org