Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138382e302f32332d3234203d3e203532373538.roa
File:                     3137372e33382e3138382e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          sHlhz7KW5DYaWYGYEcWQM2KdzQBq2/nbzvbvkHbWPVs=
Subject key identifier:   AA:A1:E0:58:9A:CA:E1:2D:BA:94:06:5E:46:6A:E3:FA:24:FD:9B:C0
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       58ED51713C564732BACC537FF05EB5A44F78AC09
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138382e302f32332d3234203d3e203532373538.roa
Signing time:             Fri 07 Mar 2025 14:40:59 +0000
ROA not before:           Fri 07 Mar 2025 14:35:59 +0000
ROA not after:            Fri 06 Mar 2026 14:40:59 +0000
asID:                     52758
IP address blocks:        177.38.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ed:51:71:3c:56:47:32:ba:cc:53:7f:f0:5e:b5:a4:4f:78:ac:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Mar  7 14:35:59 2025 GMT
            Not After : Mar  6 14:40:59 2026 GMT
        Subject: CN=AAA1E0589ACAE12DBA94065E466AE3FA24FD9BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:05:88:20:75:86:dc:81:8e:2e:fa:7e:97:
                    65:78:00:dd:3d:eb:2b:3c:56:60:05:ce:6a:51:58:
                    bf:af:5e:1f:fb:ac:51:51:2e:c9:00:0c:90:c4:91:
                    13:44:d8:58:d8:96:47:14:50:5e:35:77:a6:55:4c:
                    17:6d:7b:0e:c9:d0:fc:44:54:1c:0d:a7:b4:59:cd:
                    cb:fa:25:62:0e:a8:4e:75:5d:58:0f:4e:17:0d:39:
                    a2:53:c5:35:b3:31:75:4a:33:bf:60:87:df:1f:9f:
                    9c:49:44:c3:d4:a2:72:9c:a0:a2:50:c5:9a:cc:8e:
                    fb:18:ec:0f:0a:5d:0f:d2:30:8f:20:4f:8c:1d:cb:
                    69:f4:66:87:67:65:7a:7a:ac:f7:59:12:9b:39:83:
                    e6:6f:7d:1f:12:fc:c7:4f:7c:82:39:17:0e:51:66:
                    44:6f:d9:0e:c6:8f:58:cf:5f:2a:b2:a7:8f:62:93:
                    fc:7f:72:08:a8:56:28:c1:c6:1b:87:ec:a0:53:75:
                    99:7e:40:34:66:3f:c0:40:c4:9f:06:af:7b:b0:aa:
                    72:0c:b1:40:2f:d1:6f:c1:36:3a:5a:17:35:32:be:
                    3a:29:4d:6d:89:dc:00:d0:cc:b9:86:9d:22:94:7e:
                    b5:9f:64:b0:7c:b1:24:6c:9e:4d:a6:88:83:ac:d6:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A1:E0:58:9A:CA:E1:2D:BA:94:06:5E:46:6A:E3:FA:24:FD:9B:C0
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3138382e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:1c:e8:da:ef:6e:32:55:61:a9:b6:ed:2c:b5:6a:16:27:f2:
         f7:37:e0:72:61:94:8f:7f:af:8d:19:a6:5c:d3:ee:90:a3:e3:
         64:1d:6e:b8:2b:3e:61:95:be:76:49:86:e9:10:18:91:f4:e0:
         a3:38:32:6d:f2:a9:49:6c:3a:80:3d:9b:85:85:a4:5b:ec:c9:
         80:fc:e5:61:a7:4e:16:d9:bd:f8:c5:24:58:98:2c:3b:f4:b7:
         18:ec:9a:aa:5b:ae:ba:7f:0f:a5:e0:f5:0b:31:db:df:ea:91:
         ae:e3:ba:00:70:20:75:f4:39:ef:80:f8:71:73:d1:2a:b9:bb:
         9d:ea:7a:cc:61:d9:f4:c2:e7:58:9d:93:45:5c:50:7d:b1:95:
         38:2c:42:ce:f5:65:40:aa:ef:21:b3:8b:15:07:c7:5a:37:db:
         6b:d4:0b:50:cd:5c:04:b7:6c:47:99:c1:51:97:df:6d:c0:db:
         2c:89:d7:bf:e8:0d:5e:4b:d0:53:51:f0:a7:34:04:90:13:62:
         9c:73:e0:d9:63:1b:60:d1:39:11:0b:33:25:2d:7e:38:b9:eb:
         ad:f3:4e:90:51:8d:8c:54:ad:ce:45:6a:da:d6:9f:e4:1f:a4:
         7c:94:84:e9:cf:03:a7:35:e6:8e:46:f4:ec:10:1e:b2:62:8d:
         f1:37:40:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:16:39 2025 by rpki-client