Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa
File:                     3137372e33382e3139302e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          aEvDS8AOhkGVeucDBCUpme4chpcgUCKWbOIuECduMNU=
Subject key identifier:   51:02:5D:46:48:EC:FD:4B:B9:B1:67:08:25:7B:0D:1B:E2:21:2E:54
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       3A90014448B7EDE5A0FE28DEED5A608241A76914
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa
Signing time:             Fri 05 Apr 2024 03:07:33 +0000
ROA not before:           Fri 05 Apr 2024 03:02:33 +0000
ROA not after:            Fri 04 Apr 2025 03:07:33 +0000
asID:                     52758
IP address blocks:        177.38.190.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:90:01:44:48:b7:ed:e5:a0:fe:28:de:ed:5a:60:82:41:a7:69:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Apr  5 03:02:33 2024 GMT
            Not After : Apr  4 03:07:33 2025 GMT
        Subject: CN=51025D4648ECFD4BB9B16708257B0D1BE2212E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:fa:d5:59:4e:16:72:c6:9a:31:37:50:9d:
                    d3:ca:da:06:6c:c9:ae:d3:46:35:06:15:c0:cd:9d:
                    51:02:69:f2:0c:21:27:f9:4b:95:0c:04:9a:63:9a:
                    de:73:71:82:a8:8c:aa:a9:0a:3d:98:fe:6c:4f:40:
                    27:fd:11:8f:96:61:90:25:f5:03:81:8d:21:0b:3b:
                    58:e6:f0:7d:c8:6f:57:a6:f5:1a:98:82:ba:6d:2e:
                    19:dd:91:a4:9b:8e:7a:38:de:0c:0b:ab:30:2a:ad:
                    8a:9a:73:7a:cc:07:76:49:a1:14:e4:15:8b:8f:aa:
                    b8:5c:5d:c1:97:62:54:ca:09:3b:0a:05:ba:fc:32:
                    c0:5d:a2:3c:3a:d5:4f:5d:91:57:87:2b:c9:c4:ac:
                    c4:fc:ff:57:ac:6a:d6:df:4d:b8:2d:f1:e9:06:10:
                    0f:ee:6d:78:dd:50:35:77:1b:76:81:5f:a6:90:c6:
                    00:a0:95:bf:9f:fb:cd:de:dc:93:33:d9:cf:95:78:
                    86:e1:6a:9c:fd:18:f3:b8:69:cc:24:67:e6:27:03:
                    69:b9:4c:5a:0f:4e:b3:0c:37:39:62:5e:78:05:32:
                    0b:31:b6:bf:ed:4f:45:4a:8b:ff:43:c2:56:01:fa:
                    e1:e0:1d:9e:99:02:e8:fd:f0:57:a2:b6:6d:cb:71:
                    2c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:02:5D:46:48:EC:FD:4B:B9:B1:67:08:25:7B:0D:1B:E2:21:2E:54
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3137372e33382e3139302e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:47:88:9f:07:0a:e4:6d:e9:0c:a2:29:7e:01:e3:b5:a9:76:
         2b:58:53:cd:7d:4b:db:03:0b:4b:89:12:88:dc:fb:bb:c9:6e:
         c8:7c:98:33:fd:84:fb:19:16:4c:52:a0:1f:2a:b8:fd:14:13:
         03:d1:b8:1d:e5:00:62:78:47:85:f9:f6:2f:d9:38:e8:14:85:
         97:2a:ff:b8:1e:e7:f5:dc:ce:a1:17:1d:9e:89:92:b1:8b:95:
         bc:63:cf:d3:17:13:42:55:7c:0c:8d:fd:a2:ce:0f:3d:8d:a9:
         49:b6:af:ff:14:2c:3b:8f:df:82:18:bf:22:31:ec:33:5d:75:
         be:6e:c3:ae:61:0b:47:50:09:71:e4:b8:14:98:08:96:3b:f4:
         3f:2d:ef:51:0a:87:e8:21:19:07:24:ec:3f:b4:3d:da:7d:72:
         f4:0a:a5:e0:1b:36:47:79:3e:ed:b4:b7:08:ec:31:80:a6:3e:
         e2:a3:32:4b:a9:dd:e4:30:e6:41:90:ef:bb:ce:03:b9:6a:04:
         64:c4:91:b6:51:0b:7f:01:20:36:d7:e6:5f:0b:31:6f:8f:d0:
         43:fd:36:fb:48:79:ab:8a:72:4e:ed:d3:54:d7:26:64:7d:eb:
         e2:d7:d0:8f:35:8e:b2:16:86:a1:db:eb:6f:75:2a:b2:17:11:
         e0:14:c9:ac
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOpABREi37eWg/ije7VpggkGnaRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFNDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRF
MzcwQzZEQjAeFw0yNDA0MDUwMzAyMzNaFw0yNTA0MDQwMzA3MzNaMDMxMTAvBgNV
BAMTKDUxMDI1RDQ2NDhFQ0ZENEJCOUIxNjcwODI1N0IwRDFCRTIyMTJFNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCryPrVWU4WcsaaMTdQndPK2gZs
ya7TRjUGFcDNnVECafIMISf5S5UMBJpjmt5zcYKojKqpCj2Y/mxPQCf9EY+WYZAl
9QOBjSELO1jm8H3Ib1em9RqYgrptLhndkaSbjno43gwLqzAqrYqac3rMB3ZJoRTk
FYuPqrhcXcGXYlTKCTsKBbr8MsBdojw61U9dkVeHK8nErMT8/1esatbfTbgt8ekG
EA/ubXjdUDV3G3aBX6aQxgCglb+f+83e3JMz2c+VeIbhapz9GPO4acwkZ+YnA2m5
TFoPTrMMNzliXngFMgsxtr/tT0VKi/9DwlYB+uHgHZ6ZAuj98Feitm3LcSz3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUQJdRkjs/Uu5sWcIJXsNG+IhLlQwHwYDVR0j
BBgwFoAUs+Rf8/0h+3dfdQMLeyTAJONwxtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMS9CM0U0NUZGM0ZEMjFGQjc3NUY3NTAzMEI3QjI0QzAyNEUzNzBDNkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRTQ1RkYzRkQyMUZCNzc1
Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEv
MzEzNzM3MmUzMzM4MmUzMTM5MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTMy
MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsSa+MA0GCSqGSIb3DQEBCwUAA4IBAQAnR4ifBwrk
bekMoil+AeO1qXYrWFPNfUvbAwtLiRKI3Pu7yW7IfJgz/YT7GRZMUqAfKrj9FBMD
0bgd5QBieEeF+fYv2TjoFIWXKv+4Huf13M6hFx2eiZKxi5W8Y8/TFxNCVXwMjf2i
zg89jalJtq//FCw7j9+CGL8iMewzXXW+bsOuYQtHUAlx5LgUmAiWO/Q/Le9RCofo
IRkHJOw/tD3afXL0CqXgGzZHeT7ttLcI7DGApj7iozJLqd3kMOZBkO+7zgO5agRk
xJG2UQt/ASA21+ZfCzFvj9BD/Tb7SHmrinJO7dNU1yZkfevi19CPNY6yFoah2+tv
dSqyFxHgFMms
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:53 2024 by rpki-client on console-fra.rpki-client.org