Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3137372e33382e35362e302f32312d3332203d3e203532393434.roa
File:                     3137372e33382e35362e302f32312d3332203d3e203532393434.roa (raw, json)
Hash identifier:          gaSNJkKvqdU0CE86kN3IaX96sMtlhCPEooMUICMSsxE=
Subject key identifier:   95:37:7C:7A:94:1E:D8:53:41:F6:F2:B7:06:29:C5:ED:6C:DF:E8:5E
Certificate issuer:       /CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Certificate serial:       6805C1B9D22D8E8FBC66270403A63EB793A02271
Authority key identifier: 2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3137372e33382e35362e302f32312d3332203d3e203532393434.roa
Signing time:             Fri 20 Jun 2025 17:50:53 +0000
ROA not before:           Fri 20 Jun 2025 17:45:53 +0000
ROA not after:            Fri 19 Jun 2026 17:50:53 +0000
asID:                     52944
IP address blocks:        177.38.56.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl
                          rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 18:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:05:c1:b9:d2:2d:8e:8f:bc:66:27:04:03:a6:3e:b7:93:a0:22:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
        Validity
            Not Before: Jun 20 17:45:53 2025 GMT
            Not After : Jun 19 17:50:53 2026 GMT
        Subject: CN=95377C7A941ED85341F6F2B70629C5ED6CDFE85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:b4:b0:13:65:ed:e4:71:61:2f:c1:1b:f5:
                    ef:3d:40:36:21:f0:2c:6d:5d:c7:4a:df:3d:7b:1d:
                    b7:3c:0f:c9:c6:ed:39:15:4a:91:1b:fe:38:3a:d2:
                    18:14:84:57:a4:db:4f:37:73:4b:de:36:2c:e8:96:
                    44:d1:f3:8e:d7:e0:d4:51:d0:d6:7f:ba:95:6d:29:
                    9d:c8:61:53:30:16:2b:8b:9d:93:1b:95:4f:25:f9:
                    ee:fc:26:75:9a:65:0b:a6:56:49:d7:e4:d9:f7:e8:
                    31:15:fa:d9:57:c4:74:95:8e:65:54:2b:a2:c5:e5:
                    99:7b:b5:6e:83:81:e5:1b:11:ce:1f:14:6f:c4:8f:
                    ad:dd:2d:92:3e:27:46:d2:2d:cb:a9:a1:68:61:86:
                    b1:b1:72:a1:5c:90:34:ed:b6:fd:3d:1e:f6:81:b0:
                    2e:eb:2e:dc:6e:f1:4d:18:2e:61:c5:6b:54:e1:7e:
                    15:10:e2:cd:2f:b0:c6:fd:56:2c:2e:65:2e:84:4d:
                    b1:31:2d:a0:7f:ec:ee:90:1c:7b:ab:3f:a8:80:1d:
                    86:2e:a7:28:d0:9c:c6:01:9c:76:c4:93:de:98:e6:
                    a8:98:fb:41:d7:dd:8d:ca:27:77:7f:33:ef:a0:67:
                    a9:2a:16:97:21:55:f8:d8:2a:f3:62:2e:a6:df:85:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:37:7C:7A:94:1E:D8:53:41:F6:F2:B7:06:29:C5:ED:6C:DF:E8:5E
            X509v3 Authority Key Identifier:
                keyid:2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3137372e33382e35362e302f32312d3332203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         dd:f7:47:92:51:96:c4:b5:04:02:f6:78:42:13:c7:f4:53:b8:
         85:7b:4b:ea:1d:51:44:64:b0:64:50:6f:60:83:d3:8b:c7:b7:
         18:d6:21:87:28:9a:c6:d5:33:9b:e2:36:83:1d:1b:5f:01:76:
         eb:38:2a:29:e5:a2:e3:b6:c8:e9:93:87:f6:a0:c0:7d:45:76:
         1f:62:84:f7:5f:c9:b2:59:00:06:2d:62:ad:38:ec:0b:c3:17:
         ab:7f:7a:59:c8:aa:b1:2e:a2:c9:bb:3b:c6:5d:5e:dd:ab:71:
         8d:50:4d:a3:48:eb:38:c3:e9:36:11:49:2f:b9:ab:72:f2:94:
         95:00:c5:ed:4b:f0:f9:e2:96:b6:5d:7d:89:ec:48:74:cd:d2:
         ac:78:3f:22:f4:0c:87:a9:70:85:f4:e2:91:e7:e2:d5:ac:7b:
         9a:e5:4c:1d:03:75:36:23:33:0a:2f:11:29:f3:f9:f6:f1:2d:
         bc:9b:56:c6:07:ec:aa:68:e9:21:55:6c:4b:1f:2a:cd:10:d3:
         cc:ce:75:de:18:e6:fc:e5:07:f1:df:5a:31:e4:d0:0f:e3:50:
         21:80:0d:88:92:98:6e:ec:cb:61:7f:10:2c:f2:aa:17:fb:d3:
         2c:35:e8:9c:00:7f:c3:cd:47:96:b1:92:08:be:97:2f:22:a2:
         b6:4b:c4:e1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaAXBudItjo+8ZicEA6Y+t5OgInEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3QjJCMzZDQjMzM0MxQ0Y2MDAzOUIxQzM4NzQyMzM4
QkU2OUUyRjAeFw0yNTA2MjAxNzQ1NTNaFw0yNjA2MTkxNzUwNTNaMDMxMTAvBgNV
BAMTKDk1Mzc3QzdBOTQxRUQ4NTM0MUY2RjJCNzA2MjlDNUVENkNERkU4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3H7SwE2Xt5HFhL8Eb9e89QDYh
8CxtXcdK3z17Hbc8D8nG7TkVSpEb/jg60hgUhFek2083c0veNizolkTR847X4NRR
0NZ/upVtKZ3IYVMwFiuLnZMblU8l+e78JnWaZQumVknX5Nn36DEV+tlXxHSVjmVU
K6LF5Zl7tW6DgeUbEc4fFG/Ej63dLZI+J0bSLcupoWhhhrGxcqFckDTttv09HvaB
sC7rLtxu8U0YLmHFa1ThfhUQ4s0vsMb9ViwuZS6ETbExLaB/7O6QHHurP6iAHYYu
pyjQnMYBnHbEk96Y5qiY+0HX3Y3KJ3d/M++gZ6kqFpchVfjYKvNiLqbfhXgRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlTd8epQe2FNB9vK3BinF7Wzf6F4wHwYDVR0j
BBgwFoAUK3srNsszPBz2ADmxw4dCM4vmni8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZ1TnNhTGphYTJYVGJRa3JiWmlnam5WeXM3UVpkQVRNUGlHamlyQVNX
ZmovMC8yQjdCMkIzNkNCMzMzQzFDRjYwMDM5QjFDMzg3NDIzMzhCRTY5RTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCN0IyQjM2Q0IzMzNDMUNG
NjAwMzlCMUMzODc0MjMzOEJFNjlFMkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWdU5zYUxqYWEyWFRiUWtyYlppZ2puVnlzN1FaZEFUTVBpR2ppckFTV2ZqLzAv
MzEzNzM3MmUzMzM4MmUzNTM2MmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzUzMjM5
MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7EmODANBgkqhkiG9w0BAQsFAAOCAQEA3fdHklGWxLUE
AvZ4QhPH9FO4hXtL6h1RRGSwZFBvYIPTi8e3GNYhhyiaxtUzm+I2gx0bXwF26zgq
KeWi47bI6ZOH9qDAfUV2H2KE91/JslkABi1irTjsC8MXq396WciqsS6iybs7xl1e
3atxjVBNo0jrOMPpNhFJL7mrcvKUlQDF7Uvw+eKWtl19iexIdM3SrHg/IvQMh6lw
hfTikefi1ax7muVMHQN1NiMzCi8RKfP59vEtvJtWxgfsqmjpIVVsSx8qzRDTzM51
3hjm/OUH8d9aMeTQD+NQIYANiJKYbuzLYX8QLPKqF/vTLDXonAB/w81HlrGSCL6X
LyKitkvE4Q==
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:45:18 2025 by rpki-client