Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3133382e39392e3136302e302f32322d3234203d3e20323634323132.roa
File:                     3133382e39392e3136302e302f32322d3234203d3e20323634323132.roa (raw, json)
Hash identifier:          XdxEy5YXI25ehzyf8+I2+HkW2aUajIbRMYxkQpR+zAE=
Subject key identifier:   D4:9C:FB:96:FF:E5:C2:67:67:04:DA:6D:FF:7C:52:8D:A3:FB:64:F6
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       3FBBD624AE6286BE31CB36E9EEE815A50C8C2669
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3133382e39392e3136302e302f32322d3234203d3e20323634323132.roa
Signing time:             Thu 04 Apr 2024 05:47:15 +0000
ROA not before:           Thu 04 Apr 2024 05:42:15 +0000
ROA not after:            Thu 03 Apr 2025 05:47:15 +0000
asID:                     264212
IP address blocks:        138.99.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl
                          rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bb:d6:24:ae:62:86:be:31:cb:36:e9:ee:e8:15:a5:0c:8c:26:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Apr  4 05:42:15 2024 GMT
            Not After : Apr  3 05:47:15 2025 GMT
        Subject: CN=D49CFB96FFE5C2676704DA6DFF7C528DA3FB64F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:1d:76:81:1a:da:7e:83:b3:5b:db:fe:27:
                    d9:b5:06:dc:54:f2:f0:d4:30:9d:4a:51:24:8a:3c:
                    7d:1d:27:ef:b7:c7:bc:7c:15:d8:e7:70:86:03:ca:
                    96:a7:0a:c4:8d:bb:f1:ed:4f:10:11:ae:2d:06:10:
                    09:47:a3:00:b2:67:b8:cc:91:8b:5c:4c:57:e5:a8:
                    ea:8b:d9:d8:59:38:5f:e1:74:5c:86:14:84:9a:69:
                    53:6f:0f:09:ed:cb:49:25:cb:92:e9:24:c3:3a:0e:
                    d7:22:47:e4:27:6d:f1:4f:1c:0c:0d:c5:8e:c8:01:
                    d2:33:42:06:f4:f6:64:c7:ca:25:5d:dc:53:83:da:
                    44:f4:79:bf:a6:26:86:0f:8e:6e:a6:fd:bf:f9:1a:
                    d6:92:32:e7:81:df:9d:b4:0d:67:e1:e9:2e:e7:f7:
                    d4:b8:6f:79:38:38:64:32:29:c7:13:ce:07:58:bf:
                    6e:9b:70:0e:7b:7e:52:da:0c:00:eb:59:74:9f:07:
                    8a:fc:6d:d0:34:08:1e:1d:a2:63:20:f5:af:31:2a:
                    a7:eb:3f:af:79:a4:6a:19:a2:af:f2:cd:fc:79:05:
                    33:b8:8c:ee:10:1c:88:86:ac:15:9b:36:0c:79:a8:
                    9b:7b:48:3f:33:1a:7b:73:ad:8f:d1:f1:68:5f:30:
                    e1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9C:FB:96:FF:E5:C2:67:67:04:DA:6D:FF:7C:52:8D:A3:FB:64:F6
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/3133382e39392e3136302e302f32322d3234203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:ae:c8:86:f7:e1:93:57:25:6e:69:d2:5c:e4:ad:33:94:8a:
         7a:9a:ba:b5:33:cc:af:89:6b:00:90:0e:ae:33:77:16:c8:f1:
         c5:cf:b7:54:18:1f:4d:6e:04:ed:2f:df:5a:1e:e5:3a:62:8e:
         fb:c6:af:cb:a5:aa:3e:a8:8e:e0:88:22:2d:26:10:0d:30:14:
         dc:e9:52:e7:4e:e3:8e:8a:48:50:40:6f:a9:bb:4b:42:d2:d0:
         55:7c:a5:c8:1a:4a:0a:2e:28:58:62:ff:38:69:45:62:8d:d0:
         07:77:22:97:e4:53:23:69:1d:d1:92:88:56:10:46:dc:08:dd:
         60:4f:f4:92:81:f3:60:9c:f9:85:f2:f8:6b:36:e3:f0:6b:6f:
         dc:12:97:c5:db:e6:f9:79:91:b2:95:c9:7e:53:ae:d0:66:70:
         4e:8d:46:b1:d6:d6:56:2d:6c:60:29:b6:e7:de:62:55:14:2c:
         b2:e1:a0:d8:6f:cd:84:d4:05:fe:d4:fd:bd:5d:d8:ef:31:34:
         7d:6c:94:f9:9b:bb:b8:21:75:db:1a:c8:76:11:8a:63:16:d3:
         24:8e:4c:c4:b0:f3:f2:80:8c:d7:54:b1:7f:5f:9d:42:5f:c0:
         df:35:99:b9:79:dc:fb:14:f0:d8:04:35:66:1f:2d:28:3c:ac:
         d5:28:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:34 2024 by rpki-client on console-ams.rpki-client.org