Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133382e3131382e36382e302f32322d3234203d3e203532353733.roa
File:                     3133382e3131382e36382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          D5CzdxXuL3FlnzA0qOtGDGbDr89fy/4u7vEHtYU9F+c=
Subject key identifier:   6C:30:FD:9C:56:43:44:9B:48:17:C8:77:B6:81:D4:6D:D2:2D:DF:F0
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       0826F605B3C71F60E1CB808FCAB853E7551739E7
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133382e3131382e36382e302f32322d3234203d3e203532353733.roa
Signing time:             Sat 29 Jun 2024 13:17:36 +0000
ROA not before:           Sat 29 Jun 2024 13:12:36 +0000
ROA not after:            Sat 28 Jun 2025 13:17:36 +0000
asID:                     52573
IP address blocks:        138.118.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:26:f6:05:b3:c7:1f:60:e1:cb:80:8f:ca:b8:53:e7:55:17:39:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Jun 29 13:12:36 2024 GMT
            Not After : Jun 28 13:17:36 2025 GMT
        Subject: CN=6C30FD9C5643449B4817C877B681D46DD22DDFF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:56:7c:fd:89:9c:e1:77:8b:7f:97:96:18:8d:
                    cc:b6:92:14:c3:c9:5c:c2:db:9f:46:c6:04:2b:fe:
                    91:92:67:37:72:a1:ef:03:41:52:95:6c:fa:ef:41:
                    c6:27:be:a7:7a:0a:62:e8:68:aa:f2:c4:3c:b1:74:
                    d1:71:df:73:54:25:d0:54:fe:ac:95:5f:78:ca:e9:
                    13:1b:32:03:d5:fb:39:e5:b0:c6:97:09:41:53:2b:
                    22:58:cd:1c:05:fb:1e:21:db:be:58:19:71:a6:e7:
                    0f:58:5c:f5:a6:31:5c:26:10:03:8a:5c:9a:7e:d0:
                    18:4e:bd:10:34:a1:9d:02:09:a7:c4:f6:ad:28:a0:
                    4c:81:e0:55:8b:af:a5:a1:6b:a0:ee:2c:19:7d:bc:
                    f8:68:d1:d4:82:83:1e:00:2d:4b:4d:a4:55:8d:8a:
                    f4:77:75:8a:f7:d6:75:e0:91:b7:3e:8f:73:af:ec:
                    ee:af:7d:5f:89:a1:49:81:9a:ce:97:32:59:77:2d:
                    4f:30:f3:b0:51:e0:10:95:ad:83:85:30:84:c4:3b:
                    72:d7:a4:2c:ee:ba:c7:39:c9:b0:b1:0f:24:85:a3:
                    4a:20:25:44:e5:eb:3b:7f:3c:23:91:5f:8c:77:83:
                    b9:57:22:ad:7d:c2:54:79:49:ad:bc:d2:cb:2e:ea:
                    4c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:30:FD:9C:56:43:44:9B:48:17:C8:77:B6:81:D4:6D:D2:2D:DF:F0
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3133382e3131382e36382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:89:fd:4c:3d:c7:5b:6d:09:bc:d6:af:70:c6:f2:82:25:f2:
         bf:0d:9c:d4:13:37:53:e4:21:af:8d:31:47:d7:54:19:16:13:
         5a:87:7c:04:6b:89:e2:8b:24:75:cf:df:3c:92:64:17:5a:21:
         60:aa:56:c0:e6:69:7d:bc:8f:46:02:20:db:54:29:99:bd:04:
         b9:78:c1:15:43:9e:1f:54:61:56:78:c9:20:30:ce:53:e2:fc:
         fb:f8:2d:b8:de:d6:e9:8b:4d:92:c8:53:58:d2:a5:88:e9:a5:
         7f:21:cb:b7:70:32:1e:4d:8d:80:1b:95:ba:59:55:e7:fb:88:
         5f:4b:5f:52:2c:ca:2e:e9:42:73:5d:3a:4d:c6:b5:77:83:4a:
         5c:b0:6a:f1:49:7a:e4:e7:02:b2:ab:29:c6:06:54:74:7f:59:
         8f:2e:96:64:d0:40:ae:60:03:2b:ed:68:88:69:d7:a5:3c:20:
         ba:07:b5:ad:a5:e3:d7:36:b4:a3:55:7a:a9:2e:35:08:67:04:
         af:1c:98:9e:c9:9c:13:11:9c:d8:7a:39:b7:1b:88:1f:fa:19:
         d7:5b:22:a5:4b:5c:f6:24:6e:3a:da:b6:3e:7b:f2:6e:08:8b:
         51:68:3b:a5:cb:63:24:be:da:24:9a:39:e5:99:71:57:d1:c5:
         6c:5a:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org