Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa
File:                     3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa (raw, json)
Hash identifier:          9YugNT+oBYz35tDwFmvePqTpqv/qV28BywMBrTJPv4c=
Subject key identifier:   40:03:E2:EF:78:42:F2:47:E8:D7:EC:CE:C3:E2:CD:98:61:EF:76:57
Certificate issuer:       /CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
Certificate serial:       11F584DC490DE5E4E17DA3962B19340DE813C425
Authority key identifier: AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa
Signing time:             Thu 04 Apr 2024 06:37:16 +0000
ROA not before:           Thu 04 Apr 2024 06:32:16 +0000
ROA not after:            Thu 03 Apr 2025 06:37:16 +0000
asID:                     270876
IP address blocks:        138.94.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl
                          rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f5:84:dc:49:0d:e5:e4:e1:7d:a3:96:2b:19:34:0d:e8:13:c4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
        Validity
            Not Before: Apr  4 06:32:16 2024 GMT
            Not After : Apr  3 06:37:16 2025 GMT
        Subject: CN=4003E2EF7842F247E8D7ECCEC3E2CD9861EF7657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c6:12:d0:f0:48:99:63:b3:cc:d8:ad:68:09:
                    d1:e2:c8:65:24:33:44:1f:b3:f4:86:67:a5:fb:04:
                    6b:bd:aa:d7:c7:53:60:1f:d8:38:86:a7:4e:3a:74:
                    7a:bf:2b:ab:95:50:48:69:17:b2:c2:06:3e:e4:77:
                    42:6b:04:42:8b:de:70:2d:07:2d:56:ae:56:2e:c4:
                    8e:dd:bd:9d:fe:8b:15:7f:07:d2:4e:d7:27:e4:cb:
                    9d:b5:aa:83:ca:bf:af:68:c0:21:2d:68:e5:aa:96:
                    97:86:c6:bd:42:9c:57:92:2e:fe:5b:df:59:25:93:
                    f0:58:6e:cf:0f:90:0d:b9:b6:e1:d3:3f:69:25:eb:
                    07:47:06:63:c9:e1:79:fc:64:37:4e:78:93:46:f5:
                    4a:3d:e7:5c:b5:14:09:cd:07:46:2b:bc:b4:2e:72:
                    ef:2f:4c:5f:11:61:da:3b:6a:b2:3f:40:2b:7c:d7:
                    4b:22:5b:52:1a:1b:ea:92:09:d0:fe:84:ea:7d:c7:
                    69:b4:86:04:e0:c5:72:21:51:cd:90:78:6a:f3:53:
                    87:c0:10:78:3c:67:76:fc:5f:56:3e:02:49:d1:5e:
                    7e:01:12:4b:35:8e:49:84:01:f8:3c:33:f0:05:6c:
                    8a:90:4f:5b:dc:d3:7a:40:22:d3:b9:4f:7a:ee:95:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:03:E2:EF:78:42:F2:47:E8:D7:EC:CE:C3:E2:CD:98:61:EF:76:57
            X509v3 Authority Key Identifier:
                keyid:AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32322d3232203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:bb:cf:78:59:60:aa:4a:57:ce:6a:13:f8:3e:9b:7b:8c:4a:
         00:7b:25:cd:b0:70:58:fc:94:73:c0:ed:6a:d6:8c:23:9a:aa:
         4a:45:bf:5d:28:e8:33:0e:12:81:1f:c9:26:0c:7c:0e:c1:17:
         85:90:fe:52:84:5f:22:fa:ac:95:2e:2e:bb:50:4b:ca:7d:81:
         73:56:e0:55:76:e6:cc:47:64:2b:44:1a:5f:a7:41:f2:b7:75:
         24:75:86:fa:61:19:61:fd:34:40:1f:ca:9e:9a:1a:03:5f:af:
         ae:bb:58:52:c5:28:e8:65:06:21:71:be:a5:6e:38:26:18:2a:
         12:5e:d5:fd:85:f1:04:12:bc:f4:52:cd:71:e1:72:14:3c:d6:
         0a:fc:72:c6:73:27:ce:ea:e7:e8:2a:fe:24:0d:49:dc:1f:5e:
         1d:b5:28:b7:13:0e:59:ff:87:a6:bb:d4:46:71:fc:74:af:4e:
         51:83:5a:99:c0:36:21:3c:75:2e:bc:47:aa:85:a4:cb:7c:19:
         6e:a1:c6:f9:f3:17:6d:af:e8:43:c3:eb:ac:34:fb:fa:16:bb:
         f8:7a:e7:4a:d4:48:4d:93:ee:ec:c8:03:75:90:a4:7c:0c:67:
         78:60:fd:a2:bb:6f:8e:33:19:a4:b9:2f:07:ce:84:7f:70:4d:
         8c:1b:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:35 2024 by rpki-client on console-fra.rpki-client.org