Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa
File:                     3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa (raw, json)
Hash identifier:          faklJiG2Xz/D3j5gxFG1sn7kbUB1cKI3skMbhyxSoSU=
Subject key identifier:   02:97:46:55:E5:41:77:78:12:5A:26:80:28:A9:7F:8F:D9:FF:2C:84
Certificate issuer:       /CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
Certificate serial:       358B95988C636F53A9DD1D8E81A6D6BA7AB35C30
Authority key identifier: AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa
Signing time:             Thu 04 Apr 2024 06:37:15 +0000
ROA not before:           Thu 04 Apr 2024 06:32:15 +0000
ROA not after:            Thu 03 Apr 2025 06:37:15 +0000
asID:                     270876
IP address blocks:        138.94.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl
                          rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8b:95:98:8c:63:6f:53:a9:dd:1d:8e:81:a6:d6:ba:7a:b3:5c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
        Validity
            Not Before: Apr  4 06:32:15 2024 GMT
            Not After : Apr  3 06:37:15 2025 GMT
        Subject: CN=02974655E5417778125A268028A97F8FD9FF2C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:11:33:93:65:5b:43:2d:64:b4:a3:cd:18:94:
                    1f:c6:23:74:f6:c1:49:0f:18:a3:bf:70:25:b1:6b:
                    0e:10:84:1a:d1:60:36:c4:3e:21:87:2e:71:b0:ca:
                    e8:26:0b:17:76:ae:e8:ff:40:35:15:dc:4f:93:1e:
                    68:93:67:70:63:e8:3c:c4:30:20:69:c3:0e:05:0a:
                    e0:64:f2:04:94:81:f3:ab:25:05:ee:63:6e:63:1a:
                    94:a4:a6:bb:e3:ea:03:c8:b6:7c:23:3a:70:c7:59:
                    c7:3a:cb:af:6c:2a:bc:b8:69:98:ef:97:76:47:0b:
                    43:7e:ca:b1:45:20:20:92:9b:89:f9:b0:6b:2c:28:
                    d1:f3:93:a1:e2:18:03:70:23:d6:29:4e:96:4e:94:
                    b7:1b:96:92:9b:03:ae:4e:20:4d:c0:3c:cc:5b:57:
                    7e:c5:7f:89:be:4d:1d:46:34:ab:a4:e6:67:ca:b2:
                    1b:07:e5:b7:39:f7:44:e5:14:22:01:97:d5:34:e2:
                    e7:02:36:b7:5d:ef:34:6f:25:1c:0b:bc:c8:f7:b4:
                    4a:28:e6:49:2f:ae:6d:05:59:91:fa:cf:6e:37:8a:
                    1f:dd:f2:8a:ac:1c:7c:77:fc:99:1f:c8:9a:8e:0c:
                    c1:3a:e3:9a:3f:f2:c9:46:f5:1b:2a:bc:95:e2:f8:
                    c6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:46:55:E5:41:77:78:12:5A:26:80:28:A9:7F:8F:D9:FF:2C:84
            X509v3 Authority Key Identifier:
                keyid:AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:e7:47:35:81:94:b1:d6:03:3c:e9:c7:4f:30:20:bc:76:7f:
         5f:7c:da:59:1e:d7:59:1f:05:2c:0f:b2:f2:ce:65:b6:bf:3d:
         4d:06:aa:6d:aa:d5:41:ee:59:59:82:d4:0f:34:cc:92:6d:a5:
         33:92:f7:28:cd:34:d5:ed:99:b0:a4:91:68:6c:9c:d8:b3:be:
         b4:f9:bf:aa:07:d8:d0:c9:72:a8:06:59:05:44:70:c3:69:55:
         9d:7f:88:93:7c:6e:66:2d:90:f2:6b:31:ee:a4:29:95:05:81:
         71:42:68:24:09:60:70:ed:5f:f8:fa:28:c9:0e:ef:f3:0a:e6:
         c5:b5:77:86:c1:aa:f1:71:c6:d2:39:15:58:51:ca:bd:e8:ec:
         36:cd:94:c4:d6:2a:f5:fd:af:ab:60:9a:63:0f:d4:26:71:3e:
         88:ee:89:c5:a7:a0:4b:df:ec:ec:5c:66:52:47:77:34:e5:ba:
         5f:13:1b:91:07:c1:8f:37:c1:63:78:a5:19:fc:9d:08:0d:de:
         8e:18:3d:f1:27:56:39:80:f3:94:d8:0e:bf:23:8d:83:3e:2d:
         cd:03:ce:fa:48:95:87:1e:29:64:ad:45:dd:9b:15:70:cb:f5:
         ae:93:79:1a:a5:0e:7f:1a:b3:b5:0e:61:fc:26:3d:ee:da:e9:
         60:ca:93:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNYuVmIxjb1Op3R2OgabWunqzXDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU1OUE0OEJBQTgxNkMxNENCOTZEQUIwQ0ExMDZCNTlC
M0I4REM4MzAeFw0yNDA0MDQwNjMyMTVaFw0yNTA0MDMwNjM3MTVaMDMxMTAvBgNV
BAMTKDAyOTc0NjU1RTU0MTc3NzgxMjVBMjY4MDI4QTk3RjhGRDlGRjJDODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpETOTZVtDLWS0o80YlB/GI3T2
wUkPGKO/cCWxaw4QhBrRYDbEPiGHLnGwyugmCxd2ruj/QDUV3E+THmiTZ3Bj6DzE
MCBpww4FCuBk8gSUgfOrJQXuY25jGpSkprvj6gPItnwjOnDHWcc6y69sKry4aZjv
l3ZHC0N+yrFFICCSm4n5sGssKNHzk6HiGANwI9YpTpZOlLcblpKbA65OIE3APMxb
V37Ff4m+TR1GNKuk5mfKshsH5bc590TlFCIBl9U04ucCNrdd7zRvJRwLvMj3tEoo
5kkvrm0FWZH6z243ih/d8oqsHHx3/JkfyJqODME645o/8slG9RsqvJXi+MaNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUApdGVeVBd3gSWiaAKKl/j9n/LIQwHwYDVR0j
BBgwFoAUrlmki6qBbBTLltqwyhBrWbO43IMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlA3eUNtbmlOQ3lXWjlaWW9GVm5Ic3ZWNndXckdMWjFtb2NCcFVFV1pS
Q1EvMS9BRTU5QTQ4QkFBODE2QzE0Q0I5NkRBQjBDQTEwNkI1OUIzQjhEQzgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFNTlBNDhCQUE4MTZDMTRD
Qjk2REFCMENBMTA2QjU5QjNCOERDODMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJQN3lDbW5pTkN5V1o5WllvRlZuSHN2VjZ3V3JHTFoxbW9jQnBVRVdaUkNRLzEv
MzEzMzM4MmUzOTM0MmUzMTM2MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzODM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKXqgwDQYJKoZIhvcNAQELBQADggEBAJDnRzWB
lLHWAzzpx08wILx2f1982lke11kfBSwPsvLOZba/PU0Gqm2q1UHuWVmC1A80zJJt
pTOS9yjNNNXtmbCkkWhsnNizvrT5v6oH2NDJcqgGWQVEcMNpVZ1/iJN8bmYtkPJr
Me6kKZUFgXFCaCQJYHDtX/j6KMkO7/MK5sW1d4bBqvFxxtI5FVhRyr3o7DbNlMTW
KvX9r6tgmmMP1CZxPojuicWnoEvf7OxcZlJHdzTlul8TG5EHwY83wWN4pRn8nQgN
3o4YPfEnVjmA85TYDr8jjYM+Lc0DzvpIlYceKWStRd2bFXDL9a6TeRqlDn8as7UO
YfwmPe7a6WDKk6M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:53 2024 by rpki-client on console-ams.rpki-client.org