Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa
File:                     3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa (raw, json)
Hash identifier:          mJV+9fKEvyAs1r7M6PaQgUzY9Ao8xbl7dKmA2j1ezu8=
Subject key identifier:   27:AF:DE:72:6E:F5:3F:B1:51:1F:38:B4:4E:F3:55:F9:A4:0E:54:44
Certificate issuer:       /CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
Certificate serial:       711E5BA7934DC5FB9224733C1610BF8877994975
Authority key identifier: AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa
Signing time:             Thu 04 Apr 2024 06:37:16 +0000
ROA not before:           Thu 04 Apr 2024 06:32:16 +0000
ROA not after:            Thu 03 Apr 2025 06:37:16 +0000
asID:                     270876
IP address blocks:        138.94.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl
                          rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1e:5b:a7:93:4d:c5:fb:92:24:73:3c:16:10:bf:88:77:99:49:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83
        Validity
            Not Before: Apr  4 06:32:16 2024 GMT
            Not After : Apr  3 06:37:16 2025 GMT
        Subject: CN=27AFDE726EF53FB1511F38B44EF355F9A40E5444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:e1:28:e7:f6:dc:28:1b:31:1d:2d:08:aa:
                    15:75:5f:02:bc:58:f1:e1:b8:4e:6f:62:83:bc:16:
                    dd:81:32:7c:d0:85:43:1e:a2:ed:ce:71:36:f1:ec:
                    fa:43:96:0a:5c:64:d1:a8:fb:31:4a:85:2a:b4:da:
                    e7:ca:03:69:d6:c6:82:45:a2:7c:e4:51:09:7f:68:
                    48:4a:66:9a:a8:0e:12:9e:11:63:d1:3f:ba:86:a8:
                    14:a0:f2:d5:e3:b7:0d:7e:27:99:f8:0d:c1:39:cd:
                    28:c4:63:a8:3e:b7:c7:b1:9f:4b:ef:0c:e8:69:13:
                    e7:6d:9e:a2:32:b6:65:ee:2d:77:f8:6f:af:89:22:
                    2b:c5:d0:b6:47:cb:61:75:46:82:fc:fd:9d:07:af:
                    fa:30:5d:87:76:96:1d:11:ce:80:dc:5d:37:42:dc:
                    d6:b2:02:08:2e:3e:52:4c:15:3b:c8:b9:c0:7b:ca:
                    86:a3:48:48:0c:c9:07:da:79:68:a6:82:76:0f:3a:
                    1c:52:d2:c1:04:15:65:2b:70:88:f5:13:ab:5e:a2:
                    a1:b7:91:9a:f7:ac:3a:70:b1:ec:94:22:8f:22:ef:
                    ae:a6:7f:32:de:29:3b:80:84:94:69:fa:07:bc:f2:
                    72:4a:4a:b6:5d:01:2e:59:83:86:95:e7:c4:f9:44:
                    cb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AF:DE:72:6E:F5:3F:B1:51:1F:38:B4:4E:F3:55:F9:A4:0E:54:44
            X509v3 Authority Key Identifier:
                keyid:AE:59:A4:8B:AA:81:6C:14:CB:96:DA:B0:CA:10:6B:59:B3:B8:DC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE59A48BAA816C14CB96DAB0CA106B59B3B8DC83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/1/3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:45:57:db:50:c4:18:e1:d0:28:fb:ae:fc:02:ef:3e:46:57:
         c9:eb:4c:fd:61:bd:38:f4:ea:21:1f:30:87:6a:19:cf:3a:97:
         91:f1:16:81:c7:09:35:59:d9:fe:eb:27:c1:55:24:33:a8:27:
         16:9a:18:a3:83:09:1c:56:40:57:08:b5:67:8b:2c:16:eb:cb:
         c8:54:9a:ec:7b:d6:fa:98:db:12:9b:c2:99:7e:80:8a:94:9e:
         f2:49:4b:a6:1a:45:42:f1:cf:d9:20:1f:b3:b2:f3:c3:bb:a7:
         ef:56:89:77:3d:0a:dd:1a:18:4f:09:dc:99:0f:d4:ff:39:3a:
         6a:75:0e:cb:4c:83:a4:ad:4e:18:1e:88:ae:1c:c5:7b:6c:58:
         b8:17:c4:41:01:47:1b:1a:4c:55:93:65:19:8b:c1:f2:11:ef:
         9d:c9:bf:95:c4:fe:d5:be:67:9f:57:e8:9b:c5:17:4c:f5:ca:
         9c:19:3b:57:cc:92:4c:80:50:fb:68:de:9d:7f:aa:33:cb:9d:
         61:58:84:3b:1e:e6:53:a9:04:ab:ac:09:0e:a2:99:d9:d8:3e:
         96:bf:a5:b3:a8:97:d4:ce:da:e6:91:fc:54:0e:88:d3:47:8f:
         46:18:38:a4:17:ef:75:c1:bf:aa:8d:81:34:4a:67:23:dc:ab:
         80:64:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:53 2024 by rpki-client on console-ams.rpki-client.org