Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32322d3234203d3e20323634323539.roa
File:                     3133382e3131382e34302e302f32322d3234203d3e20323634323539.roa (raw, json)
Hash identifier:          ExcKnLk/RviXyTEwVM3QR/Xnm9eB5QNHoP67zorULYc=
Subject key identifier:   E4:F9:BC:74:12:14:4B:F8:56:B3:0B:FC:80:D1:B9:47:AE:94:7E:B3
Certificate issuer:       /CN=51B4F2A807A430D3B77B394167F7EED21F753DFB
Certificate serial:       5AE4B1CBF311C65C3EF39096BE0BC25C8D6E2A71
Authority key identifier: 51:B4:F2:A8:07:A4:30:D3:B7:7B:39:41:67:F7:EE:D2:1F:75:3D:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51B4F2A807A430D3B77B394167F7EED21F753DFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32322d3234203d3e20323634323539.roa
Signing time:             Wed 05 Jun 2024 19:04:07 +0000
ROA not before:           Wed 05 Jun 2024 18:59:07 +0000
ROA not after:            Wed 04 Jun 2025 19:04:07 +0000
asID:                     264259
IP address blocks:        138.118.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/51B4F2A807A430D3B77B394167F7EED21F753DFB.crl
                          rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/51B4F2A807A430D3B77B394167F7EED21F753DFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51B4F2A807A430D3B77B394167F7EED21F753DFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e4:b1:cb:f3:11:c6:5c:3e:f3:90:96:be:0b:c2:5c:8d:6e:2a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51B4F2A807A430D3B77B394167F7EED21F753DFB
        Validity
            Not Before: Jun  5 18:59:07 2024 GMT
            Not After : Jun  4 19:04:07 2025 GMT
        Subject: CN=E4F9BC7412144BF856B30BFC80D1B947AE947EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:44:43:ad:81:a1:2b:bc:74:3a:65:44:b7:
                    31:2b:ac:e7:39:9d:9d:ca:c7:f6:39:c8:4e:10:44:
                    5e:f5:31:9c:0b:31:a6:c7:6f:a5:9a:9c:86:cd:24:
                    f5:99:3a:dd:86:69:d0:09:f7:23:6c:e3:a5:e6:91:
                    9b:d4:db:a3:1d:3c:11:89:f7:63:9c:56:65:99:f2:
                    17:d7:3c:bf:aa:3d:30:b2:60:a7:ae:d1:e3:47:cd:
                    59:7b:73:d2:3a:7a:c8:95:f2:6d:28:8e:23:04:64:
                    50:9b:a2:90:b3:5f:e1:c1:98:d5:1d:1d:5b:18:1b:
                    cc:31:e3:22:71:f9:6e:da:96:1a:f5:40:55:55:be:
                    ce:2a:ac:a3:b7:47:c7:f3:7d:f2:a0:52:0f:42:fc:
                    f2:e5:c1:74:b8:3b:e0:49:40:70:03:9c:33:6d:b3:
                    e8:71:5a:58:a7:fa:98:4d:cc:a9:3d:bf:99:47:ac:
                    73:d7:91:bf:ca:43:20:3d:9e:28:38:9d:0b:53:c7:
                    f6:c0:f8:7b:08:e1:6b:c8:6d:1c:79:56:bf:f8:26:
                    e8:12:2b:fb:50:f4:2a:5c:e7:be:9f:18:46:9b:df:
                    db:33:e9:4a:dd:18:90:40:da:e3:03:fa:08:c3:67:
                    f5:2e:03:31:ff:fc:7e:34:88:d6:a3:a7:d7:d4:d0:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F9:BC:74:12:14:4B:F8:56:B3:0B:FC:80:D1:B9:47:AE:94:7E:B3
            X509v3 Authority Key Identifier:
                keyid:51:B4:F2:A8:07:A4:30:D3:B7:7B:39:41:67:F7:EE:D2:1F:75:3D:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/51B4F2A807A430D3B77B394167F7EED21F753DFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51B4F2A807A430D3B77B394167F7EED21F753DFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2W2fWEcyJ94JBCZwjwGDzeCaWCMMZx8u1WHvrwhLw9DZ/0/3133382e3131382e34302e302f32322d3234203d3e20323634323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:86:d2:2a:56:5b:cd:55:aa:8e:d6:30:b4:f0:bf:80:f6:67:
         0f:e3:e9:34:7b:d0:ac:1d:1f:fc:cf:e1:e0:9a:40:11:ee:03:
         e7:80:04:cd:f1:70:fc:27:1c:42:ec:29:19:5d:e2:ea:4f:3c:
         a8:36:7f:ed:46:a8:ba:e3:2c:c6:ed:8c:fb:fa:f3:af:ec:e1:
         33:18:32:0b:a5:9a:01:ba:93:3c:51:20:4b:a9:01:eb:3f:ca:
         1f:42:bf:12:69:c6:ad:14:c3:86:4a:a7:91:cf:e8:90:df:7e:
         ef:88:96:35:7d:7a:88:a1:9f:bf:08:e1:1e:46:bb:2c:93:cd:
         65:9d:32:58:5a:6a:2a:d8:0e:6d:32:5f:62:db:8c:8d:19:c8:
         d1:8f:7a:eb:23:9e:e2:82:9d:db:25:82:be:0f:44:81:5e:74:
         27:c5:59:9e:a5:44:1d:9e:ce:8d:72:14:5c:5f:a6:2a:e8:ea:
         6d:fb:99:f3:b4:12:53:42:71:26:2a:6d:8a:fb:58:d4:f6:1e:
         e4:7d:44:b9:a0:6b:64:e8:b9:b1:bf:04:a5:c3:2c:f8:3f:cb:
         73:b8:c6:60:90:d0:b3:37:7f:8b:fb:4e:c8:23:15:c1:68:e6:
         ff:26:a7:01:7a:01:15:82:f6:d5:29:dd:4d:ec:02:73:e3:6e:
         83:c2:2d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:53 2024 by rpki-client on console-ams.rpki-client.org