Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/3133382e33362e3233322e302f32322d3332203d3e203631363936.roa
File:                     3133382e33362e3233322e302f32322d3332203d3e203631363936.roa (raw, json)
Hash identifier:          psB+YYHjV92iHMLd0c5PgmrNljCOPQEAPu1nr9Hqk4A=
Subject key identifier:   4A:80:B0:2D:F8:1F:54:E6:A8:04:A1:57:A2:85:BA:33:F1:3E:C7:E6
Certificate issuer:       /CN=E099E1E55270BB43965A6A8864FD6A4E4581BB1E
Certificate serial:       0C0C2E83F7A3B3D12F6EA0971A693DA80FFCDEE2
Authority key identifier: E0:99:E1:E5:52:70:BB:43:96:5A:6A:88:64:FD:6A:4E:45:81:BB:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/3133382e33362e3233322e302f32322d3332203d3e203631363936.roa
Signing time:             Thu 04 Apr 2024 19:39:59 +0000
ROA not before:           Thu 04 Apr 2024 19:34:59 +0000
ROA not after:            Thu 03 Apr 2025 19:39:59 +0000
asID:                     61696
IP address blocks:        138.36.232.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.crl
                          rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0c:2e:83:f7:a3:b3:d1:2f:6e:a0:97:1a:69:3d:a8:0f:fc:de:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E099E1E55270BB43965A6A8864FD6A4E4581BB1E
        Validity
            Not Before: Apr  4 19:34:59 2024 GMT
            Not After : Apr  3 19:39:59 2025 GMT
        Subject: CN=4A80B02DF81F54E6A804A157A285BA33F13EC7E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:78:1c:28:fa:55:c9:e7:a8:b3:86:66:ff:
                    5f:c8:62:01:b6:22:d1:68:6e:e7:0a:c6:83:78:4d:
                    5c:e3:1d:b9:b3:09:d5:43:2b:17:39:04:cf:28:eb:
                    5f:d1:ed:4f:21:fa:a3:43:a3:31:39:17:47:c1:aa:
                    58:88:e2:15:a7:ed:06:5c:33:d1:5b:ee:ca:c0:a6:
                    8c:2b:a2:91:8e:11:09:b5:0a:dd:ab:4c:5e:10:b0:
                    c6:a7:28:f8:95:b7:ae:02:80:62:55:05:72:02:ba:
                    35:e3:54:53:1b:93:2e:ad:41:2b:aa:d4:6f:0a:bb:
                    5a:34:e2:6a:3c:55:76:13:09:fe:74:c0:bd:3b:ed:
                    a9:99:e7:18:ef:36:0f:33:6e:ce:71:c8:f8:84:56:
                    bf:e9:83:8d:a2:27:0c:67:4d:11:fd:47:b1:ea:da:
                    84:99:02:ba:e9:da:d7:42:dd:56:46:36:89:1f:6c:
                    06:10:72:a3:03:71:1d:45:47:36:4d:c6:a6:e9:8f:
                    09:97:e3:89:86:8d:ac:33:6d:40:c2:7e:1e:43:92:
                    15:77:c5:93:6b:4d:92:54:6f:0b:53:2a:d0:82:1a:
                    37:72:a0:0a:cd:c1:b8:d2:7f:a7:70:b7:b2:02:88:
                    5c:c9:9d:9d:7d:c7:e8:78:5f:8e:77:ce:1e:8d:8a:
                    cc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:80:B0:2D:F8:1F:54:E6:A8:04:A1:57:A2:85:BA:33:F1:3E:C7:E6
            X509v3 Authority Key Identifier:
                keyid:E0:99:E1:E5:52:70:BB:43:96:5A:6A:88:64:FD:6A:4E:45:81:BB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E099E1E55270BB43965A6A8864FD6A4E4581BB1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/1/3133382e33362e3233322e302f32322d3332203d3e203631363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:97:02:d6:cf:22:93:3e:88:99:3d:f7:1b:79:a6:d2:eb:ef:
         a7:45:28:3f:59:a5:50:80:78:05:77:35:f2:77:9f:ed:90:02:
         02:36:9e:33:e4:88:2e:98:0a:84:89:c5:9f:f2:3c:e4:8d:34:
         7b:bd:0c:3c:aa:37:55:28:b4:4e:a0:23:b4:67:9d:2d:65:a4:
         59:cd:90:b6:3f:91:f3:52:ce:7b:be:f3:a9:af:db:c9:cd:67:
         37:29:4c:00:97:29:d8:9e:60:04:96:5a:f4:94:5e:3f:84:59:
         52:fb:5a:c3:8c:d7:1a:3b:00:d0:0c:c2:23:6d:1f:54:66:9a:
         ba:b2:27:de:a0:0f:36:7d:10:3e:05:b4:ad:e8:ec:95:ab:ef:
         5a:53:92:7f:75:6f:6f:b8:7f:3d:ff:c2:22:b5:66:69:cd:22:
         11:e9:81:0a:26:3e:16:ed:70:f5:fe:76:86:b4:14:23:c7:b3:
         28:d1:2f:a7:f2:c2:08:4c:3e:54:ab:d4:67:cb:e8:3e:60:62:
         0c:d3:97:00:6d:73:c1:8f:1e:18:3f:4f:18:5a:9f:f3:ea:cd:
         20:60:aa:12:67:b8:e6:6b:64:40:42:73:d8:dd:18:07:51:f7:
         a5:8b:ec:fa:d3:4c:4d:97:6d:b8:64:b4:24:8a:fb:1d:4a:c8:
         ee:67:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org