Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/3133382e39372e3131362e302f32322d3234203d3e20323634313632.roa
File:                     3133382e39372e3131362e302f32322d3234203d3e20323634313632.roa (raw, json)
Hash identifier:          GmaQeTZOFJs3menusG5mtFfmR0Luwo8fe+lN0gFr7So=
Subject key identifier:   B4:0B:17:C3:F6:1B:28:E5:9E:0A:2A:AB:90:C6:8E:0D:9A:FE:54:6B
Certificate issuer:       /CN=F737E609C9AE9595DC55025FC95C8BF63244E8F2
Certificate serial:       627F5120E4F56C07429FF988C57E9B5F5953FEB1
Authority key identifier: F7:37:E6:09:C9:AE:95:95:DC:55:02:5F:C9:5C:8B:F6:32:44:E8:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/3133382e39372e3131362e302f32322d3234203d3e20323634313632.roa
Signing time:             Mon 01 Jul 2024 14:12:42 +0000
ROA not before:           Mon 01 Jul 2024 14:07:42 +0000
ROA not after:            Mon 30 Jun 2025 14:12:42 +0000
asID:                     264162
IP address blocks:        138.97.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.crl
                          rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7f:51:20:e4:f5:6c:07:42:9f:f9:88:c5:7e:9b:5f:59:53:fe:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F737E609C9AE9595DC55025FC95C8BF63244E8F2
        Validity
            Not Before: Jul  1 14:07:42 2024 GMT
            Not After : Jun 30 14:12:42 2025 GMT
        Subject: CN=B40B17C3F61B28E59E0A2AAB90C68E0D9AFE546B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:a4:b7:51:57:42:15:d2:8b:e8:d5:38:d1:
                    47:41:fe:9d:77:cc:26:06:d9:83:77:62:f1:2c:9e:
                    3e:65:71:4a:e7:80:aa:e9:16:f8:c1:b3:ba:85:c0:
                    29:7b:17:99:a0:a1:3f:1a:53:cc:aa:76:3c:22:37:
                    06:0a:fc:26:e6:37:95:de:e3:0b:24:27:61:d8:d5:
                    f2:0c:3a:26:33:d8:5a:40:aa:9f:91:58:c0:a0:a6:
                    30:c8:62:e2:32:a9:d4:3c:0d:48:1e:59:8c:22:0f:
                    94:32:f4:cb:39:c2:11:6a:88:b8:74:0b:f8:9e:54:
                    ce:f9:44:74:c5:79:11:9b:2c:8f:1c:a0:d8:79:15:
                    42:fe:c5:ea:e5:c7:40:b3:63:94:21:7d:c1:ef:ba:
                    a4:93:28:89:ca:36:d3:31:8f:94:d9:4f:3f:0e:46:
                    90:6f:17:25:d5:f8:58:b8:f5:c5:63:1c:35:a6:d2:
                    ce:2a:d8:4b:fc:4f:d9:2b:3d:85:d3:de:a4:ae:af:
                    23:fa:5c:a3:3d:9d:6c:16:16:c0:c7:ff:b0:9a:bb:
                    f7:a6:2a:d4:73:86:42:be:ad:6e:94:89:2b:f8:2b:
                    7f:fe:5e:98:51:45:32:d7:6b:75:06:51:85:61:a1:
                    04:b8:3f:8d:0c:b3:3d:d8:77:1e:b6:d0:06:8f:b5:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0B:17:C3:F6:1B:28:E5:9E:0A:2A:AB:90:C6:8E:0D:9A:FE:54:6B
            X509v3 Authority Key Identifier:
                keyid:F7:37:E6:09:C9:AE:95:95:DC:55:02:5F:C9:5C:8B:F6:32:44:E8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/3133382e39372e3131362e302f32322d3234203d3e20323634313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:d1:d6:f6:b4:33:9e:97:0d:e7:9e:64:81:52:ac:3b:f8:99:
         e6:63:6c:2f:44:c0:a0:d9:9e:46:08:e5:71:eb:0c:a2:9a:07:
         9b:13:b1:ad:00:5b:a3:66:40:27:79:3e:37:b6:59:a2:22:72:
         1e:5e:c7:ba:9f:ce:46:00:d2:28:e2:7a:33:e4:a9:13:a6:9e:
         82:ec:58:14:f4:59:28:b8:fc:37:45:cd:60:2d:82:53:c0:37:
         05:62:9a:d2:2a:4d:a5:0b:d8:dc:6e:40:4b:d3:88:82:50:14:
         6d:ac:c5:54:ba:e9:5c:49:6e:74:02:d2:58:c3:85:26:05:d6:
         1f:b3:b1:2e:58:f3:e8:50:bd:91:71:9f:ac:09:84:55:43:aa:
         69:27:bd:cd:71:72:dd:2d:40:1d:c5:27:2b:b0:4b:37:14:2e:
         ae:f7:f4:7d:41:98:9c:9e:b3:2b:d4:cc:af:1c:ad:97:1d:51:
         49:c1:43:e2:d9:88:43:74:65:45:5f:24:7e:81:a6:a0:4d:f8:
         e7:8b:9c:23:c2:59:f8:c0:3f:61:3b:61:57:04:ad:58:a0:75:
         05:5c:ea:a8:0e:f3:e3:2d:c9:2f:f5:fd:b2:7c:29:a8:e6:11:
         53:ed:df:c4:4e:0f:3c:c6:be:27:22:d2:80:cc:80:df:0c:ec:
         61:51:34:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:09 2024 by rpki-client on console-ams.rpki-client.org