Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3232203d3e20323634353235.roa
File:                     3133382e302e35322e302f32322d3232203d3e20323634353235.roa (raw, json)
Hash identifier:          c6J1LJQSJ6rIAYfrcG+OYy986YMFvKOJCXqceEiRPI0=
Subject key identifier:   35:3D:00:96:FE:26:71:28:8A:C2:B1:6F:1F:31:39:94:3F:07:9F:FD
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       5FCD6BCA8581863C8B9D8B01B9C77B653FB483B7
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3232203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 21:10:08 +0000
ROA not before:           Tue 30 Apr 2024 21:05:08 +0000
ROA not after:            Tue 29 Apr 2025 21:10:08 +0000
asID:                     264525
IP address blocks:        138.0.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cd:6b:ca:85:81:86:3c:8b:9d:8b:01:b9:c7:7b:65:3f:b4:83:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 21:05:08 2024 GMT
            Not After : Apr 29 21:10:08 2025 GMT
        Subject: CN=353D0096FE2671288AC2B16F1F3139943F079FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:89:53:ed:8f:62:d8:e5:26:f5:1e:84:33:
                    fa:3e:b9:a5:5b:43:0c:94:00:b7:63:ed:09:02:7b:
                    2b:ec:4e:2f:43:a2:c4:d8:55:ea:38:4e:4a:c6:1a:
                    bf:86:60:9c:ad:fb:54:8f:f3:19:d2:e7:55:8f:47:
                    9e:e8:1d:11:bc:43:8e:15:01:00:90:09:13:b7:c0:
                    b4:04:5e:2b:90:af:a2:71:46:ff:82:d7:47:9a:68:
                    81:07:c8:e7:bf:b4:e4:b3:e8:5f:01:32:48:36:c3:
                    07:28:ca:ac:dd:76:51:ab:4e:08:3c:d6:f8:94:0b:
                    66:49:97:cd:50:53:0c:4c:f1:5a:dd:12:43:6d:cb:
                    5f:3e:c0:86:77:44:6d:62:a6:33:4e:ea:7d:a0:d4:
                    d7:c8:04:f5:91:42:23:59:e0:fb:ac:18:73:1a:0b:
                    05:1d:02:6c:7f:1e:fd:15:ee:5f:b5:cf:e4:11:04:
                    02:36:7a:33:7b:6e:38:93:93:30:ec:4f:20:6f:69:
                    d3:15:b0:c6:1c:aa:cd:4d:b6:c8:cd:77:11:10:63:
                    61:24:31:60:32:3d:5e:ed:34:33:4d:01:25:59:15:
                    f5:16:8d:c5:15:ab:1d:fd:f8:a3:b0:ba:f3:11:c2:
                    9c:6e:04:52:42:cc:4b:e6:7c:09:27:05:6e:e2:20:
                    42:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3D:00:96:FE:26:71:28:8A:C2:B1:6F:1F:31:39:94:3F:07:9F:FD
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3232203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:70:7d:05:0b:42:f1:3e:e4:d4:59:c0:d7:e0:94:db:a6:ec:
         26:20:be:c8:b5:95:a1:76:2f:9e:c1:e2:bf:08:bf:0b:32:8a:
         81:40:de:5d:95:8f:ef:29:62:22:26:81:4d:27:16:75:f1:da:
         76:a5:ab:77:1a:aa:e9:1c:64:38:67:af:f8:22:61:de:ce:b0:
         05:71:4f:b9:ac:d4:3f:92:36:29:af:91:a4:ab:9d:c4:fc:92:
         5f:cc:68:5c:6c:50:f0:f8:53:89:94:cd:05:b2:db:39:78:6d:
         a4:63:8f:d1:42:84:c7:95:20:2d:3e:fa:a5:8d:11:23:58:87:
         bf:75:9a:68:7b:33:5c:c4:6a:a1:7d:44:6d:28:98:46:c7:60:
         e0:99:17:76:92:d6:59:48:11:7c:bf:99:a0:76:32:a9:80:28:
         9f:fd:b5:59:aa:91:01:dc:9e:68:59:13:2c:25:1f:7c:86:69:
         44:f0:65:18:24:d1:d9:5e:d4:b2:c6:53:03:d2:6a:7c:2f:09:
         b1:a4:cf:06:20:a5:e5:2b:80:0f:9e:40:f4:8d:29:e8:e9:b2:
         b6:b2:5d:22:20:2e:07:42:23:29:15:8e:81:ac:ed:79:bf:85:
         db:85:6e:70:dc:00:50:6a:71:e0:59:1c:44:46:f0:86:9e:d2:
         3a:ee:be:03
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUX81ryoWBhjyLnYsBucd7ZT+0g7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjhFQUNCOUY3OEE1NjRBNTU5NDU0RTM1N0UxRTMx
MzQ0QjFDODAeFw0yNDA0MzAyMTA1MDhaFw0yNTA0MjkyMTEwMDhaMDMxMTAvBgNV
BAMTKDM1M0QwMDk2RkUyNjcxMjg4QUMyQjE2RjFGMzEzOTk0M0YwNzlGRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRHolT7Y9i2OUm9R6EM/o+uaVb
QwyUALdj7QkCeyvsTi9DosTYVeo4TkrGGr+GYJyt+1SP8xnS51WPR57oHRG8Q44V
AQCQCRO3wLQEXiuQr6JxRv+C10eaaIEHyOe/tOSz6F8BMkg2wwcoyqzddlGrTgg8
1viUC2ZJl81QUwxM8VrdEkNty18+wIZ3RG1ipjNO6n2g1NfIBPWRQiNZ4PusGHMa
CwUdAmx/Hv0V7l+1z+QRBAI2ejN7bjiTkzDsTyBvadMVsMYcqs1NtsjNdxEQY2Ek
MWAyPV7tNDNNASVZFfUWjcUVqx39+KOwuvMRwpxuBFJCzEvmfAknBW7iIEJhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUNT0Alv4mcSiKwrFvHzE5lD8Hn/0wHwYDVR0j
BBgwFoAUuduOrLn3ilZKVZRU41fh4xNEscgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRSd3lFUTVDbkZoZ1JCb0xDdG0xUFJUSlRFcTNDRTdKb0dMYUJoVTQ4
d2kvMC9COURCOEVBQ0I5Rjc4QTU2NEE1NTk0NTRFMzU3RTFFMzEzNDRCMUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REI4RUFDQjlGNzhBNTY0
QTU1OTQ1NEUzNTdFMUUzMTM0NEIxQzguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0Und5RVE1Q25GaGdSQm9MQ3RtMVBSVEpURXEzQ0U3Sm9HTGFCaFU0OHdpLzAv
MzEzMzM4MmUzMDJlMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNDM1
MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAooANDANBgkqhkiG9w0BAQsFAAOCAQEAC3B9BQtC8T7k
1FnA1+CU26bsJiC+yLWVoXYvnsHivwi/CzKKgUDeXZWP7yliIiaBTScWdfHadqWr
dxqq6RxkOGev+CJh3s6wBXFPuazUP5I2Ka+RpKudxPySX8xoXGxQ8PhTiZTNBbLb
OXhtpGOP0UKEx5UgLT76pY0RI1iHv3WaaHszXMRqoX1EbSiYRsdg4JkXdpLWWUgR
fL+ZoHYyqYAon/21WaqRAdyeaFkTLCUffIZpRPBlGCTR2V7UssZTA9JqfC8JsaTP
BiCl5SuAD55A9I0p6OmytrJdIiAuB0IjKRWOgazteb+F24VucNwAUGpx4FkcREbw
hp7SOu6+Aw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:01 2024 by rpki-client on console-fra.rpki-client.org