Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e3132322e3234322e302f32332d3233203d3e20323634353235.roa
File:                     3133382e3132322e3234322e302f32332d3233203d3e20323634353235.roa (raw, json)
Hash identifier:          gx6TAgn9fKtCiYNdxrjGkYCKXEZ3okPv1SaLSfvRykE=
Subject key identifier:   5B:FD:A5:F4:7F:C2:D2:F8:26:E9:56:88:CE:A7:EF:14:20:BB:D9:41
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       167DB3739E7946F51A20897189E41214EFF4B1AD
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e3132322e3234322e302f32332d3233203d3e20323634353235.roa
Signing time:             Tue 20 Aug 2024 12:31:35 +0000
ROA not before:           Tue 20 Aug 2024 12:26:35 +0000
ROA not after:            Tue 19 Aug 2025 12:31:35 +0000
asID:                     264525
IP address blocks:        138.122.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7d:b3:73:9e:79:46:f5:1a:20:89:71:89:e4:12:14:ef:f4:b1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Aug 20 12:26:35 2024 GMT
            Not After : Aug 19 12:31:35 2025 GMT
        Subject: CN=5BFDA5F47FC2D2F826E95688CEA7EF1420BBD941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:e6:76:db:2e:ec:58:e1:57:d0:44:02:14:
                    a9:5c:45:a7:1a:f8:15:aa:7e:79:59:37:10:c7:04:
                    57:2f:20:f1:8b:8e:a9:99:99:96:33:f7:8e:4e:20:
                    e6:ee:8c:03:96:58:22:ad:a7:70:11:58:3c:ca:f8:
                    75:9b:21:da:65:b0:44:1e:4b:bf:11:b2:98:06:40:
                    e0:85:fd:bd:12:79:c2:23:7e:4c:57:4d:d4:cf:4e:
                    a0:36:bd:87:c1:83:8d:30:f7:55:d1:c3:84:b5:6c:
                    d4:0b:53:af:25:a6:09:bc:6e:6d:13:62:a0:e5:01:
                    0d:11:9c:c6:ff:b8:ec:c6:f9:1c:e3:2c:65:8c:3f:
                    a1:57:d3:60:cb:67:e0:07:c5:41:10:e1:fe:c8:f7:
                    98:84:17:7e:fe:f4:79:25:86:f2:af:36:72:48:16:
                    04:ff:1b:b3:0b:9c:87:5e:07:29:80:20:65:db:f0:
                    2f:75:21:b8:06:08:19:46:35:cf:05:42:f4:80:16:
                    d8:0b:ac:e7:97:29:72:a7:07:e3:d7:9c:6f:e1:7b:
                    3b:f5:a6:f1:fe:96:f9:fa:50:ab:c5:ab:e7:b4:bf:
                    be:57:ff:4f:69:61:d2:a9:13:b6:2c:a3:cc:cb:24:
                    ee:59:59:d0:6c:4d:f2:f6:14:26:87:4c:34:ce:02:
                    f3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FD:A5:F4:7F:C2:D2:F8:26:E9:56:88:CE:A7:EF:14:20:BB:D9:41
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e3132322e3234322e302f32332d3233203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:eb:84:3d:7e:81:1f:37:2d:f3:f9:7d:70:7e:98:82:71:45:
         7f:7b:f9:15:75:db:f3:f0:26:d7:d2:d1:b9:e8:c1:ec:e8:d4:
         d8:9e:a2:a0:5e:59:74:0f:af:b4:3b:56:49:17:a5:2c:a7:54:
         4b:45:1f:f1:66:12:e3:83:e8:6b:a9:50:ad:53:5a:3b:3d:22:
         a3:a9:22:31:fa:30:bf:04:ee:bd:8b:75:93:d7:ba:77:f5:11:
         5e:fc:03:b7:b5:6d:5e:2e:8f:44:0c:f4:b8:82:4e:94:f6:c0:
         79:be:00:77:e0:a3:43:46:13:f7:a2:dd:c3:de:bb:3e:87:a0:
         6e:fd:a0:39:74:e5:48:1d:07:7e:a9:2d:02:85:cc:1a:20:95:
         5d:e6:48:41:74:f0:da:76:24:c5:34:52:1c:96:4b:7d:55:40:
         86:49:4a:5b:62:51:b9:01:da:b9:ad:b6:21:86:b5:23:20:17:
         e0:42:17:a6:69:64:3d:d5:02:2e:f7:95:3e:6f:0e:14:81:54:
         0d:1e:aa:d1:1b:55:cd:e9:7b:19:d0:fd:71:e9:63:a3:ed:d2:
         19:2e:4e:d3:a6:2e:59:53:05:4b:f3:37:51:5f:12:65:2f:e3:
         69:37:62:61:b4:3f:a6:0c:09:39:b4:ab:c4:a8:78:3d:29:d4:
         4b:76:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:01 2024 by rpki-client on console-fra.rpki-client.org