Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa
File:                     3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa (raw, json)
Hash identifier:          0rc93Bfdybk2IvFdZK019x65DUXNvLDPlzofZJvAadw=
Subject key identifier:   E5:45:FF:E1:CD:00:F9:FC:CE:AC:B8:10:B8:F0:05:32:C3:46:48:D4
Certificate issuer:       /CN=E6082A33F5870377F7FE543A5727F0951D32150A
Certificate serial:       0A2D2DC4585F29F20A12E7C78E8DE5A5CDC5FA50
Authority key identifier: E6:08:2A:33:F5:87:03:77:F7:FE:54:3A:57:27:F0:95:1D:32:15:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6082A33F5870377F7FE543A5727F0951D32150A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa
Signing time:             Thu 04 Apr 2024 04:26:21 +0000
ROA not before:           Thu 04 Apr 2024 04:21:21 +0000
ROA not after:            Thu 03 Apr 2025 04:26:21 +0000
asID:                     264163
IP address blocks:        138.97.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/E6082A33F5870377F7FE543A5727F0951D32150A.crl
                          rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/E6082A33F5870377F7FE543A5727F0951D32150A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6082A33F5870377F7FE543A5727F0951D32150A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2d:2d:c4:58:5f:29:f2:0a:12:e7:c7:8e:8d:e5:a5:cd:c5:fa:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6082A33F5870377F7FE543A5727F0951D32150A
        Validity
            Not Before: Apr  4 04:21:21 2024 GMT
            Not After : Apr  3 04:26:21 2025 GMT
        Subject: CN=E545FFE1CD00F9FCCEACB810B8F00532C34648D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:d4:a3:2e:36:be:c0:7b:16:a2:5a:4f:2d:
                    8f:3e:27:ba:08:1a:3d:b7:c7:b4:60:0f:c6:3e:86:
                    c8:e7:b0:93:2c:81:ea:4f:b3:3b:20:9c:fa:6e:be:
                    89:23:90:a7:05:fa:04:64:eb:52:ab:5d:7a:14:1b:
                    9d:e1:ac:10:94:66:1b:80:7b:bc:0c:2f:b7:db:01:
                    26:f9:9a:b3:0b:b6:24:4a:59:7b:d8:97:e9:3f:9a:
                    4c:7a:7b:0f:77:8c:de:38:c6:69:37:e6:bc:ee:b6:
                    cf:bf:9b:55:3a:99:be:64:ad:1e:40:5c:18:d7:ef:
                    9e:97:62:8d:85:03:e7:35:95:00:22:72:40:04:aa:
                    72:ef:58:3f:8f:66:c6:94:c0:d5:26:06:43:72:2e:
                    56:fe:44:36:c8:d0:4d:13:79:7a:7c:eb:c2:fa:3d:
                    4f:70:f3:c7:b3:5d:ef:ae:69:6d:0f:bf:f4:a4:be:
                    04:bb:a5:b2:51:1c:75:ba:23:fd:16:4c:ea:af:48:
                    99:3d:ac:aa:9a:f1:18:f5:71:61:9a:6d:d3:6a:32:
                    81:ed:8a:bb:45:fa:3a:d0:d8:ab:f5:e5:5d:37:03:
                    e2:8d:9f:4a:45:36:29:ae:24:95:c2:23:b1:98:e1:
                    ff:a6:6e:b0:e7:30:f2:02:01:57:ba:ce:00:63:78:
                    2f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:45:FF:E1:CD:00:F9:FC:CE:AC:B8:10:B8:F0:05:32:C3:46:48:D4
            X509v3 Authority Key Identifier:
                keyid:E6:08:2A:33:F5:87:03:77:F7:FE:54:3A:57:27:F0:95:1D:32:15:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/E6082A33F5870377F7FE543A5727F0951D32150A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6082A33F5870377F7FE543A5727F0951D32150A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/1/3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e8:90:01:1a:af:70:c1:cb:17:ab:59:c4:10:f6:86:f0:99:
         a1:32:97:ec:e5:5d:3e:60:3a:78:8f:81:7e:ad:7d:42:0b:62:
         6a:c8:5e:98:b0:a4:43:0e:4a:cf:48:23:37:5d:17:b7:04:21:
         35:5f:02:87:ab:94:fb:de:7f:c2:97:53:39:08:36:c9:c4:43:
         4b:e2:c4:f7:c2:be:e2:f2:b7:74:0a:18:11:8f:38:82:0a:f8:
         c8:21:f6:1c:fd:c0:53:a1:d7:36:7c:51:89:f8:24:13:51:43:
         5d:9b:da:84:b2:e4:8d:2c:8c:10:fb:76:ed:f1:7b:68:31:c0:
         ae:d9:ae:a2:4d:9f:af:33:ed:74:d2:22:06:51:da:3a:c3:ac:
         32:a3:35:12:64:ad:eb:dd:8f:51:22:f0:39:b9:0c:a9:f0:6f:
         b3:77:b7:58:6d:6f:da:c2:d0:b7:0a:01:a9:2f:92:9a:53:a9:
         ce:a5:58:0d:b1:a2:2d:dc:9c:b2:0d:ce:a3:c5:2d:fa:7b:fe:
         a3:c7:31:ff:2e:f3:4b:1e:e7:1c:0d:ef:5c:b4:02:d0:22:7f:
         54:1d:1b:2b:2d:05:bd:86:17:d4:41:e5:d2:63:6b:a2:c2:ed:
         4e:ca:00:c1:61:b8:d9:76:9e:1e:53:ac:6a:f4:df:52:cf:86:
         a6:b6:15:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:49 2024 by rpki-client on console-fra.rpki-client.org