Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32342d3234203d3e20323634353737.roa
File:                     3133382e33362e3131362e302f32342d3234203d3e20323634353737.roa (raw, json)
Hash identifier:          Piuedh7brf9M28LzdsZueyLTgtufMcPxrVyP/5YAzBk=
Subject key identifier:   B7:56:C0:7D:6E:9F:BD:3C:7F:8C:62:CC:31:42:0B:5C:96:99:D5:6B
Certificate issuer:       /CN=052DC3B49D4EDE6582E66C36AB2E6B728574B78F
Certificate serial:       3CC50478B6AA9466E6103669C993D085B1BA4966
Authority key identifier: 05:2D:C3:B4:9D:4E:DE:65:82:E6:6C:36:AB:2E:6B:72:85:74:B7:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32342d3234203d3e20323634353737.roa
Signing time:             Thu 05 Sep 2024 17:29:10 +0000
ROA not before:           Thu 05 Sep 2024 17:24:10 +0000
ROA not after:            Thu 04 Sep 2025 17:29:10 +0000
asID:                     264577
IP address blocks:        138.36.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.crl
                          rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c5:04:78:b6:aa:94:66:e6:10:36:69:c9:93:d0:85:b1:ba:49:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052DC3B49D4EDE6582E66C36AB2E6B728574B78F
        Validity
            Not Before: Sep  5 17:24:10 2024 GMT
            Not After : Sep  4 17:29:10 2025 GMT
        Subject: CN=B756C07D6E9FBD3C7F8C62CC31420B5C9699D56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:62:9b:81:51:b0:d6:62:f0:c7:f8:fb:8c:
                    bc:53:2c:cf:a6:45:2d:38:99:67:1c:e4:f9:19:d8:
                    39:40:ee:c1:5a:2b:36:5b:59:46:e7:31:5d:21:6b:
                    de:34:35:54:bc:e4:c5:e5:e4:1e:2a:a4:e6:c4:e7:
                    40:e6:79:68:c1:e2:c8:da:6b:4c:ca:f1:7a:3c:11:
                    f2:ba:62:03:67:cb:f9:d9:3b:1f:18:c3:00:f8:ef:
                    e6:5a:7a:f8:ce:d1:70:d9:36:e2:60:da:1d:39:9a:
                    4e:22:8f:7a:ec:37:6b:52:89:8b:86:ce:11:ec:e8:
                    e7:b1:ef:2d:ba:00:a4:63:94:07:3d:5d:9d:b0:a7:
                    dc:cf:06:47:da:14:44:09:ee:2d:98:64:49:c6:11:
                    11:4a:e0:86:67:7d:51:0b:90:11:ad:98:ad:9f:c0:
                    ef:08:9f:14:b4:bd:39:8f:24:98:89:d2:78:66:7a:
                    cc:db:14:56:07:88:38:11:e9:9a:f6:d1:ec:db:4b:
                    0d:bb:4f:22:d1:c4:3f:57:ff:17:ba:54:d2:83:5f:
                    4a:fc:51:35:ea:d4:1e:ce:98:f7:a6:58:24:c6:86:
                    b8:af:07:71:8d:d8:b4:d0:32:8e:ed:e9:1c:c3:38:
                    c9:0c:cb:29:71:9c:07:62:54:c4:5e:19:1e:65:23:
                    cd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:56:C0:7D:6E:9F:BD:3C:7F:8C:62:CC:31:42:0B:5C:96:99:D5:6B
            X509v3 Authority Key Identifier:
                keyid:05:2D:C3:B4:9D:4E:DE:65:82:E6:6C:36:AB:2E:6B:72:85:74:B7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32342d3234203d3e20323634353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:21:91:6b:53:28:fb:a1:01:8f:e6:86:56:98:db:3c:68:
         97:90:5f:0e:08:5d:4d:57:34:52:07:10:d9:e9:de:7f:97:5a:
         f2:02:47:6e:52:09:16:b1:58:a6:32:36:0d:5c:df:be:67:33:
         40:1c:41:f1:15:7f:a8:37:e4:94:32:dd:c2:d2:91:9c:c5:f5:
         d6:ce:fe:30:7c:81:42:00:99:84:24:76:cb:3f:30:08:6e:74:
         e3:5f:8d:4b:03:2d:ad:61:44:92:df:de:1a:09:e0:0a:ce:84:
         78:d7:41:19:a7:0d:70:86:c3:d4:ac:5e:82:97:c8:07:f9:cd:
         83:b0:b3:d5:d6:9b:63:a7:58:d1:30:76:c9:d0:a3:27:8e:a7:
         a2:99:b5:de:d5:6c:e1:00:dd:2b:ce:09:06:e7:91:00:33:fe:
         8f:ee:6f:8f:24:64:f3:7e:59:31:e0:17:d9:3b:73:b3:58:bc:
         60:ee:d0:40:5a:7f:91:45:1c:f7:43:78:4e:4a:95:ca:e4:50:
         75:89:0e:70:2e:fa:4f:d2:53:e4:54:26:ec:59:94:77:7b:70:
         3a:a1:3c:29:84:1c:e3:8e:bc:71:1d:8b:b8:de:0b:fc:5e:45:
         c8:49:6c:82:a4:86:7f:4e:d3:52:b3:46:01:a6:55:c7:48:52:
         c0:9b:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:34 2024 by rpki-client on console-fra.rpki-client.org