Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131372e302f32342d3234203d3e20323634353737.roa
File:                     3133382e33362e3131372e302f32342d3234203d3e20323634353737.roa (raw, json)
Hash identifier:          Pf4NSrVYxS5yyrHe3gLFIll8VSgmtXY+Tm+mqrL1Tq0=
Subject key identifier:   F5:E0:FC:CB:79:6D:24:55:4D:85:7E:CA:80:18:B3:10:DC:2A:6D:DA
Certificate issuer:       /CN=052DC3B49D4EDE6582E66C36AB2E6B728574B78F
Certificate serial:       4040E429B2A02B81E8CE99F8A234A725F59A7314
Authority key identifier: 05:2D:C3:B4:9D:4E:DE:65:82:E6:6C:36:AB:2E:6B:72:85:74:B7:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131372e302f32342d3234203d3e20323634353737.roa
Signing time:             Thu 03 Oct 2024 20:06:02 +0000
ROA not before:           Thu 03 Oct 2024 20:01:02 +0000
ROA not after:            Thu 02 Oct 2025 20:06:02 +0000
asID:                     264577
IP address blocks:        138.36.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.crl
                          rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:40:e4:29:b2:a0:2b:81:e8:ce:99:f8:a2:34:a7:25:f5:9a:73:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052DC3B49D4EDE6582E66C36AB2E6B728574B78F
        Validity
            Not Before: Oct  3 20:01:02 2024 GMT
            Not After : Oct  2 20:06:02 2025 GMT
        Subject: CN=F5E0FCCB796D24554D857ECA8018B310DC2A6DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:88:fa:d2:54:3b:78:4b:33:e6:25:27:f9:69:
                    7a:0b:f8:a4:a5:5d:35:d4:ee:f0:a4:ff:fb:1a:21:
                    ee:5d:35:5b:60:e9:c2:c6:82:c8:43:8c:aa:90:c7:
                    c3:ec:0b:a0:63:e2:02:20:fd:ef:e2:15:df:86:9c:
                    c8:cc:7e:5e:0f:2b:25:9f:9c:8f:ca:3e:07:da:f5:
                    d5:ed:5e:61:3a:36:b5:09:3d:bd:e2:30:9e:88:a0:
                    5c:08:ad:f1:65:39:1c:b7:6a:ed:07:96:c3:b7:c8:
                    41:7d:b6:09:83:18:0a:89:ae:69:c0:80:d0:4d:99:
                    bf:5d:60:81:fa:7f:34:89:05:d3:4e:fa:f7:c8:6c:
                    c8:31:e4:e5:23:8b:d7:19:e3:0a:51:a0:0e:a3:1b:
                    3e:4e:0f:34:0b:28:8a:24:be:7b:77:f6:eb:12:fa:
                    5a:49:ff:e5:de:59:b3:63:60:9d:23:04:6d:e5:c7:
                    15:85:9a:7e:df:63:40:21:32:91:b6:e7:35:81:c1:
                    d7:89:39:be:39:cf:51:53:91:0e:53:27:3a:62:d7:
                    a5:bc:f5:a4:be:90:e3:73:cf:a7:ae:34:c4:0e:3c:
                    6c:00:ff:6a:77:86:91:2c:19:70:dc:77:b4:d4:52:
                    d5:7c:69:75:29:81:74:fe:29:cf:16:a2:02:f3:4e:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E0:FC:CB:79:6D:24:55:4D:85:7E:CA:80:18:B3:10:DC:2A:6D:DA
            X509v3 Authority Key Identifier:
                keyid:05:2D:C3:B4:9D:4E:DE:65:82:E6:6C:36:AB:2E:6B:72:85:74:B7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131372e302f32342d3234203d3e20323634353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:62:59:43:66:d2:19:f9:33:55:64:db:bb:87:cf:10:65:49:
         22:05:ad:4e:d4:d4:d3:5b:b0:cd:31:17:5f:73:4c:96:9e:e9:
         11:12:be:7e:88:98:85:f5:e6:26:08:e4:9d:23:1e:4b:6e:10:
         ea:84:e9:ee:ad:21:95:9c:90:ed:2c:df:0d:e4:e7:0a:05:75:
         37:b2:76:b1:68:11:d0:4c:03:bc:d5:16:5d:33:4f:95:d9:df:
         04:bc:05:eb:fb:a0:1b:b0:bb:da:61:62:b3:b3:e5:97:6d:d4:
         16:3f:99:77:13:3b:c1:8c:c8:8d:20:cf:d6:ea:8e:41:d1:47:
         b0:20:6e:79:10:e0:9a:e2:c1:eb:f1:e5:48:4d:a6:60:1d:c9:
         bd:5c:e0:5b:dd:ee:8b:0d:e1:19:b7:e8:a1:7e:b6:37:19:58:
         f6:f5:4f:27:da:79:d0:af:f6:f1:fe:0e:4d:92:35:f9:ae:54:
         55:df:4f:38:20:b2:f5:c7:e1:bc:18:d2:b7:76:a6:51:85:e6:
         21:c0:0d:69:c1:19:9f:06:ff:5b:7d:8b:8a:c9:1d:bb:c4:0f:
         c5:78:43:85:fa:49:29:cc:e0:19:e7:ce:a6:7b:1f:1a:79:18:
         3e:98:e3:05:4f:b9:63:1d:34:9a:3d:4a:9f:2b:a4:99:51:e6:
         51:48:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:34 2024 by rpki-client on console-fra.rpki-client.org