Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131382e302f32342d3234203d3e20323634353737.roa
File:                     3133382e33362e3131382e302f32342d3234203d3e20323634353737.roa (raw, json)
Hash identifier:          +QbuB8TA3qdrl9bvPMBM7SN4SZhlouOIxTM7qVagCtI=
Subject key identifier:   A9:FD:75:5D:55:1A:22:AD:53:96:C2:F8:90:CD:91:CE:9F:B3:90:35
Certificate issuer:       /CN=052DC3B49D4EDE6582E66C36AB2E6B728574B78F
Certificate serial:       3A2ED537D2910B9549D7117B0A8D2BCDDB0E6430
Authority key identifier: 05:2D:C3:B4:9D:4E:DE:65:82:E6:6C:36:AB:2E:6B:72:85:74:B7:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131382e302f32342d3234203d3e20323634353737.roa
Signing time:             Thu 05 Sep 2024 17:29:20 +0000
ROA not before:           Thu 05 Sep 2024 17:24:20 +0000
ROA not after:            Thu 04 Sep 2025 17:29:20 +0000
asID:                     264577
IP address blocks:        138.36.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.crl
                          rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2e:d5:37:d2:91:0b:95:49:d7:11:7b:0a:8d:2b:cd:db:0e:64:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052DC3B49D4EDE6582E66C36AB2E6B728574B78F
        Validity
            Not Before: Sep  5 17:24:20 2024 GMT
            Not After : Sep  4 17:29:20 2025 GMT
        Subject: CN=A9FD755D551A22AD5396C2F890CD91CE9FB39035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:a5:87:6d:80:28:c5:35:66:20:f5:74:cf:
                    17:16:01:95:ff:c8:95:c8:20:5c:19:dc:1c:72:b0:
                    78:0d:81:a6:25:a7:d0:bb:bc:7f:d8:07:17:87:ca:
                    48:6a:98:f0:21:82:36:ae:c5:03:8f:f9:08:8e:86:
                    bf:4d:2d:09:32:a3:a0:cd:38:2d:c7:2a:3c:7c:e3:
                    16:c7:83:b5:9f:b3:2e:f6:8a:8b:63:18:4f:21:f9:
                    4b:b5:cd:3b:ca:11:fe:65:48:0e:cd:cd:87:74:53:
                    4f:2e:fd:98:35:08:88:d5:45:62:b6:b1:71:07:f4:
                    50:ad:d5:ca:c3:19:b5:ea:01:62:81:e3:be:e5:f3:
                    e8:9f:ac:01:73:bb:67:27:d0:5d:be:ba:35:12:df:
                    1d:98:99:f9:31:04:b3:16:3c:fd:5f:90:5e:06:b3:
                    5a:ad:df:2a:95:0f:ee:04:4b:4a:1f:d5:2d:38:ca:
                    6b:a6:77:5e:0b:1b:37:fd:bb:26:cb:6d:6c:16:55:
                    c4:eb:cc:38:d9:b9:d1:e6:f7:c4:a4:44:7e:2b:51:
                    12:72:81:a0:e1:5a:4e:33:ce:b6:0e:f6:a0:15:22:
                    6e:57:e7:c9:0a:ae:ff:89:b1:4e:fe:4d:1e:f8:96:
                    2d:fc:8e:ba:19:c7:fd:38:70:c6:6a:0c:ea:5e:24:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FD:75:5D:55:1A:22:AD:53:96:C2:F8:90:CD:91:CE:9F:B3:90:35
            X509v3 Authority Key Identifier:
                keyid:05:2D:C3:B4:9D:4E:DE:65:82:E6:6C:36:AB:2E:6B:72:85:74:B7:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/052DC3B49D4EDE6582E66C36AB2E6B728574B78F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131382e302f32342d3234203d3e20323634353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:5c:43:fe:3c:c0:1e:a0:a9:70:09:2f:be:d0:3d:0d:70:3f:
         53:eb:e7:2c:33:84:b7:ba:4a:27:af:df:82:bf:aa:b3:0b:f0:
         f7:b5:9f:ff:85:f8:ba:5a:c8:61:23:bf:61:8c:39:04:1e:e9:
         fd:62:db:49:a4:83:90:b7:8d:47:db:d2:a4:03:d2:01:45:60:
         50:26:26:34:3a:ee:7d:50:ce:aa:f3:c7:23:0a:0f:e9:ac:07:
         72:e4:ed:75:cc:b8:49:c8:75:8c:a1:c7:d4:4b:5f:dc:b2:98:
         c3:1b:fd:73:ba:15:ac:61:73:ef:ce:25:42:36:06:cd:aa:34:
         d3:f0:5f:82:3e:49:47:3b:a4:92:e0:cf:76:b6:9c:53:05:67:
         77:58:a5:82:cf:74:77:47:a2:1a:4c:19:fc:3e:78:09:c2:8a:
         52:57:d4:a7:df:ee:fc:fc:cb:25:a6:bf:87:40:81:20:55:85:
         fb:83:35:f0:44:b6:28:0e:1d:42:65:0e:2b:db:6e:60:97:ca:
         10:0c:a9:b8:8c:7a:ab:f0:d5:b9:5c:fe:b8:8e:6d:e9:7e:0a:
         a6:66:66:1e:6e:d5:31:8b:71:0f:35:86:43:f9:05:b3:ae:39:
         18:44:82:fc:b7:17:6a:62:5d:f1:71:0d:cb:2e:63:02:7d:1f:
         ee:29:8d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:34 2024 by rpki-client on console-fra.rpki-client.org