Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
File:                     3133382e39372e34302e302f32322d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          MLS4dEQuqUZnocj2mr1aar4vABevt6oBLrZsnvoAgVA=
Subject key identifier:   C2:9C:7E:D8:A3:43:58:0E:1D:EA:68:E2:CF:BB:93:E9:A2:F7:43:59
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       7C182D2D03BE4752DBABB33B210DB8CC396A0099
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
Signing time:             Thu 04 Apr 2024 11:35:21 +0000
ROA not before:           Thu 04 Apr 2024 11:30:21 +0000
ROA not after:            Thu 03 Apr 2025 11:35:21 +0000
asID:                     264120
IP address blocks:        138.97.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:18:2d:2d:03:be:47:52:db:ab:b3:3b:21:0d:b8:cc:39:6a:00:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Apr  4 11:30:21 2024 GMT
            Not After : Apr  3 11:35:21 2025 GMT
        Subject: CN=C29C7ED8A343580E1DEA68E2CFBB93E9A2F74359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:3a:7b:9e:ec:6a:6c:f2:6f:91:74:1c:89:
                    55:a1:1f:14:fe:5e:95:7e:40:b6:cc:8e:91:d3:92:
                    47:de:38:79:b7:7e:4c:7c:72:d1:36:f0:d0:e8:43:
                    e1:67:a0:ed:96:f5:e7:0a:34:8a:6d:90:92:84:93:
                    cb:dc:9c:2b:69:c0:cd:a0:ec:7e:07:83:84:31:d2:
                    86:2a:73:4f:2e:fc:ef:6b:d5:78:e2:c1:5a:59:43:
                    09:e1:76:79:d4:1b:aa:c1:4d:df:e0:f8:aa:ad:5d:
                    8a:71:32:d0:3a:28:3d:b8:4d:c3:c0:0f:c9:5b:21:
                    ee:31:a1:30:b6:66:92:08:ae:5f:e4:ed:57:9b:a7:
                    6a:7a:6d:72:26:82:6e:8b:5f:46:1d:f9:4a:6a:96:
                    55:6b:af:d1:dd:de:de:b5:61:64:da:83:d8:7a:00:
                    8d:4f:eb:75:09:ca:71:7f:c9:8f:1d:72:8d:d1:50:
                    2f:14:a3:a1:93:58:cf:7c:24:2e:65:ea:b2:3e:38:
                    a7:e3:d8:45:0b:13:3c:47:36:24:ff:f2:85:fe:09:
                    d1:8b:09:88:36:08:65:08:92:3a:cf:97:fd:42:9e:
                    fb:cd:df:d2:12:33:1d:81:e6:00:77:cb:f4:ff:8f:
                    dc:84:71:c1:a0:a2:12:53:7b:41:ff:af:22:f5:ff:
                    05:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:7E:D8:A3:43:58:0E:1D:EA:68:E2:CF:BB:93:E9:A2:F7:43:59
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:89:5d:bc:20:f4:ed:87:5f:48:62:32:38:dd:d6:45:c3:6d:
         ee:64:80:35:a0:f1:4b:64:b0:09:29:41:c5:fd:6c:15:2e:53:
         15:33:84:e1:4e:80:cf:f7:8c:b8:76:12:ea:c3:9f:22:8e:a6:
         23:ac:d8:21:1a:34:d6:79:2c:d3:20:26:a6:ed:92:e0:a8:f4:
         d1:22:4e:e0:ef:7d:3f:bd:76:39:b1:3f:6b:bb:bb:c5:fd:7f:
         f1:38:cd:52:07:94:e4:eb:94:a8:12:0f:ba:be:0d:fc:62:ae:
         46:35:ac:f2:36:fe:a4:73:bc:0b:a9:ff:d3:83:b8:89:88:aa:
         4d:9b:cf:41:c2:ce:32:91:00:95:a0:41:fe:85:6c:05:09:50:
         cf:cf:53:98:ce:02:c2:ba:f4:27:b4:ac:d5:b2:10:8b:4b:d2:
         b6:dd:c8:1a:f0:2d:2c:0a:d2:27:21:d4:64:e6:99:44:ed:88:
         56:dd:76:03:00:cb:78:aa:81:e7:ac:ac:3f:a8:bf:9c:5c:d2:
         bd:77:cd:f1:f3:2b:3a:95:11:e3:3f:e9:2d:d3:b3:10:77:89:
         4b:ff:d9:4c:3b:22:38:d9:8f:ab:9a:85:fe:06:e9:cf:da:53:
         14:65:4e:62:c4:8a:fa:17:d6:1c:a3:14:8b:ca:a0:09:69:f5:
         5b:d5:9d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:14 2024 by rpki-client on console-ams.rpki-client.org