Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
File:                     3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          cac/zeaKhddzrTjk6GDe9kGS4/a5vDFeaygdkimDVUs=
Subject key identifier:   67:37:F2:6F:F2:75:2D:C1:FC:3D:65:71:06:D6:43:5D:08:85:58:A4
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       3E2512EFB7AB78055CB386272B5DF3E71878F1CF
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:17 +0000
ROA not before:           Mon 09 Sep 2024 14:55:17 +0000
ROA not after:            Mon 08 Sep 2025 15:00:17 +0000
asID:                     28270
IP address blocks:        138.117.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:25:12:ef:b7:ab:78:05:5c:b3:86:27:2b:5d:f3:e7:18:78:f1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:17 2024 GMT
            Not After : Sep  8 15:00:17 2025 GMT
        Subject: CN=6737F26FF2752DC1FC3D657106D6435D088558A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:77:f0:07:24:bc:b8:10:fa:0d:53:55:a2:
                    cb:a1:c8:11:62:7f:f8:5f:33:b5:90:ff:3e:0d:29:
                    c8:7c:78:2b:bc:24:2c:10:88:8d:b6:2c:ab:56:c4:
                    6f:f5:66:2f:cd:d4:5e:b1:c7:54:21:c5:9d:c8:3d:
                    50:cf:db:fa:9a:62:3b:36:91:9c:e1:53:04:78:32:
                    ef:96:b7:5c:c0:10:28:b4:36:a7:ba:74:f3:7d:15:
                    02:07:16:61:8a:e9:f5:87:7c:29:80:e6:68:58:1c:
                    10:e2:04:dc:53:be:e0:35:ca:7f:ad:60:15:7f:01:
                    3a:aa:04:c0:c7:6c:aa:e4:ea:e7:0a:4b:f2:41:09:
                    a4:30:b2:f0:34:c8:a4:ab:ff:03:2a:9f:87:4b:f3:
                    33:4f:17:a9:2c:2a:0e:da:3a:2d:b6:dd:fc:f3:58:
                    b9:03:be:56:18:5f:cf:c7:04:57:dc:1a:e6:36:81:
                    ce:cb:f6:68:78:01:4c:58:33:1a:5a:3d:ff:86:a9:
                    b7:d4:89:17:b2:1d:65:69:96:48:05:3b:2a:ab:e1:
                    ea:91:51:de:0e:6b:6f:0d:e9:d2:5a:15:04:68:25:
                    21:30:2b:4d:5c:bf:fa:80:6e:62:7a:71:13:d8:27:
                    9a:2b:25:41:a1:e7:13:ef:2a:af:fd:7f:a0:0e:7d:
                    88:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:37:F2:6F:F2:75:2D:C1:FC:3D:65:71:06:D6:43:5D:08:85:58:A4
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:ac:a5:db:83:e6:bc:54:ef:ac:d2:b0:ae:87:26:c7:7e:b0:
         7d:64:79:07:84:47:ea:55:f1:bc:a7:4d:30:d6:3f:22:41:a1:
         c1:bf:02:37:ce:33:b6:2e:7f:0b:71:84:5d:ed:5c:9b:a5:df:
         d6:1d:93:c1:43:9b:5c:7b:b7:38:13:46:d5:26:b9:d5:75:83:
         4b:54:34:f0:79:2a:a0:00:ec:94:50:51:12:19:c8:de:b0:6b:
         4c:c5:32:7d:52:cd:ce:e2:5d:61:54:77:6f:76:b1:93:19:68:
         28:4a:ca:14:8f:90:f2:2a:5e:e5:8e:02:f1:1c:8a:58:2a:12:
         9d:9c:0e:3b:f9:9e:4c:76:d6:6f:9b:e3:09:01:0f:0c:91:75:
         b3:eb:e3:41:10:6f:54:d7:32:13:b3:80:05:08:3f:dc:36:ea:
         14:e4:5e:4d:4a:a7:ce:ae:6b:88:1a:85:86:46:42:5d:be:ef:
         6f:0e:b0:78:72:c2:88:c5:6b:40:a0:ab:1e:09:33:9a:5d:31:
         20:05:e9:41:64:52:f2:5a:57:0c:b3:85:37:36:77:e6:74:80:
         a6:64:87:b6:90:3b:8a:a6:40:da:3b:09:cd:07:d6:91:ba:56:
         cc:13:0c:8a:9f:31:90:db:6b:6b:38:10:37:cc:db:84:57:fd:
         ff:52:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:21 2024 by rpki-client on console-fra.rpki-client.org