Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa
File:                     3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          wC8k3pIjDNUeJi7vT+GrfoNrfo/AGKKo0633IAzih9Y=
Subject key identifier:   FD:C3:4A:97:2F:48:5D:64:C2:0C:8C:96:16:FF:D8:B2:C1:C5:E8:9B
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       17BE3A2E06F30E28C09F13DDC29CDD962FAD7E8C
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:21 +0000
ROA not before:           Mon 09 Sep 2024 14:55:21 +0000
ROA not after:            Mon 08 Sep 2025 15:00:21 +0000
asID:                     28270
IP address blocks:        138.122.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:be:3a:2e:06:f3:0e:28:c0:9f:13:dd:c2:9c:dd:96:2f:ad:7e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:21 2024 GMT
            Not After : Sep  8 15:00:21 2025 GMT
        Subject: CN=FDC34A972F485D64C20C8C9616FFD8B2C1C5E89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:5f:9b:50:84:b3:e5:70:32:7a:57:92:63:
                    ae:b8:40:cb:a2:c9:1b:d9:10:85:1a:e9:ea:be:03:
                    07:4d:4d:22:84:cd:75:90:e6:a5:39:44:7b:22:8e:
                    35:34:47:07:d3:3f:d2:8f:ee:7b:cc:2b:48:b4:38:
                    a4:53:ec:b0:ce:64:30:47:a2:c2:b7:6a:83:f4:7f:
                    c9:9f:92:48:aa:14:64:cc:02:e7:bc:dc:cb:60:71:
                    fb:bb:67:aa:48:f9:ca:96:6a:ce:df:80:25:f5:92:
                    1b:93:ae:35:3c:59:2e:fc:17:21:a0:fd:2c:53:fb:
                    dd:55:77:50:76:31:ee:78:e5:53:ac:cb:62:ec:fe:
                    e7:d2:87:80:2e:b8:24:1f:b0:cc:a2:49:e3:a8:5e:
                    9c:ed:d4:99:a8:db:9a:49:2e:34:dd:c2:3c:6c:0e:
                    8e:96:be:9b:f8:c9:29:9c:38:63:ed:0a:47:d8:f9:
                    16:2a:3e:35:20:d9:75:3a:27:35:86:ea:f3:f3:6f:
                    34:ee:d2:19:a3:af:74:48:10:46:44:9c:9e:67:9e:
                    82:a4:5e:c4:6f:d2:3a:16:8b:a7:86:57:1a:e9:b2:
                    ee:5d:3d:07:0a:2d:74:9d:4b:1b:d4:fc:2f:a3:47:
                    fc:5d:67:30:66:f3:ca:9c:cd:62:25:cd:98:31:55:
                    c4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C3:4A:97:2F:48:5D:64:C2:0C:8C:96:16:FF:D8:B2:C1:C5:E8:9B
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233362e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:26:f0:02:e0:68:76:17:e9:cb:22:32:ca:e6:f6:6d:02:14:
         35:da:3a:78:f6:f4:cd:5b:0a:2b:40:cf:75:e2:f6:78:6b:6a:
         7b:24:f6:69:20:8e:8a:83:d3:0e:e0:05:30:aa:c2:c2:c7:06:
         57:e9:46:63:13:a6:b1:e7:5c:5b:91:66:33:f5:fc:4b:f5:0e:
         60:41:a4:38:cc:09:a7:ad:7e:a0:3e:98:cc:1c:77:c3:2b:c8:
         39:04:10:23:08:4d:66:e8:37:6f:79:38:53:67:64:53:77:42:
         50:2b:d1:7a:58:89:75:77:10:21:83:22:6d:5d:93:ca:b6:cf:
         80:e9:0d:7a:71:f9:2e:ea:35:5b:52:8a:54:e8:e2:55:64:f2:
         06:bf:81:2b:f2:a9:49:9a:27:71:31:6d:9a:24:fb:0c:1f:eb:
         01:57:31:19:3d:41:3a:18:71:b3:cc:30:df:bc:22:3c:3f:50:
         b7:68:82:4a:51:c5:10:44:7c:a2:b6:54:69:a3:23:dd:6c:9f:
         2c:32:b8:7c:39:9e:e1:d2:43:ab:b7:97:56:ac:c7:c5:53:e8:
         b9:1a:05:db:b4:07:ff:e5:b2:c4:50:8c:db:86:b7:7d:02:43:
         f7:8c:03:ef:de:34:65:8e:33:03:fb:ba:2c:bd:c4:ef:5b:fd:
         8a:e4:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:51:54 2024 by rpki-client on console-fra.rpki-client.org