Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa
File:                     3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          DyvcquuJbDCBj9kVXHFLsgt8pT+hyQzLT2K1GXPviZ4=
Subject key identifier:   E5:ED:FC:A4:5D:D4:17:92:DC:7D:2B:86:30:D3:DD:8B:2E:2A:A5:F3
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       38427F5C587F409C472C92C763D09E7B1319F8A0
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:18 +0000
ROA not before:           Mon 09 Sep 2024 14:55:18 +0000
ROA not after:            Mon 08 Sep 2025 15:00:18 +0000
asID:                     28270
IP address blocks:        138.122.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:42:7f:5c:58:7f:40:9c:47:2c:92:c7:63:d0:9e:7b:13:19:f8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:18 2024 GMT
            Not After : Sep  8 15:00:18 2025 GMT
        Subject: CN=E5EDFCA45DD41792DC7D2B8630D3DD8B2E2AA5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5b:92:06:17:a2:e8:2b:1f:83:0d:99:1a:06:
                    65:ca:ce:18:52:77:15:9a:7f:1b:dc:74:ef:9c:8e:
                    e9:cb:ac:ac:75:97:ae:d6:a5:c3:d5:69:9e:4e:2b:
                    fd:71:37:c5:5c:c3:40:44:66:c9:31:55:46:6f:76:
                    76:e5:56:47:77:00:77:3c:a6:d4:83:3f:6f:cc:11:
                    76:d0:a8:cd:1e:6e:de:d0:3d:7f:28:3e:5d:4b:67:
                    b3:6d:d0:ea:23:e3:42:97:1b:f1:a1:d7:a7:f7:34:
                    ea:4b:6c:58:00:8a:8e:a3:79:3e:fc:77:65:c2:31:
                    21:2f:4e:a1:e6:88:8b:57:a3:64:c2:82:e4:b4:a0:
                    84:14:ad:0e:ef:a5:d5:21:3d:7e:f9:c6:c0:1f:c2:
                    53:a9:42:1f:27:a2:2e:b6:1f:e4:7e:1b:63:05:cc:
                    39:8b:c4:7a:ed:02:05:82:b5:f1:8e:5e:51:88:a6:
                    70:d3:0b:6a:62:f7:15:b3:09:fd:01:c1:d9:0f:44:
                    e2:6c:35:89:0c:1f:da:7a:29:c7:ce:3c:ae:b1:52:
                    bc:8d:cd:56:aa:7d:fb:b0:4b:38:d5:21:8e:cb:80:
                    02:32:4b:35:4e:7c:35:93:4d:0a:02:e5:13:3f:26:
                    72:75:f1:03:9a:04:10:ba:48:f9:c0:27:7c:ce:26:
                    4f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:ED:FC:A4:5D:D4:17:92:DC:7D:2B:86:30:D3:DD:8B:2E:2A:A5:F3
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:72:b8:0c:23:1c:85:c0:23:89:5c:ef:49:60:35:b2:12:2f:
         ec:3e:09:32:24:21:f2:3d:32:02:b0:e0:34:d1:b4:1f:9c:72:
         46:8c:da:3f:98:d3:ab:08:c2:a8:1c:85:7b:b7:d3:ca:d7:98:
         aa:93:55:c3:92:26:e5:0f:ff:0b:bf:6a:f1:23:6e:61:c0:2b:
         e8:93:41:4b:c1:c6:c3:3e:1e:57:c7:c7:7d:50:60:25:33:61:
         46:ce:48:ae:a3:ff:3c:2f:41:dc:fe:76:e5:35:c7:08:e6:eb:
         73:0e:a6:5f:40:22:7c:19:b3:94:35:bf:60:d9:32:e8:ce:22:
         8d:59:76:5b:07:31:ec:00:53:7c:40:fc:dd:70:24:42:1a:f1:
         b1:60:b8:04:e8:e1:ff:b8:78:76:20:ec:88:58:38:0d:d3:ef:
         41:65:f3:6f:31:94:0c:1c:45:fd:fe:3d:fa:d3:3c:37:26:80:
         cb:f5:34:42:e8:82:af:31:a3:01:8e:c9:5a:23:87:53:d0:7e:
         57:a3:9d:2b:b2:47:99:09:b3:48:6f:c7:d4:7d:d0:82:e8:0d:
         9a:80:12:ae:3b:8f:c4:73:3b:9b:34:67:37:c7:c5:f4:19:30:
         82:19:e1:17:ad:e0:5f:a2:d4:39:ca:c6:6e:b5:eb:70:4e:1f:
         32:21:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 18:51:54 2024 by rpki-client on console-fra.rpki-client.org