Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3133382e302e3139322e302f32322d3234203d3e203238313331.roa
File:                     3133382e302e3139322e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier:          hbtZOBonk6WjP2hSly/sa+JaxMAEKmZiCXoshAxOaQU=
Subject key identifier:   C5:27:FA:1E:1E:46:27:54:AB:B9:80:C0:9D:57:48:92:DB:6A:E4:68
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       5B5B096B42958A43CB2E0C35C574A39AB9B0040A
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3133382e302e3139322e302f32322d3234203d3e203238313331.roa
Signing time:             Thu 04 Apr 2024 03:10:28 +0000
ROA not before:           Thu 04 Apr 2024 03:05:28 +0000
ROA not after:            Thu 03 Apr 2025 03:10:28 +0000
asID:                     28131
IP address blocks:        138.0.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5b:09:6b:42:95:8a:43:cb:2e:0c:35:c5:74:a3:9a:b9:b0:04:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Apr  4 03:05:28 2024 GMT
            Not After : Apr  3 03:10:28 2025 GMT
        Subject: CN=C527FA1E1E462754ABB980C09D574892DB6AE468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:b8:1c:2f:ff:68:37:40:8c:47:ef:03:ad:
                    fd:89:df:8b:56:a3:ef:81:8d:c3:54:61:c4:54:39:
                    af:4b:5a:1a:d5:25:fa:74:39:94:f5:09:02:21:36:
                    53:42:66:f3:02:3d:0a:5e:bf:1b:6e:b5:65:3d:f9:
                    9e:53:80:9e:87:9f:4d:ad:62:7d:b8:24:44:ac:6e:
                    dd:ef:a0:57:c7:dd:97:3f:2e:63:a9:56:30:4e:96:
                    56:28:12:a7:e3:a4:6c:ff:8e:d7:6f:7c:79:16:c6:
                    0d:cc:01:38:1d:ad:ee:87:f8:45:d9:70:73:fe:8f:
                    f2:99:54:e8:47:1c:fd:2b:e7:66:d5:94:c2:93:09:
                    2e:3e:cd:2a:82:19:8b:0a:40:00:0b:28:b1:50:df:
                    bc:92:d1:87:a2:21:81:9c:e1:11:5e:d8:91:e0:f3:
                    28:a8:28:b7:e1:a2:5d:c7:9b:47:11:a0:e5:3f:b7:
                    a5:9c:c2:af:67:48:53:bd:a6:cb:f6:6e:80:d3:b6:
                    32:47:7d:16:da:e4:b7:ba:b1:17:8f:58:e2:5d:56:
                    d3:88:83:a3:4c:1f:35:28:18:9f:2d:91:33:99:b6:
                    3c:4b:a6:3a:d7:58:25:e6:73:d6:c4:66:87:b5:06:
                    0b:2f:04:76:56:dd:bd:73:28:3c:4e:af:fa:65:26:
                    66:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:FA:1E:1E:46:27:54:AB:B9:80:C0:9D:57:48:92:DB:6A:E4:68
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3133382e302e3139322e302f32322d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:27:1b:47:df:ec:be:15:4b:60:ea:33:e2:b9:0a:e0:79:c2:
         2b:c3:17:e5:1f:88:cf:7b:61:5b:81:c6:88:24:66:d5:5b:49:
         b1:f0:0e:04:1c:86:13:6f:14:f1:af:bb:2a:e0:83:f2:23:bb:
         ba:45:ad:e6:31:63:65:56:ed:17:c6:b4:f0:ae:92:54:38:79:
         c4:89:a8:1a:d4:46:fb:8b:bf:9f:b5:f3:4e:87:01:af:29:94:
         17:e7:e4:51:d6:71:90:88:3e:d1:b9:ad:a4:86:56:03:4f:1e:
         fc:af:15:e8:09:32:84:33:e7:60:0e:c5:bd:89:1b:8b:a2:08:
         3f:16:b2:89:74:68:b1:72:11:a0:b6:07:36:79:bd:08:46:67:
         33:10:b6:ea:d5:75:2c:08:27:77:fd:00:d2:0f:b0:0f:6a:da:
         3b:89:5f:b9:21:55:e7:22:89:ea:3c:be:5c:0f:92:e9:ba:b5:
         ff:e6:1d:bd:cc:16:59:1d:a2:5c:94:5b:a4:cc:b3:45:06:06:
         f0:54:dc:27:6e:5f:28:6f:e2:7d:28:e7:f1:aa:74:c9:a1:f9:
         8e:ae:d3:bc:3c:6c:9d:40:e9:9f:48:11:b0:51:7f:6e:5d:4a:
         a6:e9:29:e4:8d:8b:f0:c1:d0:c3:21:c6:21:fe:ff:3a:33:78:
         b0:15:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:19 2024 by rpki-client on console-fra.rpki-client.org