Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32332d3233203d3e203532363533.roa
File:                     3133382e3132322e3138302e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          sYOewE1cDmQsOfU6cnQpZdRWs71V39/66NAKDqqXUds=
Subject key identifier:   28:FD:B6:BA:87:0A:E2:3F:3D:11:63:24:65:61:9A:96:CC:37:CC:82
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       3A31628858E5BB3EA033E22525CE6EF6D4FFB629
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32332d3233203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:51 +0000
ROA not before:           Wed 03 Apr 2024 23:17:51 +0000
ROA not after:            Wed 02 Apr 2025 23:22:51 +0000
asID:                     52653
IP address blocks:        138.122.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:31:62:88:58:e5:bb:3e:a0:33:e2:25:25:ce:6e:f6:d4:ff:b6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:51 2024 GMT
            Not After : Apr  2 23:22:51 2025 GMT
        Subject: CN=28FDB6BA870AE23F3D11632465619A96CC37CC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f1:45:12:15:c2:24:f2:02:46:3e:6b:25:02:
                    54:e3:fb:dc:fb:e6:d3:ed:e4:13:28:32:2d:2f:96:
                    c7:bc:8d:e4:35:c8:cb:6c:69:db:4e:c3:e8:c1:44:
                    00:b8:3d:00:97:e8:86:c5:77:a7:48:a2:e1:de:0e:
                    fd:ee:da:75:d2:67:1c:65:80:15:c2:b3:28:27:dd:
                    d6:46:b9:3c:80:9a:35:6b:2b:ed:21:ef:28:94:37:
                    d9:16:2e:95:93:48:ca:26:c4:65:e8:44:d4:52:bd:
                    38:d7:40:1e:ad:14:6f:bb:e6:47:53:63:24:48:25:
                    87:58:55:63:42:7b:7d:ea:12:51:f5:6a:5d:d2:0e:
                    15:cd:04:35:7c:0b:5a:b5:21:68:7c:10:1d:3d:88:
                    1f:38:33:91:88:55:88:47:fc:db:37:46:05:4d:2d:
                    26:aa:f9:82:10:13:82:77:ce:50:e5:97:c4:f4:2a:
                    f4:4c:7e:44:68:10:be:8a:77:a4:85:07:24:de:f9:
                    2a:a9:d8:9f:a7:da:ed:c7:20:c8:39:98:0c:22:c9:
                    da:91:2f:e7:e7:a7:fd:e5:1c:44:56:16:af:1a:34:
                    5d:1d:e8:51:cf:11:c4:25:72:c5:e9:11:05:46:14:
                    d8:c9:42:0a:e1:28:de:31:ce:1b:4b:0b:1d:e3:60:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FD:B6:BA:87:0A:E2:3F:3D:11:63:24:65:61:9A:96:CC:37:CC:82
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138302e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:55:a2:6c:ff:24:67:f0:16:09:b6:af:1b:85:98:9d:17:6d:
         58:b0:ae:c5:c1:8d:ed:53:2f:e4:87:8e:ce:34:75:5d:34:59:
         5e:48:28:2c:a5:85:39:b5:e0:7e:a2:12:c0:99:13:d9:98:e3:
         1e:dc:c0:7d:a5:51:dd:8f:e7:54:b8:3a:e5:6a:4b:5c:dd:b5:
         20:ae:25:6c:21:37:52:0b:7e:6f:87:6e:b7:de:30:ad:61:ad:
         83:a1:40:79:0b:cc:30:b7:a1:ae:ba:8a:85:cf:c6:dc:a7:41:
         90:66:a0:5c:3b:e8:09:d1:cb:78:1c:a5:5e:49:79:17:c6:74:
         e9:af:aa:92:c6:47:29:fa:b0:e1:d0:93:c8:6b:f1:46:a3:98:
         ed:51:90:84:0c:92:b2:0b:6f:53:4c:a7:f0:df:c5:84:c6:f7:
         e0:34:06:33:26:ce:f7:ee:8d:c3:73:11:09:dc:a4:f2:86:68:
         1e:00:fb:3d:c0:40:69:35:c0:a9:87:3f:98:e7:b8:02:78:60:
         8e:88:08:bd:59:43:31:d4:44:8e:03:0f:c9:23:06:ef:7b:90:
         be:9a:d7:6f:0d:98:1f:63:e8:59:a1:c3:8c:51:fa:b3:e9:bd:
         79:a6:46:3b:f1:36:38:ef:49:43:64:e1:71:59:b5:94:70:82:
         d2:69:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org