Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa
File:                     3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          I8fl+bN72OKjjPm212KR/wIXrpHfaVYtaiTWmD1vy2s=
Subject key identifier:   1A:D2:5F:8A:87:07:36:13:02:11:71:CB:34:A1:67:60:69:20:59:29
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       40A410B1CD4B8B94C69EE078CEA65E84FF81A3B9
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:55 +0000
ROA not before:           Wed 03 Apr 2024 23:17:55 +0000
ROA not after:            Wed 02 Apr 2025 23:22:55 +0000
asID:                     52653
IP address blocks:        138.122.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a4:10:b1:cd:4b:8b:94:c6:9e:e0:78:ce:a6:5e:84:ff:81:a3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:55 2024 GMT
            Not After : Apr  2 23:22:55 2025 GMT
        Subject: CN=1AD25F8A87073613021171CB34A1676069205929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:47:6d:45:fe:3b:d3:d9:21:79:b2:61:61:
                    57:51:da:c3:64:a7:f5:1d:8e:2e:57:ef:fe:ce:0f:
                    55:f2:45:e5:5a:bf:67:45:82:46:a6:92:e9:3a:f1:
                    86:2f:12:10:85:7d:04:06:6e:c2:08:be:45:76:69:
                    66:3e:0f:27:d4:cf:b5:33:61:82:21:ca:14:d8:88:
                    a0:c0:a3:c8:10:7b:23:6d:53:74:a4:5b:24:bb:06:
                    93:0a:38:81:44:51:b1:af:24:d3:ef:4f:a6:11:c2:
                    7c:cb:af:ce:2d:64:71:82:bc:08:f0:5b:f2:08:fd:
                    5b:c8:4f:cc:f7:63:44:36:e5:8f:03:41:b3:ff:30:
                    59:72:99:d3:80:ba:ea:37:76:d1:fc:30:65:ee:4f:
                    6e:04:cc:3d:7d:54:67:2a:ec:bc:0a:3e:04:9d:92:
                    8c:84:2c:f4:3b:6e:6d:08:d5:5b:67:c2:d2:25:62:
                    2b:42:99:c9:a4:1b:83:8b:2f:57:b6:36:ec:6c:d2:
                    c9:e3:27:be:bf:ab:93:e6:75:6e:c2:d0:75:0b:40:
                    7b:cc:1b:02:88:c8:d3:eb:2b:b2:97:67:3d:54:ba:
                    da:4e:e6:a3:e1:44:8e:20:f7:f2:ea:70:6b:8b:11:
                    1d:24:41:ea:db:ec:11:07:b4:dc:a4:b9:d1:93:4d:
                    39:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D2:5F:8A:87:07:36:13:02:11:71:CB:34:A1:67:60:69:20:59:29
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:92:af:e0:c9:2b:17:d2:08:ea:66:fe:27:8c:d3:3f:3f:48:
         79:47:77:8e:f3:2f:f7:5f:01:9e:52:39:d6:54:72:35:41:02:
         c8:55:b2:f0:6e:ea:ce:6a:4b:b4:62:0b:ff:cf:1c:06:c3:b6:
         b6:27:b3:7f:b7:b7:99:d9:ec:f2:89:10:93:ce:95:c9:b1:89:
         4c:69:f4:71:c2:16:ca:c5:fc:4a:ca:40:28:56:d0:48:12:8e:
         d9:93:35:0c:7a:cb:04:e0:49:8f:f5:82:0c:ba:70:03:28:fe:
         84:99:2b:97:9c:58:1d:b5:a7:3b:f4:9b:94:4c:bb:6e:8d:b8:
         38:e8:ee:8d:ef:a4:78:97:cb:b3:8d:b5:23:cb:af:87:a4:ef:
         6f:11:36:da:91:4b:00:cc:84:87:9a:08:4c:3e:51:d2:12:c7:
         f0:fa:83:04:05:68:c6:16:20:b6:4f:0d:39:64:48:f0:83:be:
         1a:df:d0:98:39:bd:bb:49:7f:b0:43:e3:3f:77:b8:48:25:fc:
         70:b4:57:7c:34:ca:24:d6:7e:bd:61:98:4e:9d:72:56:14:4a:
         d3:cc:db:62:df:0f:65:6e:a8:99:23:93:64:94:51:60:be:b1:
         b7:32:2e:47:f9:d9:b5:82:49:55:4c:1a:15:8d:fb:da:22:4d:
         c6:a4:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org