Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa
File:                     3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          z90v6A8A3hCyBx24A1mhjyZVuchwjZCycTkNsh29HEw=
Subject key identifier:   E7:34:0B:6C:87:69:8B:A9:13:BB:37:99:82:5D:E9:DD:D3:38:E4:04
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       0155878A10B8EBEA76AA98D0DBF4DAC3CE806940
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:55 +0000
ROA not before:           Wed 03 Apr 2024 23:17:55 +0000
ROA not after:            Wed 02 Apr 2025 23:22:55 +0000
asID:                     52653
IP address blocks:        138.122.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:55:87:8a:10:b8:eb:ea:76:aa:98:d0:db:f4:da:c3:ce:80:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:55 2024 GMT
            Not After : Apr  2 23:22:55 2025 GMT
        Subject: CN=E7340B6C87698BA913BB3799825DE9DDD338E404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:92:9c:fd:63:f8:9e:26:2a:2e:d5:dd:91:
                    13:7e:6a:42:ed:15:eb:90:81:21:86:bb:03:a6:6b:
                    c5:16:2c:43:98:cc:3b:2d:c2:b3:c9:95:58:34:6c:
                    7a:69:eb:c7:d0:40:8e:e2:2e:b9:85:8a:3e:87:10:
                    ea:43:24:e7:54:eb:04:03:ec:de:58:61:4b:20:26:
                    24:d3:23:25:12:bd:b1:ca:b2:4c:c4:61:6e:e7:b3:
                    22:82:80:f3:91:38:c5:a2:34:25:66:84:18:49:c1:
                    9e:73:3d:d8:6a:40:b4:cb:b0:d5:42:87:30:00:0f:
                    c0:86:50:5c:28:ec:5b:63:65:c8:f5:7d:63:a3:5a:
                    76:d1:5e:48:70:7c:fd:64:a0:cf:3f:e6:7a:eb:cd:
                    31:da:0d:9b:d8:de:c9:67:a7:b9:00:8f:82:af:56:
                    61:42:ef:82:1b:35:d6:83:15:0c:70:ba:dd:65:c1:
                    bd:09:8c:cb:a3:9b:a1:fb:45:4b:4c:50:1d:ea:f4:
                    9d:92:92:3e:56:15:d9:23:45:cb:ee:56:10:8b:e6:
                    d0:7d:49:07:22:9b:68:8d:4c:44:9d:30:0d:b0:c3:
                    61:57:37:e7:e4:07:8b:59:a6:e6:29:bf:17:3c:a6:
                    d5:36:95:8c:85:97:16:e0:28:ae:b4:f9:9a:a4:5a:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:34:0B:6C:87:69:8B:A9:13:BB:37:99:82:5D:E9:DD:D3:38:E4:04
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138322e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:1f:16:af:09:0a:24:b4:9b:4f:5c:86:f9:63:2c:7b:bf:58:
         8e:79:37:59:f9:34:b2:31:0b:16:0a:66:92:ff:1a:29:5d:52:
         b6:da:40:67:b9:fd:36:d2:16:b0:f0:1d:95:b6:bf:8a:b8:ce:
         3e:b1:b0:26:64:ed:40:47:83:3a:35:de:84:7d:11:cc:06:27:
         2f:55:f5:71:41:fe:cc:09:2c:7f:e7:79:1b:52:1b:4a:ba:09:
         e0:9b:a1:a7:29:47:7a:3e:a3:ff:82:21:13:ec:87:b1:16:6a:
         e1:bf:1e:ad:e4:79:af:78:c6:0d:54:eb:bc:8a:79:b0:c4:8f:
         9e:bc:12:53:4f:d0:3c:ef:78:08:c4:08:97:de:3a:ac:f1:bb:
         b2:61:89:38:ca:99:83:ad:3d:ce:ce:f5:39:e5:8e:d9:7c:c8:
         8f:3e:04:5e:23:a3:50:d2:ee:fa:56:c1:a5:83:7f:94:4e:6a:
         a7:2b:0b:e2:29:16:8d:b3:03:25:26:73:9d:fd:b6:57:50:0f:
         86:2e:66:5d:db:75:c3:6e:88:29:3b:85:0d:2e:85:38:fc:ff:
         18:7b:4c:40:32:85:02:c2:c7:4d:f4:83:be:78:dc:84:6d:3c:
         a2:90:6c:42:03:63:f5:ab:12:54:f2:05:b5:35:7d:c7:b5:53:
         f4:0a:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org