Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa
File:                     3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          45kV9zL5c7GfaWXLvn7RXZM8Fb3r/nXc2XAYxFIVTYc=
Subject key identifier:   8D:7A:A0:4D:88:E3:26:F1:07:0E:D0:1C:FE:12:26:47:3A:BD:D7:07
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       4FC39574A5EEC5F74F469E28B309171663975829
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:51 +0000
ROA not before:           Wed 03 Apr 2024 23:17:51 +0000
ROA not after:            Wed 02 Apr 2025 23:22:51 +0000
asID:                     52653
IP address blocks:        138.122.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c3:95:74:a5:ee:c5:f7:4f:46:9e:28:b3:09:17:16:63:97:58:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:51 2024 GMT
            Not After : Apr  2 23:22:51 2025 GMT
        Subject: CN=8D7AA04D88E326F1070ED01CFE1226473ABDD707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:73:e8:aa:a1:8e:73:d9:07:5c:0a:3f:75:66:
                    d9:16:f4:a1:81:b4:c9:d0:e6:c8:d4:ce:c4:e9:53:
                    de:72:4e:13:3c:ba:30:84:cf:f6:6b:a8:e8:71:b3:
                    56:49:e9:7b:23:d8:ac:37:bf:1f:f6:80:82:53:00:
                    e6:bb:66:87:32:e7:95:9c:b4:6a:73:42:a3:3f:1d:
                    db:71:d9:76:99:6f:f8:10:b1:f8:b5:f3:8c:25:cd:
                    31:17:af:70:a5:6c:a9:42:c4:bd:a4:69:11:e5:72:
                    3d:12:ae:31:29:0b:c9:22:92:1a:5a:7d:35:fb:94:
                    2d:ad:f7:d6:01:29:da:54:30:f7:5c:ca:cb:75:05:
                    8a:dc:ec:c7:3e:a0:4f:93:2e:07:f3:2b:9c:44:3b:
                    64:45:5c:f6:24:1e:10:c1:33:c7:63:6b:96:9c:8c:
                    bd:56:26:20:a8:24:87:d8:54:78:c4:c3:bf:88:6e:
                    8f:c6:48:2a:06:bc:22:3f:36:16:2e:19:05:c2:5a:
                    a6:d7:7e:2d:a6:b7:91:c4:c1:2a:1b:a8:9e:65:95:
                    55:7a:14:bf:0d:f5:08:fc:c1:a4:81:87:8c:d0:70:
                    c1:48:15:69:60:9f:c9:65:cc:29:21:b5:72:c6:f8:
                    0b:26:92:17:44:5e:75:f9:59:33:6b:fc:6e:85:c3:
                    60:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7A:A0:4D:88:E3:26:F1:07:0E:D0:1C:FE:12:26:47:3A:BD:D7:07
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:b2:3f:47:88:8d:70:bd:3c:5e:6d:35:82:14:a0:c1:95:19:
         7c:3a:dd:2d:fd:8c:31:1e:f9:e9:69:bb:43:fc:a0:c5:3a:70:
         a4:f9:ec:79:28:9e:3e:a8:86:38:6f:8d:59:3f:d2:df:20:82:
         9f:d9:04:bd:7a:ec:a4:a2:a3:ec:0b:a9:b8:9e:46:b0:3b:f8:
         10:23:6c:ba:e5:43:1c:6e:f5:ca:88:56:f1:b0:c4:aa:49:b4:
         5c:9c:c3:1c:c6:b3:53:0e:70:ef:5f:14:aa:90:92:11:a5:55:
         64:5d:ca:90:d6:2b:68:fe:02:03:cb:84:ed:66:ea:4c:31:6c:
         a8:ee:aa:05:d1:80:bf:c6:90:f2:ed:72:15:c6:a9:e2:f0:b3:
         e8:9b:fc:34:9e:da:1c:1b:6d:ab:86:f5:9a:90:f6:b2:83:ab:
         08:c3:e8:68:f4:f2:97:f3:d2:ab:c3:1a:52:26:29:33:53:df:
         ba:64:67:e1:59:4c:ab:b6:e5:55:51:10:68:45:40:73:1c:9d:
         c5:ba:46:2e:e8:f2:50:c1:7d:60:17:12:21:d8:f2:e5:e1:1e:
         ac:2b:90:7d:f6:ce:7e:94:f0:f4:03:79:2e:e4:47:88:ac:71:
         84:50:87:00:82:1a:ac:8c:51:cc:f1:02:7f:a0:18:fd:41:91:
         3d:05:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-ams.rpki-client.org