Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37322e302f32342d3234203d3e20323633323633.roa
File:                     3133382e3132322e37322e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          RKemodoIaB35cNJVp+ep2dETpbKjEAlTIU0TTmiy9RI=
Subject key identifier:   F6:D9:7B:64:95:71:E1:6C:CB:AC:80:63:CB:96:1E:1A:4F:3F:FB:37
Certificate issuer:       /CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
Certificate serial:       607617D08C6BCC3A615FDFF04A512C95F006F9EF
Authority key identifier: CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37322e302f32342d3234203d3e20323633323633.roa
Signing time:             Thu 04 Apr 2024 07:28:51 +0000
ROA not before:           Thu 04 Apr 2024 07:23:51 +0000
ROA not after:            Thu 03 Apr 2025 07:28:51 +0000
asID:                     263263
IP address blocks:        138.122.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl
                          rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:76:17:d0:8c:6b:cc:3a:61:5f:df:f0:4a:51:2c:95:f0:06:f9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D1BC8B26735E9068E8833320A9FDEB04E69CD
        Validity
            Not Before: Apr  4 07:23:51 2024 GMT
            Not After : Apr  3 07:28:51 2025 GMT
        Subject: CN=F6D97B649571E16CCBAC8063CB961E1A4F3FFB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:5a:ae:a5:09:43:3c:6e:e5:39:23:0e:2a:
                    cd:e1:38:b9:5f:5e:e5:04:7a:7b:7b:86:86:78:97:
                    f5:85:71:14:50:83:53:4a:22:54:ab:ed:ee:17:d3:
                    40:a9:a8:2f:28:0f:75:ed:78:33:45:66:54:c7:6d:
                    53:b7:36:67:45:58:c1:8f:d5:c0:68:8f:8a:a8:02:
                    ff:cd:97:90:f5:d1:93:ce:46:04:4b:22:fd:5c:a0:
                    97:11:c4:b5:8b:ac:9d:23:80:b3:9d:17:17:52:1e:
                    71:f2:fe:9e:ca:6d:9a:76:75:d6:44:70:d0:36:0b:
                    63:10:de:b2:eb:7f:cb:03:5b:5f:33:2f:82:5b:8a:
                    d5:4b:29:35:92:aa:79:82:b8:0d:1a:14:1c:13:cb:
                    82:e3:be:04:8d:0a:11:48:39:00:3c:8d:50:2d:15:
                    74:b5:ea:34:d4:e0:a4:ca:a1:69:b7:d9:a2:15:ee:
                    bf:79:47:4e:7c:61:01:01:a7:89:14:6e:30:bf:b8:
                    d0:c3:98:5b:b7:54:a2:33:68:0a:6d:6e:58:64:8d:
                    b8:23:23:3f:b9:57:e6:75:35:a9:92:6f:ef:79:88:
                    f4:4c:a5:ba:0b:50:af:8b:5a:44:d0:7e:df:25:f1:
                    dc:24:39:5d:81:01:47:8b:a7:2c:0a:74:60:bd:51:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D9:7B:64:95:71:E1:6C:CB:AC:80:63:CB:96:1E:1A:4F:3F:FB:37
            X509v3 Authority Key Identifier:
                keyid:CE:2D:1B:C8:B2:67:35:E9:06:8E:88:33:32:0A:9F:DE:B0:4E:69:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D1BC8B26735E9068E8833320A9FDEB04E69CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/1/3133382e3132322e37322e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:72:5b:78:cb:02:b8:17:b6:72:98:01:f8:be:2d:ce:dc:ca:
         cf:b0:d8:37:50:23:15:10:62:cc:5d:b3:20:35:55:56:75:3a:
         5c:ca:2d:43:2d:91:5d:77:2b:34:f7:3d:31:c7:c8:44:f3:c0:
         b3:03:81:77:87:f9:39:66:74:5d:d6:d4:33:d9:2f:42:a1:c2:
         1f:f0:75:61:e0:7f:9d:7d:88:d9:cf:5c:8e:31:d9:97:1a:c2:
         98:65:35:b4:fc:ea:41:85:55:96:65:00:82:f3:27:33:82:1d:
         a8:1a:2a:23:92:1f:ee:3a:4f:03:e6:1b:4e:6b:4d:3b:d1:c8:
         dc:09:c1:b6:7c:7e:1f:ec:af:e2:09:a5:94:aa:b4:6f:c7:26:
         c5:2e:a3:d5:8a:b4:ab:40:43:36:7c:cd:b1:c5:4a:65:7a:b5:
         f0:54:2e:a1:8b:30:51:6a:67:78:ba:9f:e5:e9:35:54:c8:ee:
         83:a6:31:c4:ea:5e:3a:57:03:ce:21:23:3b:37:e8:7f:61:d9:
         14:7e:a5:c6:84:5f:13:97:fb:d5:ba:3b:cb:00:ca:5e:97:f5:
         58:12:eb:f0:9b:c3:59:51:a1:1e:52:1f:de:ab:dd:a2:f1:45:
         9b:92:c9:44:07:53:21:fe:d0:ed:e5:ba:16:a2:ae:f1:25:84:
         b6:87:6c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:21 2024 by rpki-client on console-fra.rpki-client.org