Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa
File:                     3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa (raw, json)
Hash identifier:          +dy0OguRHHodpvI7m+maVRaKu+AFPlpY/u0O/GjQHAk=
Subject key identifier:   3C:CD:F0:50:9D:14:94:79:64:DC:92:16:F3:9C:53:C3:AE:89:1C:87
Certificate issuer:       /CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
Certificate serial:       3159DF1AB8C381FB1FE543DFEE9BB6CE9C3F87F1
Authority key identifier: 06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa
Signing time:             Thu 17 Oct 2024 19:53:16 +0000
ROA not before:           Thu 17 Oct 2024 19:48:16 +0000
ROA not after:            Thu 16 Oct 2025 19:53:16 +0000
asID:                     264517
IP address blocks:        138.117.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl
                          rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 04:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:59:df:1a:b8:c3:81:fb:1f:e5:43:df:ee:9b:b6:ce:9c:3f:87:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8
        Validity
            Not Before: Oct 17 19:48:16 2024 GMT
            Not After : Oct 16 19:53:16 2025 GMT
        Subject: CN=3CCDF0509D14947964DC9216F39C53C3AE891C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:2d:e1:00:66:c0:0d:82:7d:5e:70:fc:23:
                    e5:9f:de:f0:95:5b:6b:5e:0e:8d:72:67:0b:d3:f0:
                    9a:f2:c5:e9:35:1c:60:8e:79:25:b8:f8:2a:5c:73:
                    9c:6c:7a:17:1e:51:67:85:30:7b:40:e0:26:81:6d:
                    c2:76:ce:83:7e:0a:1e:14:74:f7:c9:f0:5c:a6:30:
                    b6:80:06:ed:e0:dc:28:60:58:a9:43:ec:d7:3d:04:
                    70:df:57:f4:4c:ce:fb:11:8c:fe:8b:75:6e:eb:d2:
                    dd:25:50:ce:89:4a:6e:58:0e:6f:b9:6f:d2:77:66:
                    4a:95:10:dd:f1:30:02:88:d4:c2:ff:98:54:9e:fb:
                    04:35:e9:e1:55:25:42:09:f8:c8:5a:b5:1c:67:c7:
                    6a:0b:2c:2e:e4:1a:ee:5b:43:4d:e9:fa:2f:9a:44:
                    c5:d8:f3:6c:55:f5:41:72:9d:c9:72:b4:96:75:26:
                    93:e8:dc:c3:be:46:40:fb:a1:32:a0:d4:56:09:08:
                    b5:ed:ed:a0:d3:84:c1:76:f3:cd:da:e8:e2:cb:22:
                    37:26:fd:51:62:66:7a:06:bd:98:f7:1c:8c:27:6b:
                    7b:5a:4d:7f:4c:ee:eb:ef:e9:a9:d5:f6:73:b7:dd:
                    65:49:71:d7:81:81:5b:8c:85:43:53:e2:5f:b9:02:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CD:F0:50:9D:14:94:79:64:DC:92:16:F3:9C:53:C3:AE:89:1C:87
            X509v3 Authority Key Identifier:
                keyid:06:DB:D3:2E:86:5D:9D:08:FA:5C:98:2A:B7:CB:DA:4F:CB:22:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06DBD32E865D9D08FA5C982AB7CBDA4FCB2262E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133382e3131372e3136342e302f32322d3234203d3e20323634353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:d3:d2:d1:14:67:dc:41:cc:be:a1:f5:1b:56:4b:13:cf:
         7f:f0:ea:cd:87:b7:b0:54:7c:b4:73:1b:88:79:74:63:19:59:
         cd:26:ea:88:ca:dc:91:f9:c9:e0:1c:62:f2:01:5d:31:f7:a1:
         7d:7d:73:bb:68:f3:d4:d7:6a:48:5a:31:81:94:cc:7c:c1:1a:
         f3:8a:17:20:bc:75:57:74:d3:c2:ee:21:28:8e:b4:d4:3e:a8:
         bd:78:19:47:41:2d:d0:42:dd:46:6c:86:97:bd:36:01:71:a6:
         6d:21:a8:07:78:6e:e4:b7:42:d8:e1:6c:62:85:37:e0:f0:24:
         5b:49:46:44:58:7a:c2:f3:3a:2e:b4:ff:4e:6e:7c:e8:6f:11:
         d0:7f:a4:70:61:e9:c9:c1:7f:d9:61:d4:bf:60:8a:ac:ad:d1:
         c6:23:61:57:9d:ca:b4:6d:af:08:c5:8a:75:72:a8:56:e7:e2:
         cd:1d:b5:15:59:64:b4:e6:d1:b1:d3:69:2c:b6:7c:53:36:f0:
         ea:62:71:a4:66:ed:25:07:90:ab:b7:02:95:06:a8:5e:23:8e:
         15:dd:7f:6f:43:fd:4f:64:a2:61:de:11:f2:d2:05:e2:90:7d:
         b0:bf:e4:94:19:9b:83:74:ea:97:47:3e:f8:34:61:23:6e:f6:
         2c:a2:68:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:57 2024 by rpki-client on console-ams.rpki-client.org