Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa
File:                     3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa (raw, json)
Hash identifier:          O016C9Fiec+VsfKKbfxIBNuK03OQx616A+e1kZCIfFI=
Subject key identifier:   BA:FF:54:EF:7F:5F:55:61:5E:FC:AB:6C:26:D6:F8:4B:28:4D:21:5D
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       3953A99AE65CB9D0DBE0D72241FD2B71584CCF00
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa
Signing time:             Wed 03 Apr 2024 18:31:25 +0000
ROA not before:           Wed 03 Apr 2024 18:26:25 +0000
ROA not after:            Wed 02 Apr 2025 18:31:25 +0000
asID:                     264126
IP address blocks:        138.59.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:53:a9:9a:e6:5c:b9:d0:db:e0:d7:22:41:fd:2b:71:58:4c:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Apr  3 18:26:25 2024 GMT
            Not After : Apr  2 18:31:25 2025 GMT
        Subject: CN=BAFF54EF7F5F55615EFCAB6C26D6F84B284D215D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:0f:8b:6c:96:aa:73:fa:b2:bf:fc:f8:49:
                    5d:8e:4c:a6:5c:65:a6:3d:a3:fc:09:98:d3:05:ae:
                    5b:e6:d6:e6:1a:f4:fe:84:7e:9e:68:81:df:47:74:
                    4e:d0:29:f3:55:60:1b:07:7c:c5:24:43:f5:8d:68:
                    41:23:d8:83:0a:2a:41:67:3a:31:8e:a1:c7:c5:b8:
                    31:c9:06:d6:0c:46:4c:04:40:aa:52:6e:40:ca:be:
                    42:4d:d9:81:ee:b1:c6:93:8a:ba:c8:bd:83:fe:8b:
                    fe:5f:c8:3d:be:cc:d8:c5:4b:2e:1e:ee:78:b5:b3:
                    0a:21:ec:a2:0e:1c:a7:9a:69:dd:84:02:d7:17:b0:
                    01:34:54:63:01:41:a4:f0:2d:a1:db:03:b2:05:03:
                    65:ee:86:5a:37:71:3f:87:fd:28:86:a5:00:ad:af:
                    4c:5f:a8:cf:48:f3:f5:80:83:09:f8:23:a7:7f:7e:
                    45:b7:64:af:df:5b:fa:c0:2f:bb:4b:d9:32:07:e1:
                    2a:71:98:9d:11:35:b9:63:81:ae:99:a6:97:d5:80:
                    bc:ec:28:76:78:01:3f:d6:a9:32:85:bb:a4:9d:a9:
                    c8:6e:70:f0:1b:e4:ce:07:f4:e7:e9:80:83:45:81:
                    6a:19:6d:85:59:37:65:a2:01:f4:dc:b8:c0:ea:78:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FF:54:EF:7F:5F:55:61:5E:FC:AB:6C:26:D6:F8:4B:28:4D:21:5D
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32322d3232203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:c2:3e:dc:61:df:92:46:68:71:89:b1:ae:46:85:1d:fd:a8:
         b0:0b:89:31:17:0d:f6:29:d6:1a:9e:91:e7:c3:d6:04:16:87:
         ba:4a:5d:8f:b4:9c:91:b4:52:2e:28:a7:98:db:8e:d4:4b:12:
         40:69:ed:24:f2:f4:c6:cb:78:bc:2a:2a:4e:43:cd:bb:1f:a0:
         8b:34:cd:12:42:93:aa:66:d0:cb:e4:b7:6b:9c:69:83:05:8e:
         78:e5:47:cd:64:6e:89:f1:bb:26:87:7e:9b:88:79:7f:85:c5:
         66:09:31:0e:90:fb:3b:22:64:2c:0c:8a:31:4f:1a:9f:4e:6c:
         33:f3:0a:88:60:42:0c:44:8f:a1:39:05:eb:9b:c7:60:cd:68:
         2a:ab:df:2b:4f:00:22:83:76:3c:c9:14:3a:b2:99:93:02:85:
         fb:08:85:84:55:a0:5e:1a:47:cc:24:ce:87:92:c3:3a:5d:5b:
         10:27:e9:0e:81:e6:16:40:b7:19:c5:c9:fe:38:b5:4d:d2:29:
         61:2b:a2:94:f7:12:74:03:8a:0d:6f:9e:df:e9:2f:ed:e7:ba:
         30:06:db:ed:90:d7:bb:4a:7d:55:a0:f0:e5:5a:3d:59:bb:97:
         86:ce:f1:81:ff:0f:59:a5:94:8c:e2:6d:3e:d8:a1:0c:7c:e5:
         4e:75:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:57 2024 by rpki-client on console-ams.rpki-client.org