Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa
File:                     3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa (raw, json)
Hash identifier:          eCxoO4eaxGp+jMUOjngkSlFBxG1IGgEjd9AWnv43dw8=
Subject key identifier:   7F:9C:A4:44:3B:00:E5:32:5B:9F:51:95:EE:AF:5F:68:0E:70:38:DC
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       5F0E2FB3A0A564BB22CA35E999F7D099EE11333D
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa
Signing time:             Wed 03 Apr 2024 18:31:25 +0000
ROA not before:           Wed 03 Apr 2024 18:26:25 +0000
ROA not after:            Wed 02 Apr 2025 18:31:25 +0000
asID:                     264126
IP address blocks:        138.59.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 14:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0e:2f:b3:a0:a5:64:bb:22:ca:35:e9:99:f7:d0:99:ee:11:33:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Apr  3 18:26:25 2024 GMT
            Not After : Apr  2 18:31:25 2025 GMT
        Subject: CN=7F9CA4443B00E5325B9F5195EEAF5F680E7038DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:fb:8f:e9:a5:0b:16:37:c1:e9:0f:e0:1a:
                    39:44:0d:7d:87:a0:c2:c1:61:2c:2e:ad:38:11:bb:
                    c6:cc:63:02:6c:4a:96:a4:20:87:75:f5:f5:54:d1:
                    93:47:33:3b:ae:b7:a2:ee:96:0d:e9:ee:6c:22:40:
                    19:35:b7:c2:e4:fb:32:67:40:95:d1:a3:31:cd:55:
                    d0:92:29:45:63:ff:ef:f4:c6:44:88:5a:1e:fa:04:
                    de:ae:9b:9a:26:20:4e:8e:a4:94:22:d5:68:ce:22:
                    8c:84:1f:dd:1f:7f:06:71:48:c3:4d:87:09:ff:a1:
                    6a:96:a5:00:54:a9:2c:f8:58:70:0b:f1:21:bd:ac:
                    1c:a8:91:28:9a:a6:87:9d:d4:a4:e0:a0:e0:4b:b2:
                    32:9b:75:28:66:70:e5:ca:80:58:e9:ad:3b:17:4c:
                    a7:f2:02:45:d6:e6:1d:d6:df:71:d4:dc:dc:83:61:
                    b2:b0:e3:03:18:7b:fd:12:0c:d1:80:67:7e:17:59:
                    43:72:9d:23:ca:8e:5d:02:af:a7:06:a1:3a:a7:fe:
                    2f:cb:ba:37:bf:09:68:3a:83:91:a1:51:44:92:ac:
                    72:7a:e9:a5:79:12:8a:d4:43:25:45:1f:3b:25:ef:
                    1b:b5:f7:6b:73:94:59:6d:ff:7f:cb:c8:ad:08:72:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9C:A4:44:3B:00:E5:32:5B:9F:51:95:EE:AF:5F:68:0E:70:38:DC
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230332e302f32342d3234203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ba:16:66:ee:08:a4:b9:eb:76:86:dc:fb:06:9b:cc:6c:d3:
         f5:94:6e:e8:6a:0d:98:cb:8d:89:83:31:0c:69:24:62:38:dc:
         b2:64:9c:42:df:07:1e:d5:7a:f8:0a:c2:b6:a6:9a:1b:76:25:
         76:fa:54:78:f5:c4:a3:03:45:15:b7:69:9f:a9:62:f3:6c:8e:
         b7:f1:86:37:b9:4d:09:eb:70:2d:1a:05:30:92:eb:16:a7:eb:
         7c:bd:0c:19:0e:df:0e:d5:fb:45:d2:af:53:dc:2d:a3:48:6f:
         a9:e0:2b:71:84:17:76:fa:bb:00:68:d4:98:f7:4b:62:42:9f:
         dc:20:5c:24:8d:be:8f:d4:17:f1:12:6a:4f:b2:02:7b:58:ba:
         af:e5:66:56:79:7b:9a:4a:07:90:c6:ae:c5:7d:65:c6:92:2f:
         d0:d1:de:53:73:36:52:d1:37:66:55:1d:79:82:2f:81:be:00:
         9a:cd:03:13:5e:94:9c:e7:a1:2e:00:48:f8:0b:ca:d7:7e:75:
         fb:ce:c8:be:a0:76:47:06:63:a5:e5:b7:20:7b:22:0b:82:cf:
         5e:66:43:00:b5:59:19:cb:c9:bb:87:d8:c0:2b:52:d1:da:7b:
         7c:2b:3c:63:ee:04:b6:1e:b8:73:22:b9:34:e8:c2:d2:ed:6f:
         0c:e7:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 16:32:15 2024 by rpki-client on console-ams.rpki-client.org