Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32342d3234203d3e203631353734.roa
File:                     3133382e3138352e3233302e302f32342d3234203d3e203631353734.roa (raw, json)
Hash identifier:          HvVrC32tTjTfXSXq3rVj8LoAE0riPqVNCJCtVyXXjnY=
Subject key identifier:   61:68:2D:B0:F7:00:13:2F:62:7D:7A:8F:3B:D1:40:48:5B:8B:45:49
Certificate issuer:       /CN=7B6641A5C6EE44C68C73C25AFF5CF247902CD54D
Certificate serial:       077073FFBAFD235826A6722CB999D3C07E422A38
Authority key identifier: 7B:66:41:A5:C6:EE:44:C6:8C:73:C2:5A:FF:5C:F2:47:90:2C:D5:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32342d3234203d3e203631353734.roa
Signing time:             Fri 27 Sep 2024 19:20:16 +0000
ROA not before:           Fri 27 Sep 2024 19:15:16 +0000
ROA not after:            Fri 26 Sep 2025 19:20:16 +0000
asID:                     61574
IP address blocks:        138.185.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.crl
                          rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:70:73:ff:ba:fd:23:58:26:a6:72:2c:b9:99:d3:c0:7e:42:2a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B6641A5C6EE44C68C73C25AFF5CF247902CD54D
        Validity
            Not Before: Sep 27 19:15:16 2024 GMT
            Not After : Sep 26 19:20:16 2025 GMT
        Subject: CN=61682DB0F700132F627D7A8F3BD140485B8B4549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:89:2f:19:14:7e:1e:f4:f3:86:82:c6:d5:
                    60:29:8d:4f:49:66:80:a9:ff:48:a6:63:8f:10:b3:
                    29:be:e0:c6:be:ae:d8:1b:73:ea:eb:32:8d:bf:72:
                    fb:06:b0:bc:c0:25:e1:54:16:62:ed:e2:1a:34:46:
                    9a:e7:b8:da:1e:6c:f2:00:b7:c5:47:74:0b:63:c3:
                    bc:54:16:3a:d3:a8:25:8a:30:19:0c:96:10:d8:cd:
                    c5:8d:e0:bf:97:fc:2c:36:4e:58:33:c5:71:05:f7:
                    ff:32:bb:71:5c:32:a9:41:8c:26:f1:89:b3:b2:00:
                    5c:81:a7:53:1b:73:82:8b:66:11:62:42:ff:07:74:
                    30:14:da:c7:1d:6d:1d:0a:18:da:79:bc:f4:50:49:
                    55:d8:c4:5f:d7:1e:bf:44:d9:c7:bb:b5:26:c5:a5:
                    2e:7e:32:de:1b:79:78:47:5e:4c:0a:02:b9:59:a4:
                    70:72:f2:b1:11:a3:b6:0d:4c:4d:ff:2f:9d:c5:0e:
                    72:9f:a3:63:23:8d:ea:2a:8c:0f:66:4e:49:9e:c6:
                    44:ef:e7:94:51:fe:08:f3:d7:f3:4f:31:36:6e:78:
                    93:fe:42:d0:03:f4:36:db:33:99:a4:23:ec:25:11:
                    85:d9:a8:4e:0f:b1:18:e1:d9:58:21:56:3c:0b:95:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:68:2D:B0:F7:00:13:2F:62:7D:7A:8F:3B:D1:40:48:5B:8B:45:49
            X509v3 Authority Key Identifier:
                keyid:7B:66:41:A5:C6:EE:44:C6:8C:73:C2:5A:FF:5C:F2:47:90:2C:D5:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B6641A5C6EE44C68C73C25AFF5CF247902CD54D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32342d3234203d3e203631353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:7e:9d:29:f4:e5:2a:7b:33:0a:e5:43:e0:cc:50:23:a5:b3:
         81:53:79:45:75:de:d1:09:39:df:62:24:89:ba:8f:4e:2c:d7:
         11:e1:ce:e3:22:ee:c3:c1:42:b5:69:a1:14:f8:f7:d7:55:b8:
         48:6b:8b:17:6f:a9:7e:fd:26:95:50:71:47:76:31:3a:99:0d:
         cb:24:d9:c6:4b:8e:e4:5b:2c:a4:2f:39:96:1a:32:5e:10:f3:
         8e:8b:5a:0f:87:ae:12:56:e8:44:a9:07:ee:e8:2f:c5:22:da:
         17:9a:8a:ce:75:ef:71:dc:af:15:f9:2d:d5:b4:55:68:fa:51:
         2f:0f:32:21:6c:0e:57:b5:52:99:7e:c2:18:9b:d0:a8:40:90:
         bf:2b:64:e6:42:67:eb:8f:84:b0:89:96:14:6f:dd:4c:ee:84:
         10:ca:ad:43:b9:61:05:fd:7d:d2:10:6d:79:a8:bd:c2:bd:ac:
         7e:ec:01:2c:36:79:bf:49:74:3b:49:b3:07:84:d2:a3:64:db:
         75:9e:dc:02:75:68:24:20:54:7e:7d:23:f2:7f:48:d3:50:92:
         01:31:0e:dd:ad:43:ad:5f:1d:89:71:5f:b9:90:b9:26:02:db:
         ea:5a:20:60:5f:83:25:34:c9:a9:73:c1:12:36:a1:d0:c6:4f:
         33:e2:3e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:57 2024 by rpki-client on console-ams.rpki-client.org