Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36302e302f32322d3234203d3e20323634323438.roa
File:                     3133382e3131382e36302e302f32322d3234203d3e20323634323438.roa (raw, json)
Hash identifier:          wCHkQa+cBvocb8/OBq9jcvfdc1SacH1x6HgwRj15S7Q=
Subject key identifier:   E7:1B:5B:B1:77:18:45:CB:43:6D:72:52:3F:3B:A9:23:10:5E:0E:EB
Certificate issuer:       /CN=173181F9E386B23D1F08C0B4F7613C6DFE7B08A3
Certificate serial:       3433F6A1CFEF7503E86947B367A8229ADD329968
Authority key identifier: 17:31:81:F9:E3:86:B2:3D:1F:08:C0:B4:F7:61:3C:6D:FE:7B:08:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36302e302f32322d3234203d3e20323634323438.roa
Signing time:             Fri 12 Jul 2024 14:37:50 +0000
ROA not before:           Fri 12 Jul 2024 14:32:50 +0000
ROA not after:            Fri 11 Jul 2025 14:37:50 +0000
asID:                     264248
IP address blocks:        138.118.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.crl
                          rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:33:f6:a1:cf:ef:75:03:e8:69:47:b3:67:a8:22:9a:dd:32:99:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173181F9E386B23D1F08C0B4F7613C6DFE7B08A3
        Validity
            Not Before: Jul 12 14:32:50 2024 GMT
            Not After : Jul 11 14:37:50 2025 GMT
        Subject: CN=E71B5BB1771845CB436D72523F3BA923105E0EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:e7:f0:bf:dd:31:86:3d:80:16:10:ff:ae:
                    9c:16:d9:34:13:61:b8:e0:b5:3c:5f:4f:4e:ed:42:
                    78:15:68:00:b0:c6:e9:a3:59:b1:69:d1:83:02:49:
                    09:76:59:97:37:c5:f5:f0:4e:63:65:1e:3d:7a:cd:
                    0c:d4:c7:84:6f:4b:fb:69:e5:af:7e:0c:84:27:7c:
                    32:4d:3e:0e:e6:8c:24:4f:6e:e7:1f:62:5d:af:ed:
                    22:1c:50:aa:51:e7:55:de:9c:8b:0b:3c:76:6d:18:
                    bc:63:41:63:db:e1:a7:69:3d:8a:2c:c5:f5:b2:b3:
                    64:2b:9d:ff:45:1a:e7:bd:1f:9f:ec:51:45:b4:8f:
                    34:0b:c8:6c:c5:4f:0f:0c:32:47:0e:b9:3e:ae:c9:
                    0b:e5:74:8e:97:20:55:d5:43:74:2f:fe:8a:3e:55:
                    22:ce:9c:04:f0:21:8e:f5:4a:f1:67:37:66:8f:0a:
                    0c:d0:7f:3b:0e:1c:57:f6:f9:31:6e:50:77:93:b2:
                    8d:74:ee:6b:0c:ed:d0:99:0f:20:ce:8e:e3:37:a7:
                    29:c4:7c:84:3a:3f:72:2d:c5:62:14:b6:b7:a1:69:
                    be:be:cd:bf:20:05:78:bd:7b:53:c4:2d:e0:4f:5d:
                    9b:c4:fb:94:1a:c8:a4:bc:63:d2:fc:a0:b7:4f:3a:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1B:5B:B1:77:18:45:CB:43:6D:72:52:3F:3B:A9:23:10:5E:0E:EB
            X509v3 Authority Key Identifier:
                keyid:17:31:81:F9:E3:86:B2:3D:1F:08:C0:B4:F7:61:3C:6D:FE:7B:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173181F9E386B23D1F08C0B4F7613C6DFE7B08A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36302e302f32322d3234203d3e20323634323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:76:ef:31:3e:01:95:d3:ac:93:57:93:18:0b:50:5c:bc:42:
         61:af:c7:bf:95:a3:84:90:0c:d7:05:5f:f6:57:f6:3c:53:02:
         af:81:d2:54:1e:d8:64:5b:e5:66:ca:a6:80:fe:b5:2b:12:5d:
         8b:54:d4:9f:04:cb:03:a7:fa:4b:34:62:ac:50:49:a8:f3:71:
         2f:eb:2e:6e:e1:b0:a9:e7:c1:c8:fe:8d:f1:23:77:f3:db:07:
         c6:35:62:09:05:a2:50:6d:82:27:75:6e:a7:c5:4c:1d:55:36:
         7e:e3:1b:01:50:6e:87:ed:36:7e:b5:b8:15:ed:03:72:15:fe:
         1e:ca:3c:2d:8c:67:a6:e6:3a:e3:36:b3:a4:d1:98:be:c5:40:
         90:ae:1f:0c:a0:ae:f2:88:39:88:79:5c:0f:e6:f7:f2:2d:4d:
         c1:88:32:d3:2f:aa:b1:20:ca:44:10:9f:3d:61:c6:95:bd:83:
         b1:93:39:38:e9:10:eb:fb:71:33:15:8a:0e:5f:5e:e6:9c:1b:
         d9:7a:03:6b:c2:da:74:90:a6:b2:15:84:99:9b:da:54:63:d5:
         97:75:41:e5:4e:e5:42:26:3f:9e:e1:f3:10:f1:95:10:0d:14:
         c3:19:0b:65:4d:55:f2:e5:87:8a:49:aa:70:f3:87:7d:8a:00:
         3e:23:75:e5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNDP2oc/vdQPoaUezZ6gimt0ymWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTczMTgxRjlFMzg2QjIzRDFGMDhDMEI0Rjc2MTNDNkRG
RTdCMDhBMzAeFw0yNDA3MTIxNDMyNTBaFw0yNTA3MTExNDM3NTBaMDMxMTAvBgNV
BAMTKEU3MUI1QkIxNzcxODQ1Q0I0MzZENzI1MjNGM0JBOTIzMTA1RTBFRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hefwv90xhj2AFhD/rpwW2TQT
YbjgtTxfT07tQngVaACwxumjWbFp0YMCSQl2WZc3xfXwTmNlHj16zQzUx4RvS/tp
5a9+DIQnfDJNPg7mjCRPbucfYl2v7SIcUKpR51XenIsLPHZtGLxjQWPb4adpPYos
xfWys2Qrnf9FGue9H5/sUUW0jzQLyGzFTw8MMkcOuT6uyQvldI6XIFXVQ3Qv/oo+
VSLOnATwIY71SvFnN2aPCgzQfzsOHFf2+TFuUHeTso107msM7dCZDyDOjuM3pynE
fIQ6P3ItxWIUtrehab6+zb8gBXi9e1PELeBPXZvE+5QayKS8Y9L8oLdPOkAxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5xtbsXcYRctDbXJSPzupIxBeDuswHwYDVR0j
BBgwFoAUFzGB+eOGsj0fCMC092E8bf57CKMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFBFZGV1M1pZc0h5NUtmSmFqOXNvdkFTeVQ2blRvenNobjF5TFBUSndy
S1gvMC8xNzMxODFGOUUzODZCMjNEMUYwOEMwQjRGNzYxM0M2REZFN0IwOEEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3MzE4MUY5RTM4NkIyM0Qx
RjA4QzBCNEY3NjEzQzZERkU3QjA4QTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQRWRldTNaWXNIeTVLZkphajlzb3ZBU3lUNm5Ub3pzaG4xeUxQVEp3cktYLzAv
MzEzMzM4MmUzMTMxMzgyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdjwwDQYJKoZIhvcNAQELBQADggEBAHJ27zE+
AZXTrJNXkxgLUFy8QmGvx7+Vo4SQDNcFX/ZX9jxTAq+B0lQe2GRb5WbKpoD+tSsS
XYtU1J8EywOn+ks0YqxQSajzcS/rLm7hsKnnwcj+jfEjd/PbB8Y1YgkFolBtgid1
bqfFTB1VNn7jGwFQboftNn61uBXtA3IV/h7KPC2MZ6bmOuM2s6TRmL7FQJCuHwyg
rvKIOYh5XA/m9/ItTcGIMtMvqrEgykQQnz1hxpW9g7GTOTjpEOv7cTMVig5fXuac
G9l6A2vC2nSQprIVhJmb2lRj1Zd1QeVO5UImP57h8xDxlRANFMMZC2VNVfLlh4pJ
qnDzh32KAD4jdeU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:19 2024 by rpki-client on console-fra.rpki-client.org