Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa
File:                     3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa (raw, json)
Hash identifier:          ASiz0ZcbAT9VDKQt49gxDLD444Lbu3KuDz6l5NFIFoI=
Subject key identifier:   C8:35:22:D6:9D:C2:3F:66:8F:3E:50:62:E6:6C:29:0F:63:ED:50:43
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       5608F1F8E84A637BB582B90011305E683F745467
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa
Signing time:             Sat 10 Aug 2024 23:16:31 +0000
ROA not before:           Sat 10 Aug 2024 23:11:31 +0000
ROA not after:            Sat 09 Aug 2025 23:16:31 +0000
asID:                     61678
IP address blocks:        138.122.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:08:f1:f8:e8:4a:63:7b:b5:82:b9:00:11:30:5e:68:3f:74:54:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Aug 10 23:11:31 2024 GMT
            Not After : Aug  9 23:16:31 2025 GMT
        Subject: CN=C83522D69DC23F668F3E5062E66C290F63ED5043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:e6:89:57:21:d5:a1:db:6e:7a:11:b3:1e:
                    d7:18:ff:d3:d0:24:d5:8c:ef:d9:ea:50:f5:ac:17:
                    f3:18:b4:3d:62:c4:7b:9b:e0:e8:ad:c9:8b:c6:40:
                    29:90:8b:75:2d:2e:d4:52:99:78:b0:01:6a:eb:e8:
                    94:7f:04:24:74:7d:49:75:2b:80:af:75:0d:ad:a7:
                    91:a5:61:6c:66:92:4b:2f:78:d8:30:c9:cc:50:97:
                    18:d9:36:90:45:9f:4f:4c:0a:d2:ab:32:28:93:09:
                    3f:27:e7:12:a3:be:db:0d:30:23:8b:0d:b1:2a:4b:
                    c2:b0:4f:ee:72:b5:34:04:2d:30:22:0d:5a:9b:86:
                    89:06:0c:a2:41:97:82:08:74:ea:08:b8:65:20:52:
                    98:73:ae:11:4a:05:99:62:5a:2c:b9:bb:79:c6:e3:
                    f6:47:fe:af:54:cb:2b:fe:ef:3c:31:14:d6:d2:0c:
                    23:09:ca:66:ca:b8:16:4e:7a:91:32:6d:14:0b:70:
                    4e:f4:c1:5f:cd:40:d6:3a:18:c7:67:15:66:09:f6:
                    ae:81:a2:49:c5:a0:a5:42:0e:4d:fc:40:e0:c9:a6:
                    00:d8:82:b0:b1:32:76:6e:e3:3b:86:9c:b9:2b:ab:
                    8f:e9:60:80:ba:5d:fa:c3:ee:9d:6f:a0:42:e7:d7:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:35:22:D6:9D:C2:3F:66:8F:3E:50:62:E6:6C:29:0F:63:ED:50:43
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32322d3332203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:a9:75:b1:ca:a1:28:b6:57:82:a3:9b:ae:bd:52:1e:00:f3:
         51:c3:62:96:7a:fe:50:1a:cf:0b:51:f4:96:ff:06:dc:bf:13:
         3d:1b:7b:d1:e1:2c:bc:3a:18:eb:ee:fb:a9:ef:e3:79:9b:55:
         10:4d:01:ed:54:81:07:d1:cb:a0:0a:ce:80:13:06:47:92:f1:
         56:e3:46:48:87:2b:c3:c2:76:42:64:39:44:d6:25:65:33:3a:
         66:66:d1:f6:ab:09:79:71:d3:1c:57:7a:c2:d9:3e:13:cd:17:
         aa:a0:73:56:a9:d0:e4:02:5c:5e:f0:81:93:48:bf:3d:d5:60:
         37:28:43:84:f2:b4:a7:1c:d9:61:99:24:1d:64:12:5a:f8:b5:
         82:86:ed:4c:fe:2a:46:ce:d6:bb:b7:70:9a:c6:bf:8b:dc:64:
         5f:58:de:46:d2:54:b1:4f:85:ff:40:35:8b:d3:20:b5:96:cf:
         11:48:9a:88:78:58:34:be:73:06:6a:0a:66:86:2f:ba:d9:58:
         2b:19:cd:a5:2e:39:22:0a:a8:e3:4d:a6:eb:b4:53:aa:ef:74:
         e4:55:81:d5:70:d2:81:ce:98:7d:35:cf:d1:be:14:7e:4a:8c:
         f8:55:b7:e6:aa:9e:d2:e5:05:70:8d:04:35:74:05:93:28:cc:
         7c:0d:92:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:31 2025 by rpki-client