Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3133382e3230342e33372e302f32342d3332203d3e203631373735.roa
File:                     3133382e3230342e33372e302f32342d3332203d3e203631373735.roa (raw, json)
Hash identifier:          PLuWHW+4zSKQLk/IkGR2zC6oFvu7p/7OMsaVgPAE6Ew=
Subject key identifier:   50:4D:08:A0:8F:DE:4D:4A:36:AF:FB:E6:C7:BC:59:CA:EF:B6:CC:D6
Certificate issuer:       /CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
Certificate serial:       54B6F089816AD31551D1E2552C70B57A99DBA419
Authority key identifier: 2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3133382e3230342e33372e302f32342d3332203d3e203631373735.roa
Signing time:             Thu 04 Apr 2024 20:47:03 +0000
ROA not before:           Thu 04 Apr 2024 20:42:03 +0000
ROA not after:            Thu 03 Apr 2025 20:47:03 +0000
asID:                     61775
IP address blocks:        138.204.37.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl
                          rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b6:f0:89:81:6a:d3:15:51:d1:e2:55:2c:70:b5:7a:99:db:a4:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4DF9097F97664A00A318EFAE22DC1036E91B5C
        Validity
            Not Before: Apr  4 20:42:03 2024 GMT
            Not After : Apr  3 20:47:03 2025 GMT
        Subject: CN=504D08A08FDE4D4A36AFFBE6C7BC59CAEFB6CCD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:7e:02:55:e7:75:fa:f2:2b:78:06:d8:18:
                    1d:a8:82:6b:5f:3b:ed:d5:38:81:63:aa:17:c8:61:
                    68:fb:6f:6b:87:9a:da:11:2b:57:e1:2d:35:c7:69:
                    e6:e8:b4:fe:6e:9e:c6:14:c0:8c:90:bb:38:0c:5b:
                    ce:80:a5:a4:a8:1b:28:50:0d:76:9c:56:a9:39:8a:
                    3d:a6:d3:50:8f:7f:87:4d:0e:de:c2:38:6c:39:c3:
                    49:0d:1d:e6:13:1b:36:4b:b7:ea:f3:b3:b6:cb:75:
                    cd:79:de:1a:8f:26:90:9d:24:63:23:1b:84:02:25:
                    df:79:50:0b:ac:84:3a:b9:81:f6:b6:94:7f:9b:fd:
                    9c:21:dc:68:19:bc:c4:a0:f1:13:d2:51:39:27:59:
                    92:b3:60:bd:2a:49:41:51:5e:0a:5c:c2:cb:16:74:
                    17:7c:b3:c8:65:a3:c7:c7:b1:c5:3c:80:e4:ec:08:
                    37:33:d6:8d:bd:fd:b6:79:f6:29:0d:b7:06:01:11:
                    a4:6f:61:74:61:db:1b:dc:e8:ae:47:58:8e:40:4f:
                    9d:12:cb:2c:87:f3:17:7e:ac:23:8d:b5:6f:e9:f9:
                    3f:9b:0b:39:1e:ef:26:e5:4b:0d:c2:4c:68:6c:6e:
                    da:73:d9:24:98:a2:44:60:1b:86:37:ce:cc:d7:1d:
                    70:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4D:08:A0:8F:DE:4D:4A:36:AF:FB:E6:C7:BC:59:CA:EF:B6:CC:D6
            X509v3 Authority Key Identifier:
                keyid:2A:4D:F9:09:7F:97:66:4A:00:A3:18:EF:AE:22:DC:10:36:E9:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A4DF9097F97664A00A318EFAE22DC1036E91B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VRpQzU7whmKJHtaFqwwkJKr7hzYX3vEDze51rvs6iX2/1/3133382e3230342e33372e302f32342d3332203d3e203631373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:4c:f4:9c:5c:69:d6:27:10:bc:98:9a:90:74:79:6d:11:c2:
         41:7b:35:86:67:b2:84:df:ce:4c:cc:e5:51:ef:71:93:c4:e1:
         91:24:65:88:67:2c:b8:cf:d2:79:50:65:3b:09:94:80:21:84:
         4f:71:43:62:64:bd:6f:92:b3:29:d6:a8:23:fb:50:04:9a:54:
         73:e0:f0:16:f5:65:6c:d5:c4:c3:f0:1b:72:a1:12:6d:bf:8e:
         68:5f:30:34:9e:5e:86:fb:18:79:92:2d:04:0a:f8:28:ae:c4:
         9b:5e:e1:6b:2d:94:eb:67:5b:08:9e:be:a4:2e:b2:87:af:6a:
         7f:e1:be:14:5b:b8:51:e1:1e:7d:4c:bc:9b:ac:8a:85:94:c5:
         38:cd:09:23:42:55:aa:5f:8b:79:f2:80:3a:95:ea:f2:a0:8c:
         d6:c8:ab:85:ff:a4:f2:66:ad:18:83:c2:cf:c1:bd:88:47:bb:
         97:9b:38:34:45:e9:70:12:99:05:fc:29:10:43:d5:c5:84:8e:
         1a:4d:4d:d0:39:f4:0d:06:8d:21:fb:ac:1d:08:53:5e:68:f5:
         d9:76:15:f4:91:87:af:57:c5:b9:2d:07:42:7f:9d:b4:38:68:
         33:20:03:ef:ff:00:f3:84:67:ad:a0:b1:00:f5:fe:c5:73:85:
         94:c4:07:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org