Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32322d3234203d3e20323634353636.roa
File:                     3133382e302e3134342e302f32322d3234203d3e20323634353636.roa (raw, json)
Hash identifier:          LzvP5ZD3ZvBlchrcNNIR6g7MOT4rlonf7bc/BzltCTE=
Subject key identifier:   8B:F1:3E:71:7A:F0:3B:15:30:05:FA:ED:C0:C9:DC:26:03:61:A6:1E
Certificate issuer:       /CN=E1DD14E8495BF2D38A907AB140A4657BB4715587
Certificate serial:       4349527985745588CF39E1DF1EAFD81D2DCCECE9
Authority key identifier: E1:DD:14:E8:49:5B:F2:D3:8A:90:7A:B1:40:A4:65:7B:B4:71:55:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1DD14E8495BF2D38A907AB140A4657BB4715587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32322d3234203d3e20323634353636.roa
Signing time:             Wed 23 Oct 2024 17:56:16 +0000
ROA not before:           Wed 23 Oct 2024 17:51:16 +0000
ROA not after:            Wed 22 Oct 2025 17:56:16 +0000
asID:                     264566
IP address blocks:        138.0.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E1DD14E8495BF2D38A907AB140A4657BB4715587.crl
                          rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E1DD14E8495BF2D38A907AB140A4657BB4715587.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1DD14E8495BF2D38A907AB140A4657BB4715587.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:52:79:85:74:55:88:cf:39:e1:df:1e:af:d8:1d:2d:cc:ec:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DD14E8495BF2D38A907AB140A4657BB4715587
        Validity
            Not Before: Oct 23 17:51:16 2024 GMT
            Not After : Oct 22 17:56:16 2025 GMT
        Subject: CN=8BF13E717AF03B153005FAEDC0C9DC260361A61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:7a:f2:03:97:0c:63:08:e3:84:f7:be:c6:
                    89:1b:09:0b:11:2b:dc:9f:b9:d7:52:2b:1f:19:f7:
                    37:2b:59:1f:e5:01:da:07:9e:1a:6c:39:37:72:e7:
                    11:a0:7a:35:8a:ee:3f:b6:0f:60:50:88:18:78:2e:
                    1a:85:92:71:f4:cb:33:f3:c4:7f:ea:f5:e9:04:7a:
                    6c:e9:f1:89:bb:9d:d6:66:9f:35:12:58:e1:dd:8a:
                    b3:f6:a8:28:68:c1:d8:42:34:df:b0:ab:d2:71:bf:
                    b6:3f:c7:29:37:29:91:43:18:f7:63:14:35:3e:ce:
                    d9:1e:d0:a1:48:a4:1d:19:51:9e:7b:7b:b6:88:74:
                    15:4c:c0:7b:58:40:37:5c:af:c6:a7:cd:56:cc:b3:
                    98:a9:7a:cf:3a:7b:d1:eb:71:de:36:f6:29:85:1b:
                    52:54:44:51:4b:c2:1e:d8:e9:1d:14:ef:e8:41:10:
                    ad:44:48:0b:9e:db:f2:fa:7e:98:63:93:c2:04:94:
                    f6:63:2d:f2:e7:33:d2:be:1e:27:92:c4:9a:90:06:
                    b3:3e:73:b9:8d:c3:b1:a8:c1:2c:ef:0c:3b:a8:41:
                    5f:53:bf:1e:d6:37:3e:72:a4:cd:a3:6f:25:c5:8f:
                    d5:48:fd:ba:b2:7d:2b:7d:12:95:f1:51:26:7e:92:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F1:3E:71:7A:F0:3B:15:30:05:FA:ED:C0:C9:DC:26:03:61:A6:1E
            X509v3 Authority Key Identifier:
                keyid:E1:DD:14:E8:49:5B:F2:D3:8A:90:7A:B1:40:A4:65:7B:B4:71:55:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E1DD14E8495BF2D38A907AB140A4657BB4715587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1DD14E8495BF2D38A907AB140A4657BB4715587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32322d3234203d3e20323634353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:f3:f9:5f:1d:9e:9f:c3:76:75:53:e4:22:4b:c4:3d:1f:74:
         ab:f2:7b:51:ba:5d:32:91:67:30:03:6c:40:a8:0c:81:00:03:
         b7:b6:54:60:56:cb:10:1b:bd:48:e6:fd:c2:a9:67:23:33:13:
         b2:77:72:df:c7:fc:96:46:90:6d:af:08:f2:a9:7c:74:0b:6b:
         f7:06:e2:c2:78:83:76:ed:06:c4:b2:21:9e:f2:df:00:ef:bc:
         15:d2:4b:c5:d6:08:39:68:f6:51:04:56:19:d0:0c:18:47:6c:
         28:66:95:21:12:fd:60:25:a2:81:91:1d:4f:3f:85:83:16:b3:
         56:0e:25:30:82:52:08:23:18:a4:46:e9:b6:09:99:db:5b:cd:
         3e:01:37:9c:e0:53:eb:b3:91:1f:97:28:65:cf:43:73:b4:d0:
         a0:28:f6:21:ad:bd:0e:aa:0f:c5:61:0d:d7:5c:1d:e0:d2:9f:
         25:bb:3f:a1:69:90:bc:a1:fc:4b:87:2f:c8:39:8a:bf:58:4e:
         ef:83:bc:e9:5f:ec:41:a9:8e:c9:d7:1a:9f:64:44:61:97:24:
         19:86:e8:92:42:ee:e4:16:6d:b5:d6:f9:17:6c:0d:e1:6c:e2:
         65:4d:20:b9:12:63:78:ba:d4:3e:aa:c2:d1:46:a7:f9:cb:24:
         e9:88:9e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:49 2024 by rpki-client on console-ams.rpki-client.org