Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa
File:                     3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa (raw, json)
Hash identifier:          Lfxfp5k9Z6MxItf2qKLwnIqzFx6mWOYM1BCJgudxIkI=
Subject key identifier:   35:57:32:A9:1F:9F:1E:71:E3:5E:58:4B:B2:34:B5:21:C6:F3:76:C1
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       366CBE301CDDB2FBAECA2AE5EF2DD3715E9E9B63
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa
Signing time:             Thu 04 Apr 2024 08:02:40 +0000
ROA not before:           Thu 04 Apr 2024 07:57:40 +0000
ROA not after:            Thu 03 Apr 2025 08:02:40 +0000
asID:                     264589
IP address blocks:        138.36.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6c:be:30:1c:dd:b2:fb:ae:ca:2a:e5:ef:2d:d3:71:5e:9e:9b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Apr  4 07:57:40 2024 GMT
            Not After : Apr  3 08:02:40 2025 GMT
        Subject: CN=355732A91F9F1E71E35E584BB234B521C6F376C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:c7:f9:f3:44:e5:c4:62:ff:e5:fb:7f:ca:
                    d2:06:b4:2d:0b:41:80:a6:41:eb:0f:47:52:4e:22:
                    16:e4:3f:b1:21:9b:5e:d4:02:79:65:78:37:9e:01:
                    fb:d4:0e:57:f4:fb:66:1d:a0:8e:47:ce:12:a8:d4:
                    68:22:9e:02:26:9f:67:a4:20:60:e9:82:06:12:20:
                    d7:03:61:65:67:1f:c1:5b:77:cd:57:b4:61:7e:4b:
                    d6:37:f6:18:45:34:b5:ff:a2:82:3d:6d:ea:3a:6c:
                    e2:2d:5f:23:84:3f:b2:ad:3f:21:0f:f1:71:8d:e3:
                    33:1f:db:d5:89:fa:81:34:32:a7:16:5c:fa:a9:ee:
                    d3:55:91:b1:6d:57:94:40:6f:86:04:b9:2e:c8:6b:
                    60:d6:1a:eb:41:6f:cc:87:85:de:d9:d3:f3:68:02:
                    04:23:98:ca:a0:97:04:90:f5:c2:cf:a0:5f:b6:f3:
                    0c:76:7e:36:1e:9d:64:5a:f0:1a:04:a0:23:ca:3d:
                    e3:ee:d9:42:cf:17:7f:f4:08:8f:b9:db:04:1a:0b:
                    4a:ec:f4:5e:56:57:31:6f:f0:f6:c0:d1:18:92:b3:
                    92:6e:de:7d:64:04:a4:c1:ff:fd:9c:d9:c8:05:1c:
                    eb:e0:97:86:53:57:c1:7c:5a:51:eb:62:a3:3b:62:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:57:32:A9:1F:9F:1E:71:E3:5E:58:4B:B2:34:B5:21:C6:F3:76:C1
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3133382e33362e3234302e302f32332d3233203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:47:17:3e:f0:79:e2:95:9c:92:64:50:19:f0:ba:4d:a5:f8:
         a6:64:18:4e:66:bb:5e:e1:9d:68:c4:56:a7:24:bc:24:27:46:
         31:5d:a8:8e:94:40:74:64:54:00:96:79:a3:f7:22:da:1a:86:
         80:a9:91:52:4a:3c:36:2f:23:b5:22:45:19:a5:e7:e1:aa:27:
         7f:da:b0:27:79:4d:8b:a8:2d:0e:72:38:3f:20:d8:42:f0:c3:
         07:75:c3:f3:ef:5e:95:be:af:1e:c5:36:69:26:3c:7c:a7:8b:
         61:cd:db:6f:ea:3e:17:0a:61:6f:b9:92:2d:9f:af:eb:12:f1:
         99:48:dd:17:17:d0:28:7b:56:10:58:62:55:07:a4:a4:f6:8c:
         05:42:9f:18:c3:ae:c6:6b:93:93:5b:7a:c5:d5:d2:3f:39:57:
         48:3b:3f:83:6b:03:8a:0c:14:aa:85:cf:3b:4d:56:bd:05:f7:
         d5:3f:31:58:2b:75:c8:c6:a9:a9:79:4d:60:ce:a2:0e:f3:b1:
         7c:1f:d6:b0:9a:ec:63:0c:12:75:6e:35:b9:9d:90:df:0a:6c:
         91:31:f0:2f:fa:d3:3d:a9:52:9e:1a:d8:08:90:7e:43:6a:eb:
         65:55:65:c7:45:9b:4b:f3:37:df:cb:f6:fa:d7:15:3b:46:06:
         68:2c:ed:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org