Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32322d3234203d3e203532373731.roa
File:                     3133382e3138362e34342e302f32322d3234203d3e203532373731.roa (raw, json)
Hash identifier:          ykkNznleXJ/KK/cyOssZT/PodGqtctbB22xHa6O8qzI=
Subject key identifier:   76:4C:D8:5C:8C:70:86:4B:81:D3:A7:63:DC:88:6C:CB:98:FA:31:58
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       1F51596548C4596EB365DA3C0A509827F96FA816
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32322d3234203d3e203532373731.roa
Signing time:             Thu 04 Apr 2024 10:53:09 +0000
ROA not before:           Thu 04 Apr 2024 10:48:09 +0000
ROA not after:            Thu 03 Apr 2025 10:53:09 +0000
asID:                     52771
IP address blocks:        138.186.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:51:59:65:48:c4:59:6e:b3:65:da:3c:0a:50:98:27:f9:6f:a8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Apr  4 10:48:09 2024 GMT
            Not After : Apr  3 10:53:09 2025 GMT
        Subject: CN=764CD85C8C70864B81D3A763DC886CCB98FA3158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:ee:c8:86:4e:4b:54:37:34:ab:39:1c:af:
                    d1:12:77:bf:41:97:4a:d4:f6:43:05:ef:ba:21:ca:
                    4d:13:fc:e9:58:cf:24:07:bb:66:47:24:27:fa:eb:
                    b2:8e:96:72:7c:be:df:19:d5:f9:19:ae:6e:34:07:
                    e3:8b:de:a7:39:d5:48:01:4a:94:50:c7:3d:36:f3:
                    d4:a6:1e:66:a6:89:d0:6f:d8:2c:84:08:57:5e:f0:
                    56:c1:06:56:dd:d8:91:83:4f:d6:49:eb:b6:b3:ca:
                    f4:c3:40:7b:8b:d9:a8:e4:d4:e2:17:f7:35:d2:cc:
                    d7:fe:bb:46:24:f6:c1:83:86:db:d5:94:4f:51:90:
                    82:c4:22:24:c2:2c:35:de:02:52:66:04:63:7a:01:
                    70:07:16:69:59:99:77:b2:b7:f3:a2:54:60:bd:30:
                    45:89:a2:8a:f0:d7:6a:c7:67:56:df:88:39:34:a8:
                    96:d7:62:af:2c:09:ce:33:fd:13:d1:ad:a7:40:6c:
                    ca:d6:dd:68:de:fd:5c:ab:9a:e7:76:57:6c:da:ae:
                    74:48:c3:90:16:73:a2:52:29:8b:a1:eb:44:ea:39:
                    01:8e:4f:38:4f:c0:99:84:a3:43:04:d8:24:22:7c:
                    df:1e:3a:15:c4:d5:f3:f6:cc:22:d5:ec:2e:ea:9d:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4C:D8:5C:8C:70:86:4B:81:D3:A7:63:DC:88:6C:CB:98:FA:31:58
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3133382e3138362e34342e302f32322d3234203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:9e:d9:6c:49:33:f7:23:05:ad:a2:40:c4:55:47:4e:cc:ab:
         e0:7f:6f:48:fc:fe:8e:a3:6e:be:25:a5:b1:4b:76:c9:b8:e0:
         a4:bd:e2:2a:5d:68:f3:c8:22:94:8d:34:95:1e:59:4d:b7:24:
         c7:12:b9:23:5b:d6:f9:5b:bb:26:20:3f:84:0a:45:3d:d9:62:
         80:d1:4a:5c:fc:b3:60:1c:6e:63:61:7a:2b:90:21:c1:43:01:
         c4:24:d9:0d:1c:03:10:45:17:af:70:6a:ba:39:0a:4f:9d:28:
         44:0a:0b:eb:bb:c0:94:74:cc:c2:00:8b:7c:00:63:00:0f:e3:
         2c:25:85:a3:ca:00:bd:b3:9f:4f:64:63:dd:39:2d:25:db:3c:
         2e:c1:23:e0:c3:b4:51:cc:5a:0d:b4:00:34:96:90:96:7a:d7:
         e3:b1:84:05:2d:aa:e3:89:65:5e:c8:a7:fb:3c:14:f3:eb:ad:
         d7:ed:32:67:f6:26:0c:74:f5:77:ac:50:1b:b1:ca:0f:67:28:
         92:cc:a1:60:0c:88:3c:b6:73:c1:50:fc:c0:e9:4d:66:23:d3:
         db:c0:5d:61:6c:10:b4:63:e1:5a:d7:a7:4d:aa:9b:eb:db:9d:
         c3:b4:ba:a1:c5:e1:82:2b:06:b2:61:77:91:13:60:05:a4:73:
         db:95:a5:81
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUH1FZZUjEWW6zZdo8ClCYJ/lvqBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkyOTQ5MUQ1OUVDNzhEQkRFQzc0MjNCMDREMDYwMzRD
MUE1OTMwMzAeFw0yNDA0MDQxMDQ4MDlaFw0yNTA0MDMxMDUzMDlaMDMxMTAvBgNV
BAMTKDc2NENEODVDOEM3MDg2NEI4MUQzQTc2M0RDODg2Q0NCOThGQTMxNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNq+7Ihk5LVDc0qzkcr9ESd79B
l0rU9kMF77ohyk0T/OlYzyQHu2ZHJCf667KOlnJ8vt8Z1fkZrm40B+OL3qc51UgB
SpRQxz0289SmHmamidBv2CyECFde8FbBBlbd2JGDT9ZJ67azyvTDQHuL2ajk1OIX
9zXSzNf+u0Yk9sGDhtvVlE9RkILEIiTCLDXeAlJmBGN6AXAHFmlZmXeyt/OiVGC9
MEWJoorw12rHZ1bfiDk0qJbXYq8sCc4z/RPRradAbMrW3Wje/Vyrmud2V2zarnRI
w5AWc6JSKYuh60TqOQGOTzhPwJmEo0ME2CQifN8eOhXE1fP2zCLV7C7qnXUHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdkzYXIxwhkuB06dj3Ihsy5j6MVgwHwYDVR0j
BBgwFoAUOSlJHVnseNvex0I7BNBgNMGlkwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1GZjNFdFBKandxWVlZRHoybzZESFR3VUtYMXRGdjlTRDgxcjI3d1py
NGkvMS8zOTI5NDkxRDU5RUM3OERCREVDNzQyM0IwNEQwNjAzNEMxQTU5MzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5Mjk0OTFENTlFQzc4REJE
RUM3NDIzQjA0RDA2MDM0QzFBNTkzMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtRmYzRXRQSmp3cVlZWUR6Mm82REhUd1VLWDF0RnY5U0Q4MXIyN3dacjRpLzEv
MzEzMzM4MmUzMTM4MzYyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzczNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCirosMA0GCSqGSIb3DQEBCwUAA4IBAQBzntlsSTP3
IwWtokDEVUdOzKvgf29I/P6Oo26+JaWxS3bJuOCkveIqXWjzyCKUjTSVHllNtyTH
ErkjW9b5W7smID+ECkU92WKA0Upc/LNgHG5jYXorkCHBQwHEJNkNHAMQRRevcGq6
OQpPnShECgvru8CUdMzCAIt8AGMAD+MsJYWjygC9s59PZGPdOS0l2zwuwSPgw7RR
zFoNtAA0lpCWetfjsYQFLarjiWVeyKf7PBTz663X7TJn9iYMdPV3rFAbscoPZyiS
zKFgDIg8tnPBUPzA6U1mI9PbwF1hbBC0Y+Fa16dNqpvr253DtLqhxeGCKwayYXeR
E2AFpHPblaWB
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org