Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32322d3234203d3e203631393030.roa
File:                     3133382e39372e33322e302f32322d3234203d3e203631393030.roa (raw, json)
Hash identifier:          NNvncUmCZgzxFqpZoW1kmBA7t2nycV63ck9xGC2MH1A=
Subject key identifier:   39:2B:51:92:F9:A8:15:27:A0:77:AC:A9:64:56:32:8F:59:36:1B:F1
Certificate issuer:       /CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Certificate serial:       6F05FFABCB87B4C42CE8D8F4C855FB1649E73EAF
Authority key identifier: 00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32322d3234203d3e203631393030.roa
Signing time:             Mon 07 Oct 2024 19:21:59 +0000
ROA not before:           Mon 07 Oct 2024 19:16:59 +0000
ROA not after:            Mon 06 Oct 2025 19:21:59 +0000
asID:                     61900
IP address blocks:        138.97.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:05:ff:ab:cb:87:b4:c4:2c:e8:d8:f4:c8:55:fb:16:49:e7:3e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
        Validity
            Not Before: Oct  7 19:16:59 2024 GMT
            Not After : Oct  6 19:21:59 2025 GMT
        Subject: CN=392B5192F9A81527A077ACA96456328F59361BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:f2:24:0d:fc:f6:1e:3e:e3:58:04:4d:e8:
                    00:5d:2a:10:14:44:4c:96:ed:33:96:4a:b2:6f:2e:
                    81:16:2d:63:a2:ca:e5:5d:76:1e:8f:cb:5d:4c:8a:
                    7e:3c:f7:a1:2f:27:c9:fc:4b:c9:08:10:e8:05:3e:
                    b1:12:0a:10:8d:a2:55:b6:4a:30:16:65:be:bb:ff:
                    8c:fb:9f:99:b2:06:eb:06:b2:fa:70:ac:11:11:e2:
                    39:81:0d:37:b9:a8:83:bc:53:26:e4:76:45:f3:04:
                    fd:09:e8:b8:ff:61:a4:b6:71:b5:10:f4:7c:ff:4b:
                    0a:74:0c:60:52:0e:93:96:ce:8c:01:49:fb:ac:ec:
                    c3:52:2e:1e:57:d9:06:39:e1:a1:f4:6e:db:c2:5c:
                    46:bc:af:a0:3e:b0:ad:a5:82:03:eb:c8:07:9c:05:
                    e7:7f:35:e1:ac:e8:7c:ae:c3:9f:47:61:a1:14:d2:
                    d3:e6:57:66:12:84:24:d2:1f:b3:1d:fa:27:26:95:
                    10:5e:1a:68:de:63:03:e3:11:68:8a:bd:f1:89:f8:
                    32:1b:8f:27:d8:9c:2f:33:1d:d6:da:b3:93:fe:cf:
                    77:7c:d3:86:ed:5f:24:eb:6d:5a:19:4b:42:37:d1:
                    33:81:b4:e0:6d:70:85:e9:03:be:07:2b:5c:f5:90:
                    6c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2B:51:92:F9:A8:15:27:A0:77:AC:A9:64:56:32:8F:59:36:1B:F1
            X509v3 Authority Key Identifier:
                keyid:00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3133382e39372e33322e302f32322d3234203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:2b:8d:4d:9a:7a:9a:08:ad:06:08:a9:76:71:41:b7:76:
         ab:f7:a5:b0:36:ef:ff:e8:4f:0b:ba:73:5b:66:46:38:0b:19:
         36:75:86:f4:0c:bc:71:fa:3a:58:8d:d1:d4:a9:5d:71:44:7d:
         7d:24:34:c8:30:2e:51:12:45:6c:c9:ca:6e:96:f9:83:fb:ce:
         2f:22:b4:f9:88:fa:f0:19:6e:93:2e:b3:02:ca:d9:66:93:5a:
         3d:d8:8b:44:4b:c3:03:9b:46:79:d0:b2:03:78:50:d7:22:e2:
         ff:a1:10:35:08:fa:75:27:f8:43:a0:36:85:21:78:8f:77:09:
         3c:37:a7:c8:e1:d9:76:7d:88:bc:fa:17:64:7b:4d:d1:2d:25:
         84:8f:ea:3d:e6:55:08:19:31:5a:32:86:8a:d8:76:fa:5d:71:
         4d:e7:8d:c0:b8:7a:84:b6:1f:a7:2c:e8:ab:4f:73:b8:a6:9d:
         6b:a1:3b:d5:cf:de:1b:ce:7b:19:53:7d:3c:95:06:db:5a:31:
         cd:b5:59:0b:f1:fa:0d:3c:b6:fb:ed:c6:10:c5:a2:d7:b4:a3:
         c2:29:85:8e:6f:7c:fb:ea:da:ce:2c:f6:2d:2c:09:7f:54:5d:
         3d:60:e4:52:e6:04:17:22:86:07:d4:2d:cc:b5:3e:bc:8e:09:
         f1:98:c0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:02 2024 by rpki-client on console-ams.rpki-client.org