Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/3133382e39392e32342e302f32322d3234203d3e203631383639.roa
File:                     3133382e39392e32342e302f32322d3234203d3e203631383639.roa (raw, json)
Hash identifier:          3LTgxeQ6ExP2T46RYPubhe6fpDJHzPel42nA1zVqoeM=
Subject key identifier:   0E:26:ED:6D:21:44:5B:34:40:8E:BE:CF:49:E2:25:0E:58:8E:EC:11
Certificate issuer:       /CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
Certificate serial:       425C0A85A8AD1DB1D45D79871E6B34F7DC67058A
Authority key identifier: E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/3133382e39392e32342e302f32322d3234203d3e203631383639.roa
Signing time:             Thu 04 Apr 2024 18:43:29 +0000
ROA not before:           Thu 04 Apr 2024 18:38:29 +0000
ROA not after:            Thu 03 Apr 2025 18:43:29 +0000
asID:                     61869
IP address blocks:        138.99.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl
                          rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5c:0a:85:a8:ad:1d:b1:d4:5d:79:87:1e:6b:34:f7:dc:67:05:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D63E8C642CED33A55042FA42DB4DBC8D574437
        Validity
            Not Before: Apr  4 18:38:29 2024 GMT
            Not After : Apr  3 18:43:29 2025 GMT
        Subject: CN=0E26ED6D21445B34408EBECF49E2250E588EEC11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:f0:06:eb:a5:83:e7:bd:ac:bb:b4:86:87:
                    e3:92:53:2c:c3:9f:78:25:32:d2:58:ae:d6:9a:b4:
                    0d:7f:46:ba:0e:39:6c:9a:2c:b5:1e:a2:18:b4:65:
                    a5:e9:13:d3:8a:8b:d8:95:32:c5:e8:37:89:d7:6a:
                    a7:b7:ba:28:03:1a:b4:04:2a:30:ef:ec:3a:55:ee:
                    82:81:1f:6f:5f:9f:85:61:c7:37:a1:cc:6d:0a:9b:
                    73:25:21:c5:0e:dc:f5:3d:36:e6:ec:01:f2:5e:e0:
                    e1:ec:31:a6:e1:ce:b1:1b:5e:1d:62:36:cc:82:e4:
                    65:2d:c6:d3:79:d9:f0:4f:83:ee:57:47:60:3d:7a:
                    8f:5f:4a:d3:2d:c4:55:3a:fe:71:62:36:52:ea:6f:
                    02:89:24:d8:fd:d3:ac:2e:20:f9:7d:e9:34:90:dc:
                    e8:0b:7d:19:05:46:c4:6b:4c:cc:4f:6e:b7:eb:4a:
                    f2:4a:b5:fb:23:69:0d:50:16:bc:bf:40:e4:a1:21:
                    a0:3a:f0:a5:00:40:0f:df:5a:90:08:c1:f6:4e:a3:
                    0e:79:2b:30:31:ea:92:f4:56:c9:cf:27:4f:7d:d7:
                    aa:f8:72:e1:ba:6d:e7:fe:74:dc:0c:a9:3b:c2:ae:
                    88:73:92:fa:87:03:26:84:2d:d4:5a:56:3b:a3:83:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:26:ED:6D:21:44:5B:34:40:8E:BE:CF:49:E2:25:0E:58:8E:EC:11
            X509v3 Authority Key Identifier:
                keyid:E7:D6:3E:8C:64:2C:ED:33:A5:50:42:FA:42:DB:4D:BC:8D:57:44:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D63E8C642CED33A55042FA42DB4DBC8D574437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4soZytyXuSQpLSJXeqEjPA5iFUQW4aQVKVhFJ9g2oVZn/1/3133382e39392e32342e302f32322d3234203d3e203631383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:e9:ca:68:01:92:a1:6a:07:dd:5f:a2:f0:6e:39:73:42:74:
         8d:aa:c9:64:55:69:50:97:bc:10:5f:8e:4f:f7:05:ea:f5:2c:
         de:dd:a1:89:27:d4:e6:b6:19:9f:72:c8:69:b0:e3:9f:6b:7d:
         3e:95:2a:5e:77:05:5b:c1:f9:4b:6e:a1:06:1a:1f:20:d9:03:
         82:c4:23:3e:85:4b:90:0f:6a:0a:34:d1:99:54:82:a8:4c:1e:
         06:56:cb:d1:9b:e5:2c:fe:49:8a:53:9c:dc:96:b6:71:41:2c:
         7f:98:52:e8:2d:59:08:44:5f:15:84:8b:6e:61:f2:49:4f:d3:
         db:49:58:fa:6b:71:9b:c5:fc:e6:d1:61:3b:f7:8e:3c:14:15:
         46:c6:49:2e:05:44:bb:64:f5:73:68:e5:a6:16:56:a6:65:2f:
         1d:b1:a3:41:25:e9:71:04:22:58:9a:c4:85:90:6e:84:47:88:
         0d:2c:49:a8:69:75:6e:56:07:a7:44:34:f2:c4:f5:16:7c:30:
         f9:56:c9:4f:af:b6:da:6a:50:1c:69:77:6d:4a:21:79:c1:eb:
         be:c3:88:13:92:ed:94:6d:44:d0:7e:26:40:32:65:4c:a6:bf:
         ae:21:f5:f1:4d:bc:06:db:ca:21:69:f5:5e:91:d1:22:bd:46:
         a0:51:07:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:02:05 2024 by rpki-client on console-fra.rpki-client.org