Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/3133382e39392e35362e302f32322d3234203d3e203532383737.roa
File:                     3133382e39392e35362e302f32322d3234203d3e203532383737.roa (raw, json)
Hash identifier:          Yzth8WaJ/Si+p5dwB+WvkDTB34KymN1TWZusJ9ccrhA=
Subject key identifier:   3B:4B:19:BC:35:80:18:E1:64:5B:B5:6E:43:5D:03:4E:49:80:2F:F9
Certificate issuer:       /CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8
Certificate serial:       0A2C388EE75E2386092197497FC5B2DAB8B61BC0
Authority key identifier: CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/3133382e39392e35362e302f32322d3234203d3e203532383737.roa
Signing time:             Tue 05 Nov 2024 18:14:55 +0000
ROA not before:           Tue 05 Nov 2024 18:09:55 +0000
ROA not after:            Tue 04 Nov 2025 18:14:55 +0000
asID:                     52877
IP address blocks:        138.99.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl
                          rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2c:38:8e:e7:5e:23:86:09:21:97:49:7f:c5:b2:da:b8:b6:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE199B761AB444E82DC4918B4D38917C16AEC7B8
        Validity
            Not Before: Nov  5 18:09:55 2024 GMT
            Not After : Nov  4 18:14:55 2025 GMT
        Subject: CN=3B4B19BC358018E1645BB56E435D034E49802FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:71:84:58:88:b8:a4:c7:8f:69:45:10:38:
                    43:9a:2d:fb:2d:9e:86:58:bc:94:66:eb:17:90:47:
                    6a:4e:35:19:7e:69:b3:35:8e:9d:50:6a:5f:3b:e7:
                    de:98:f1:c6:32:5b:91:12:95:80:c2:bc:15:24:67:
                    1b:fa:3c:03:29:37:65:da:34:d0:df:a9:d2:17:da:
                    e2:c2:92:b5:d3:52:02:b2:51:dd:41:73:8b:51:03:
                    64:3b:ed:55:7e:4f:e8:b0:cd:cd:19:76:ea:e7:00:
                    26:44:98:b5:ba:77:bd:9d:cb:c4:cc:22:07:f7:dc:
                    ac:e4:3e:38:f8:6b:2d:ad:f2:2f:84:fd:83:77:a4:
                    07:58:74:96:e7:82:38:01:80:84:14:ad:25:c3:96:
                    d4:88:71:7f:a0:27:1a:21:29:71:c9:c3:d3:f3:07:
                    04:a2:e6:22:9f:79:57:b8:29:54:20:38:87:36:da:
                    6d:05:a1:31:f1:06:02:6b:c3:cc:a2:ad:8c:9b:76:
                    97:51:1f:8d:81:ca:4c:97:cb:e5:49:4a:8c:59:42:
                    e2:dc:9c:e3:e7:79:af:57:5d:5b:42:2a:52:b5:5d:
                    68:d3:a6:60:cd:28:e8:7e:4d:c2:66:9a:17:36:98:
                    37:fd:17:6e:1f:71:ad:79:41:8f:e4:8e:8d:d0:be:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4B:19:BC:35:80:18:E1:64:5B:B5:6E:43:5D:03:4E:49:80:2F:F9
            X509v3 Authority Key Identifier:
                keyid:CE:19:9B:76:1A:B4:44:E8:2D:C4:91:8B:4D:38:91:7C:16:AE:C7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/CE199B761AB444E82DC4918B4D38917C16AEC7B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE199B761AB444E82DC4918B4D38917C16AEC7B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xtaYz8Zdbg2MjwyGD9xSQgTWcgMtCvcTRJJsSrLijGd/0/3133382e39392e35362e302f32322d3234203d3e203532383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:65:d4:d7:7c:58:dd:50:24:1f:ca:44:67:7e:be:da:65:
         cd:37:3f:a2:11:df:0f:3a:1e:3f:a1:f0:4b:9f:67:24:ef:05:
         ef:23:30:fc:48:66:7b:16:7c:d4:83:38:ff:97:a3:d3:39:94:
         69:10:cf:88:2d:10:8f:c5:93:c1:47:1c:20:17:2e:6d:a7:f7:
         e5:4d:75:10:47:94:8d:ab:e5:44:41:2e:06:60:06:f2:3b:9b:
         02:9d:40:82:0a:32:e3:8e:c8:b9:06:b1:36:26:02:c9:2b:3e:
         bd:56:6a:85:d6:d9:89:b8:b2:b7:d7:53:c3:ea:0f:c7:13:06:
         fa:b7:79:63:5b:7f:7c:83:d0:52:c1:c0:15:e4:4e:15:18:41:
         42:b0:c3:04:73:5b:4e:4e:d2:b4:63:c1:dd:f7:2d:5c:bf:54:
         b7:c2:9a:3b:3d:a7:4c:9e:95:f3:c1:7b:b9:24:58:a0:5f:92:
         95:22:fb:5e:54:41:e3:ff:75:30:2b:d0:06:42:3b:82:08:d1:
         0f:7c:cd:39:fe:43:9b:a9:06:91:1a:23:bf:ae:d4:a4:24:84:
         86:77:3f:96:43:1e:c5:2c:80:07:de:e0:ee:1b:88:25:74:a0:
         97:d2:57:a8:0d:bc:1e:8c:82:34:a0:22:65:29:60:35:be:59:
         a4:8e:96:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:31 2024 by rpki-client on console-ams.rpki-client.org