Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa
File:                     3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa (raw, json)
Hash identifier:          7OSNgi4orHcA9rN5zCCIkYYbfmIm9ql6lQaUY/DyncM=
Subject key identifier:   C1:A7:7E:8E:F9:31:07:51:B1:7F:51:2F:8C:40:33:27:2C:73:29:84
Certificate issuer:       /CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
Certificate serial:       09DFF174D3E8F7420DFB22A086A7CCC4DE517464
Authority key identifier: 7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa
Signing time:             Mon 19 Aug 2024 07:16:05 +0000
ROA not before:           Mon 19 Aug 2024 07:11:05 +0000
ROA not after:            Mon 18 Aug 2025 07:16:05 +0000
asID:                     262523
IP address blocks:        138.204.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl
                          rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:df:f1:74:d3:e8:f7:42:0d:fb:22:a0:86:a7:cc:c4:de:51:74:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
        Validity
            Not Before: Aug 19 07:11:05 2024 GMT
            Not After : Aug 18 07:16:05 2025 GMT
        Subject: CN=C1A77E8EF9310751B17F512F8C4033272C732984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:cb:ee:15:9f:d1:f5:dd:d1:ff:7e:eb:68:
                    1e:c6:c7:0b:27:17:0a:30:75:f2:50:7c:5a:41:16:
                    e2:3a:5d:90:30:c0:7e:02:ef:de:34:b5:8b:cf:fe:
                    64:c8:3b:46:32:d2:23:22:14:e5:3b:68:f0:6d:d0:
                    b3:c0:5a:86:6d:05:1c:86:09:8c:e1:ba:b3:d0:0d:
                    70:c4:a6:09:b6:23:85:16:fe:86:87:ba:58:d0:d0:
                    48:18:93:0c:3a:45:76:26:3a:af:5b:4f:d7:c0:7f:
                    fe:11:4e:ff:f9:a5:95:aa:66:7f:cb:46:4a:75:bc:
                    76:69:58:f5:09:a8:ce:4e:be:38:63:75:a9:78:e0:
                    0d:41:e1:64:c2:dd:c7:73:d5:e8:6d:6a:27:91:01:
                    be:78:c9:ec:bf:a2:d4:eb:fe:7c:82:62:f2:08:d9:
                    ac:ee:2b:70:04:11:6e:0b:a3:13:f1:6e:36:29:6e:
                    f4:9b:eb:ae:e8:ac:22:fe:b4:0d:29:f5:bf:4e:56:
                    b5:d3:8f:f6:af:0e:3a:a6:70:2f:cf:e3:34:be:d1:
                    7c:68:fe:81:3c:a2:c2:29:ba:fd:be:68:78:76:b9:
                    ff:fc:a0:66:8f:69:e7:ff:2f:ef:d4:87:ea:64:91:
                    cb:58:70:8e:70:34:bb:d0:b8:e5:c2:c8:ed:e0:4b:
                    20:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A7:7E:8E:F9:31:07:51:B1:7F:51:2F:8C:40:33:27:2C:73:29:84
            X509v3 Authority Key Identifier:
                keyid:7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3133382e3230342e3130342e302f32322d3234203d3e20323632353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:61:e4:30:75:aa:fc:7a:aa:84:ea:17:9f:b1:68:95:ec:ce:
         c3:de:92:ad:2e:3a:03:f7:c8:e9:9d:33:99:a8:15:8c:6b:cb:
         ee:9b:6e:61:5a:75:d1:dd:a5:f2:90:5e:07:81:09:f6:36:b7:
         32:4c:4e:83:98:9d:28:39:f9:ed:94:e0:9a:85:65:11:a4:51:
         d9:ce:32:77:c9:ab:42:35:2c:d0:40:33:d9:1c:be:df:93:bc:
         3c:73:36:8a:52:99:a8:65:a8:ed:f1:a8:3c:96:04:4b:a3:8f:
         4c:2d:83:c0:cb:db:7d:5f:c3:77:1e:1a:2a:b0:b0:0f:e8:fc:
         8d:48:11:a6:f7:12:cd:16:fd:48:ca:eb:fc:38:a2:29:8f:72:
         fb:40:70:42:09:47:ab:99:05:ae:98:34:5f:f8:aa:8e:05:6a:
         85:5a:7a:00:47:32:b9:7f:6b:2c:ef:14:93:a4:cf:0a:9f:b2:
         cc:49:ff:50:08:9c:ca:24:ca:67:ba:2a:f9:01:72:76:56:8d:
         68:c5:87:c4:20:b3:fb:eb:75:94:97:92:b1:b1:d0:f7:15:08:
         79:f3:c1:25:95:eb:55:b8:6b:df:7d:80:c9:bd:a8:1d:84:2c:
         2c:73:17:2f:3e:20:80:bb:39:84:a1:8c:24:d3:a4:52:0a:fd:
         94:2c:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:02 2024 by rpki-client on console-fra.rpki-client.org