Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
File:                     3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa (raw, json)
Hash identifier:          ah9r9bJPVH1BRKt0LKOkFb4+TYXueKLYkM/kBJjC0Eg=
Subject key identifier:   23:96:53:10:84:06:87:B8:B6:ED:8D:89:81:4D:E4:0E:C2:23:3F:D5
Certificate issuer:       /CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
Certificate serial:       3507B2C1E1BE92EACB60C93C3EC4F74DB13EBCFC
Authority key identifier: A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa
Signing time:             Sun 28 Jul 2024 21:04:44 +0000
ROA not before:           Sun 28 Jul 2024 20:59:44 +0000
ROA not after:            Sun 27 Jul 2025 21:04:44 +0000
asID:                     263424
IP address blocks:        138.121.216.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:07:b2:c1:e1:be:92:ea:cb:60:c9:3c:3e:c4:f7:4d:b1:3e:bc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
        Validity
            Not Before: Jul 28 20:59:44 2024 GMT
            Not After : Jul 27 21:04:44 2025 GMT
        Subject: CN=23965310840687B8B6ED8D89814DE40EC2233FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:34:6b:ee:72:7d:a8:1a:44:56:56:09:22:
                    08:b5:f6:01:6d:62:1c:42:86:b8:01:82:d8:64:ca:
                    84:32:94:5f:c6:62:cc:89:3c:d5:79:7a:7f:85:e2:
                    44:1f:8b:d6:53:2a:27:f1:db:ae:b2:6f:de:0c:bd:
                    08:92:5b:08:74:50:5d:30:8b:a0:7e:cb:2c:51:f9:
                    ca:59:6c:26:34:d5:4f:cd:c1:ee:cb:0d:a3:b0:24:
                    b3:5c:30:dc:47:89:f3:91:bf:ed:25:ad:66:5f:75:
                    2e:43:cc:ad:d2:71:54:89:09:d6:56:0e:ff:bc:4b:
                    da:a9:d6:e0:ba:91:ba:43:45:b3:7c:e2:cd:08:3b:
                    3f:28:58:90:1c:28:2b:bc:ca:e9:1a:23:b0:07:9a:
                    ac:e9:31:82:97:45:c2:d4:74:2d:a7:ee:c5:a4:36:
                    66:b2:89:78:d6:c4:f5:9a:53:83:c4:ce:ce:e8:67:
                    73:15:7b:55:11:75:f9:a4:51:c3:dd:31:0f:94:10:
                    1d:92:14:ef:d1:70:8c:35:94:a6:41:87:47:5d:38:
                    28:ca:99:fb:1b:ef:46:d9:c8:50:41:01:49:2b:30:
                    ee:cf:84:d3:7d:a1:6f:e4:8e:0d:57:86:ea:23:de:
                    f9:e5:35:fe:d6:cc:68:f5:18:1a:f5:af:53:c5:fb:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:96:53:10:84:06:87:B8:B6:ED:8D:89:81:4D:E4:0E:C2:23:3F:D5
            X509v3 Authority Key Identifier:
                keyid:A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/3133382e3132312e3231362e302f32322d3332203d3e20323633343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:a6:c9:ed:4b:a6:99:98:eb:eb:16:6d:8f:fe:a6:db:85:
         87:3d:21:cf:c9:5e:18:3e:e7:c6:ae:e4:1d:b3:b3:74:f0:08:
         a8:fc:af:d5:c5:ac:d3:c2:8f:ce:b7:cc:e6:42:a6:dd:45:69:
         cc:f4:cd:6d:ad:0d:08:da:25:e3:fa:24:ec:14:77:5e:36:91:
         2d:4d:2c:3a:04:f5:48:4b:8b:76:b8:bc:63:14:89:05:4d:5d:
         85:d3:58:7b:cb:95:31:c6:ce:39:b8:22:dc:71:71:e9:71:c4:
         16:5d:04:29:9a:c3:5a:55:68:72:c5:09:2a:b0:90:9b:28:12:
         be:ba:7b:8c:6d:ec:26:4e:f2:73:72:1c:eb:42:20:b0:2b:fb:
         e2:86:55:27:7d:99:3b:30:32:6f:0b:b4:0e:5a:ea:15:5f:57:
         30:ae:b5:57:29:e1:6f:df:ea:02:ea:1a:d2:68:ee:70:53:c0:
         fc:e5:fb:75:38:fe:4f:e1:0c:9a:46:46:fd:7a:b8:70:d8:78:
         c0:69:50:e3:fe:88:85:c5:75:3d:11:36:a5:f5:eb:88:80:6f:
         9c:33:3f:48:80:d8:e0:11:84:a1:c6:af:4b:ab:02:ec:19:a4:
         d9:6d:8d:16:4a:88:91:f2:9d:47:af:25:de:3c:32:15:89:93:
         41:de:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org