Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e3231392e38362e302f32342d3234203d3e203631363636.roa
File:                     3133382e3231392e38362e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          LeG+FNOwwRq0DUoLvl86Ktkcse10MR0jG0lhGtuaG9o=
Subject key identifier:   57:66:C7:58:EA:E1:44:78:12:B7:F4:B2:CE:4D:03:A4:14:4D:54:BF
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       0E9BB9D221BF70FE5FBE86E39A8D1053BCA7AA64
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e3231392e38362e302f32342d3234203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:10 +0000
ROA not before:           Wed 03 Apr 2024 20:19:10 +0000
ROA not after:            Wed 02 Apr 2025 20:24:10 +0000
asID:                     61666
IP address blocks:        138.219.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9b:b9:d2:21:bf:70:fe:5f:be:86:e3:9a:8d:10:53:bc:a7:aa:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:10 2024 GMT
            Not After : Apr  2 20:24:10 2025 GMT
        Subject: CN=5766C758EAE1447812B7F4B2CE4D03A4144D54BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:28:d7:cc:6a:f3:19:d3:6c:b1:8e:30:83:f0:
                    84:33:5e:6d:ad:43:39:b5:7d:a9:c9:a8:76:36:8f:
                    8c:aa:ef:f4:6a:e4:32:7b:28:34:d1:36:c3:3c:08:
                    93:53:ac:fd:83:f2:05:aa:05:91:9d:4f:73:eb:a7:
                    88:ef:db:0b:8c:7a:4c:82:cc:a5:aa:cd:cc:e3:77:
                    c9:b3:67:fd:fe:ad:0f:7a:32:37:86:b1:5f:d8:5d:
                    36:2d:4b:b2:9a:a9:6d:99:7b:ed:f8:ea:e5:73:59:
                    3c:85:4b:e9:30:6b:93:f6:57:4c:28:6a:0f:4f:fd:
                    8e:33:5d:e3:5a:e9:54:03:77:3b:b3:6f:ab:55:f5:
                    11:af:dc:43:7d:a8:65:a7:1c:00:b0:54:ae:74:57:
                    ae:8a:ab:00:cf:bf:24:1e:d6:e3:42:31:11:bc:9a:
                    ef:ac:0d:4d:fb:43:c9:67:da:2a:b3:fe:38:6f:44:
                    1d:ca:1d:a7:5c:75:1b:1a:3d:77:68:71:70:59:38:
                    5e:5a:50:d0:24:b4:e8:3f:f4:79:f7:b6:65:8f:fc:
                    f9:bb:30:39:76:6b:63:ff:29:a8:86:76:da:2a:4d:
                    d5:84:8e:d9:f6:68:6c:58:9e:5d:05:b6:5a:cf:2e:
                    12:8c:f0:98:4f:08:0e:f4:36:ad:97:e9:18:62:8b:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:66:C7:58:EA:E1:44:78:12:B7:F4:B2:CE:4D:03:A4:14:4D:54:BF
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e3231392e38362e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:41:95:27:00:78:f2:0f:36:a9:56:95:59:e1:52:16:6b:80:
         67:77:fc:ce:04:18:52:61:ef:f6:f2:25:e3:18:a0:10:11:0d:
         08:d8:17:07:55:ef:39:5f:e9:d6:9a:13:41:f2:0f:e7:b4:5a:
         1f:47:d2:41:44:af:0b:f7:7c:b7:b0:54:16:be:fd:da:d1:3b:
         5f:56:82:fb:39:e0:f6:a2:2f:ec:75:fc:f0:b3:f5:38:f5:59:
         84:79:36:49:2f:b0:79:f5:e1:ca:c3:27:0c:e6:d6:d6:c7:f2:
         38:65:90:21:7c:e6:1d:60:8d:4f:d7:03:d2:d8:9f:66:ac:9f:
         ee:2c:e6:e2:81:ad:1a:f5:9c:28:c9:3b:78:87:a0:29:aa:92:
         32:e8:fe:df:9e:d7:12:1b:03:96:d5:19:07:aa:9b:79:e6:21:
         36:ad:b6:5a:b9:73:19:8b:1d:11:fc:7a:fd:d6:6c:bb:81:ee:
         33:29:88:2f:02:3b:01:0d:d6:d3:13:9d:a7:78:87:b1:2c:cf:
         f8:0d:d0:cc:43:4a:b7:02:e0:07:2e:de:b8:96:62:ca:5b:0f:
         8b:da:fa:d6:83:b3:9b:27:21:14:61:a5:a0:c4:53:5e:ed:64:
         00:a5:e1:58:98:7f:39:e0:69:dc:9c:7d:85:36:6b:12:9c:dd:
         65:3d:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org