Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e3231392e38372e302f32342d3234203d3e203631363636.roa
File:                     3133382e3231392e38372e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          8NQrFeNUdDgska/K8Wt91wQfsfCQNj199jN1ZlIZhgA=
Subject key identifier:   D7:BB:79:A4:8C:56:8F:4D:1E:FD:EB:E6:CE:14:A1:9A:8E:90:A4:96
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       7514D68B3244A34CD247511BA398569FEC40B3F9
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e3231392e38372e302f32342d3234203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:07 +0000
ROA not before:           Wed 03 Apr 2024 20:19:07 +0000
ROA not after:            Wed 02 Apr 2025 20:24:07 +0000
asID:                     61666
IP address blocks:        138.219.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:14:d6:8b:32:44:a3:4c:d2:47:51:1b:a3:98:56:9f:ec:40:b3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:07 2024 GMT
            Not After : Apr  2 20:24:07 2025 GMT
        Subject: CN=D7BB79A48C568F4D1EFDEBE6CE14A19A8E90A496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:4b:a7:62:7e:04:34:19:6b:19:c2:6b:4a:
                    2e:bf:04:67:40:81:51:a2:95:76:69:df:4d:1a:7c:
                    7a:73:1a:e6:54:17:1f:a4:c5:1c:9a:ff:c8:aa:a0:
                    5b:ee:cd:5f:42:06:6c:47:29:79:91:68:df:92:29:
                    e6:ff:da:3b:5e:c5:a4:1e:52:68:95:1a:80:15:ec:
                    35:1b:c8:fc:ab:f0:48:cd:f3:24:fe:99:2d:bd:80:
                    e8:62:0b:97:45:c1:0e:c3:a8:dd:15:07:59:96:ce:
                    52:a1:3e:2f:7e:a4:b4:4c:6c:3f:a2:6e:d5:8d:57:
                    04:3e:15:0f:ef:0c:8e:f5:e6:95:6a:0d:be:17:ab:
                    8c:8f:aa:3f:34:6d:6e:01:20:60:14:c5:5b:6b:92:
                    ae:65:d4:3f:df:b1:88:0f:dc:c1:6c:4e:38:c7:eb:
                    a7:03:cf:8c:f1:a4:7c:92:ca:c0:e0:6d:45:9a:e3:
                    9f:3e:02:54:10:83:51:42:13:92:9c:b2:bf:e0:47:
                    12:12:b9:2c:11:4e:39:28:e5:be:07:2c:26:5c:1a:
                    55:66:ab:6f:5d:74:77:af:63:bb:ee:eb:b1:05:88:
                    24:39:f0:09:82:e5:d0:5e:05:48:d1:2a:42:18:ec:
                    9a:87:3b:c4:cf:71:00:62:eb:d1:b8:26:ef:5a:2c:
                    81:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BB:79:A4:8C:56:8F:4D:1E:FD:EB:E6:CE:14:A1:9A:8E:90:A4:96
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e3231392e38372e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:0d:6f:3b:fd:d7:b0:0b:df:bb:0f:fd:e7:57:72:4a:e9:a0:
         5c:ac:c4:40:e6:10:3c:76:74:e6:20:3e:73:29:00:d5:4e:ab:
         20:b5:d8:41:52:aa:5c:5d:9a:7d:60:bb:e8:dc:23:d1:5a:95:
         96:6b:4e:f9:96:35:b0:f1:fa:29:c8:4a:cb:b8:c7:e5:d9:70:
         5f:33:61:ef:30:fb:50:70:ab:ea:4d:c3:2b:d4:ca:ef:7b:1e:
         79:74:bd:a7:cd:99:af:ef:79:05:85:8d:1b:05:ac:91:e2:fb:
         5b:80:93:dd:5c:b9:03:f4:24:47:1c:4d:ba:35:97:39:67:34:
         31:2c:3e:45:a2:69:32:cf:b3:f4:5d:fc:1d:05:7c:42:49:6f:
         eb:d5:68:20:81:46:4d:e0:fd:26:31:bf:97:e1:12:6b:71:e8:
         01:4a:1b:d6:7d:35:0a:f1:22:70:dc:bf:17:a5:9f:85:b2:a4:
         c6:87:09:ab:00:57:72:8a:2e:b0:ff:f4:e7:e7:ef:e0:62:a4:
         f9:ae:a6:98:67:70:45:cb:c0:8d:21:d0:32:1f:01:87:16:c8:
         8a:92:4d:ff:b2:e0:05:0c:98:c3:cf:4d:d1:06:36:a1:e5:18:
         2c:41:97:86:bb:8f:82:6c:89:e2:fb:d0:7f:5b:95:fd:6b:f1:
         12:27:34:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:29 2024 by rpki-client on console-ams.rpki-client.org