Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e39342e3138302e302f32322d3232203d3e203631363636.roa
File:                     3133382e39342e3138302e302f32322d3232203d3e203631363636.roa (raw, json)
Hash identifier:          k550Pdh0uGyiAbyky4iwBJEY4pAyvu6tkX8POgeNjrQ=
Subject key identifier:   27:30:AD:C4:7F:1F:36:23:B7:B3:05:C6:CF:02:1D:A5:05:EA:0B:D0
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       7645F934CDC10F42EED1B712B04906B8A12A6F8F
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e39342e3138302e302f32322d3232203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:08 +0000
ROA not before:           Wed 03 Apr 2024 20:19:08 +0000
ROA not after:            Wed 02 Apr 2025 20:24:08 +0000
asID:                     61666
IP address blocks:        138.94.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:45:f9:34:cd:c1:0f:42:ee:d1:b7:12:b0:49:06:b8:a1:2a:6f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:08 2024 GMT
            Not After : Apr  2 20:24:08 2025 GMT
        Subject: CN=2730ADC47F1F3623B7B305C6CF021DA505EA0BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:4a:63:ca:5b:fd:55:62:2a:fa:9b:1a:98:
                    a8:eb:2e:4c:4b:b8:00:eb:27:a2:7a:0e:c8:db:a5:
                    bb:1f:67:94:b3:75:27:3e:28:b5:3c:77:ee:8b:79:
                    02:9e:c7:ce:2d:02:66:74:d2:9f:f0:bf:85:3a:8f:
                    49:92:3d:2b:7d:98:87:0b:0c:4f:da:02:72:19:ad:
                    f6:1f:50:31:f6:f9:1f:1d:9f:10:c5:05:ae:ac:6d:
                    a8:10:b0:5c:f5:41:ea:d3:d5:08:fa:1c:ab:ca:b3:
                    5d:a0:1e:ff:34:e2:76:da:bb:be:f1:39:47:14:d1:
                    28:4b:fb:35:a7:61:52:d9:47:eb:35:d6:d0:74:02:
                    b7:fa:fd:8b:b8:46:d2:6b:4b:83:18:fe:f1:c0:b2:
                    a6:ca:1c:71:e2:66:b3:16:b6:89:be:01:01:63:40:
                    f1:57:62:d3:be:24:12:8e:e4:46:7d:c8:6a:5f:c1:
                    3e:25:03:ea:d4:80:41:ba:cc:d8:9e:7c:cb:78:f6:
                    ad:1f:f1:f4:27:82:fb:b3:db:70:ec:3d:45:bb:bf:
                    53:2a:3e:a1:99:d7:f2:a2:61:31:75:4d:e1:da:c4:
                    0e:d2:94:56:c6:67:7b:71:fe:af:fe:ea:f5:62:9c:
                    b9:31:eb:37:66:85:f7:3d:af:e8:9b:4f:4d:0d:7c:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:30:AD:C4:7F:1F:36:23:B7:B3:05:C6:CF:02:1D:A5:05:EA:0B:D0
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e39342e3138302e302f32322d3232203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:83:fb:a7:9c:3b:46:79:8b:18:0e:e4:d7:3d:89:e5:69:3a:
         67:49:67:72:7a:99:75:fd:90:10:b9:6c:fc:fc:0f:7a:ee:19:
         f2:b0:5b:08:8b:08:4e:81:0c:a4:66:fa:7a:04:86:47:cf:c9:
         82:db:87:b9:46:fb:c9:b7:7a:11:42:f4:dd:95:9f:2e:86:f7:
         82:45:72:db:b6:57:8a:bd:f5:b8:f4:c6:9d:b9:ab:67:03:1a:
         3f:f1:59:e1:cc:47:4d:f6:17:7a:b1:f0:cb:95:25:df:0f:eb:
         95:ad:b0:22:b1:ca:85:e4:aa:69:c6:5a:de:93:36:5e:6c:c7:
         c4:43:8a:c3:7f:83:c5:17:36:60:60:03:57:a4:14:a3:99:93:
         a6:db:62:45:32:89:5b:e8:e6:a9:94:e9:f9:90:0c:47:40:40:
         18:55:fa:85:88:dc:27:cb:49:7f:58:f9:3b:be:d0:23:c6:82:
         b8:26:b8:56:67:33:a2:1e:d3:f1:e4:5e:e0:98:6b:5f:ce:88:
         0c:fa:14:ab:07:c7:1a:52:32:c4:9a:90:78:72:b8:70:fa:83:
         34:3d:99:ea:45:22:0e:33:09:e6:51:ba:59:c8:0b:5f:a4:46:
         c8:75:4d:21:fe:d7:1e:ff:7c:f2:8b:2d:bd:86:5f:9d:ba:28:
         b4:18:fb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org