Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e39342e3138302e302f32332d3233203d3e203631363636.roa
File:                     3133382e39342e3138302e302f32332d3233203d3e203631363636.roa (raw, json)
Hash identifier:          Pkb2IJRScDTK+Vdx6LacVYxksTojqC/rHymTCi6czg4=
Subject key identifier:   1A:C9:C5:4D:EE:78:BA:4B:37:BF:63:CF:01:67:F4:5B:26:E6:EA:B6
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       59D7F7C1A45D7A1D8C1B8CA4E10D35C7D0FA402D
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e39342e3138302e302f32332d3233203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:07 +0000
ROA not before:           Wed 03 Apr 2024 20:19:07 +0000
ROA not after:            Wed 02 Apr 2025 20:24:07 +0000
asID:                     61666
IP address blocks:        138.94.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d7:f7:c1:a4:5d:7a:1d:8c:1b:8c:a4:e1:0d:35:c7:d0:fa:40:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:07 2024 GMT
            Not After : Apr  2 20:24:07 2025 GMT
        Subject: CN=1AC9C54DEE78BA4B37BF63CF0167F45B26E6EAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:0b:c3:18:01:fe:e0:1b:a6:ad:9d:08:56:
                    0f:5f:97:13:ba:cc:d4:38:64:cb:99:3c:81:c7:a2:
                    4e:e4:ad:a3:20:91:62:27:2d:1a:88:ea:c8:3f:e7:
                    1c:56:a6:30:0b:4e:f6:c9:f6:f7:37:7d:2a:45:a9:
                    f6:0f:69:31:e5:6b:7f:1d:40:8b:79:24:71:af:6c:
                    b0:da:2d:ee:e9:03:c1:86:e9:51:46:32:0b:95:b2:
                    85:e1:22:b0:a0:cb:10:b9:c2:69:b4:09:96:68:59:
                    a7:93:76:ff:9f:b5:3f:0a:a3:bd:98:73:cd:27:ff:
                    d7:db:66:28:72:fd:a6:97:7e:71:60:05:e2:98:49:
                    27:37:76:d4:26:d0:0d:b1:17:9a:68:6e:5a:fd:e4:
                    db:3a:70:4f:28:ea:b2:81:9b:3b:aa:05:32:99:f0:
                    85:d2:1e:a5:f6:48:2c:4c:09:7c:31:e0:c1:2a:16:
                    25:25:81:0b:96:34:d8:f4:be:65:d7:6d:09:3d:e9:
                    a4:a3:8d:4d:23:2f:a1:c5:24:91:70:6a:18:bc:5c:
                    6e:c5:d7:71:5b:a9:3f:ad:cb:44:fa:76:dd:9b:f0:
                    0a:85:c5:6e:92:e9:65:fb:f1:c0:51:00:9f:d6:df:
                    61:68:6a:3d:67:ea:91:a7:44:43:0a:7f:17:bc:d1:
                    04:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C9:C5:4D:EE:78:BA:4B:37:BF:63:CF:01:67:F4:5B:26:E6:EA:B6
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e39342e3138302e302f32332d3233203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:98:44:ea:dd:85:c6:86:7f:74:ea:28:7a:09:94:6d:82:73:
         8e:d6:ca:48:70:2b:11:98:56:97:54:58:83:1b:0d:23:75:5b:
         0f:0c:27:6a:21:fe:17:f6:f8:ae:7f:77:1b:43:ae:b4:6b:ce:
         e4:22:fc:f5:71:82:84:08:8f:5a:14:00:2e:7b:58:d2:f2:ee:
         4a:fa:1f:76:0f:d0:22:76:ef:3a:bb:d8:79:2a:f8:82:b6:2f:
         fe:a6:9f:de:44:5b:36:ec:1d:fb:50:ff:2f:17:e6:de:75:fb:
         cf:2b:e0:9d:ce:ed:75:6c:7e:34:a4:6f:a9:b8:b4:89:d8:f7:
         34:a7:80:14:88:4c:f6:b2:fd:16:e1:8f:b3:ef:f4:64:85:4a:
         17:9d:68:57:8c:b4:65:2b:ca:53:90:4e:d2:5b:97:0a:d8:8a:
         f8:85:27:b0:db:ee:be:6f:67:aa:6e:fb:bb:23:41:89:88:90:
         0b:15:6c:25:9a:d5:6c:79:07:f6:16:89:f8:71:6c:4c:a6:e1:
         a7:2e:80:58:ed:a0:b3:3b:91:c1:af:e3:ac:21:84:c1:db:4c:
         13:ea:1f:ac:19:dd:7b:7c:18:9e:c7:92:19:4f:3d:1a:3c:1b:
         51:f1:0c:51:b7:21:1e:cc:42:08:6e:77:99:65:c7:1d:53:b7:
         f8:e6:bd:d2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWdf3waRdeh2MG4yk4Q01x9D6QC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENFNTk1NTFBQjRGQjRBNjdCNkNBRjVBQzQ3NTVGODlE
NDVBRkIyRDAeFw0yNDA0MDMyMDE5MDdaFw0yNTA0MDIyMDI0MDdaMDMxMTAvBgNV
BAMTKDFBQzlDNTRERUU3OEJBNEIzN0JGNjNDRjAxNjdGNDVCMjZFNkVBQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/QvDGAH+4BumrZ0IVg9flxO6
zNQ4ZMuZPIHHok7kraMgkWInLRqI6sg/5xxWpjALTvbJ9vc3fSpFqfYPaTHla38d
QIt5JHGvbLDaLe7pA8GG6VFGMguVsoXhIrCgyxC5wmm0CZZoWaeTdv+ftT8Ko72Y
c80n/9fbZihy/aaXfnFgBeKYSSc3dtQm0A2xF5poblr95Ns6cE8o6rKBmzuqBTKZ
8IXSHqX2SCxMCXwx4MEqFiUlgQuWNNj0vmXXbQk96aSjjU0jL6HFJJFwahi8XG7F
13FbqT+ty0T6dt2b8AqFxW6S6WX78cBRAJ/W32Foaj1n6pGnREMKfxe80QQ/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGsnFTe54uks3v2PPAWf0Wybm6rYwHwYDVR0j
BBgwFoAU3OWVUatPtKZ7bK9axHVfidRa+y0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVByamp6b0FVbmV5NENpdlk1eGYzZmY4b1k3WGV1Sms1VWFMYnNiOVRp
R20vMS9EQ0U1OTU1MUFCNEZCNEE2N0I2Q0FGNUFDNDc1NUY4OUQ0NUFGQjJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRTU5NTUxQUI0RkI0QTY3
QjZDQUY1QUM0NzU1Rjg5RDQ1QUZCMkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVQcmpqem9BVW5leTRDaXZZNXhmM2ZmOG9ZN1hldUprNVVhTGJzYjlUaUdtLzEv
MzEzMzM4MmUzOTM0MmUzMTM4MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzYzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBil60MA0GCSqGSIb3DQEBCwUAA4IBAQABmETq3YXG
hn906ih6CZRtgnOO1spIcCsRmFaXVFiDGw0jdVsPDCdqIf4X9viuf3cbQ660a87k
Ivz1cYKECI9aFAAue1jS8u5K+h92D9Aidu86u9h5KviCti/+pp/eRFs27B37UP8v
F+bedfvPK+Cdzu11bH40pG+puLSJ2Pc0p4AUiEz2sv0W4Y+z7/RkhUoXnWhXjLRl
K8pTkE7SW5cK2Ir4hSew2+6+b2eqbvu7I0GJiJALFWwlmtVseQf2Fon4cWxMpuGn
LoBY7aCzO5HBr+OsIYTB20wT6h+sGd17fBiex5IZTz0aPBtR8QxRtyEezEIIbneZ
ZccdU7f45r3S
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org