Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e39342e3138302e302f32342d3234203d3e203631363636.roa
File:                     3133382e39342e3138302e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          O3UaUBqpJFL+vhyRa/nEfIqMQ5nG+0ev5voClA/ZDFY=
Subject key identifier:   80:C6:B5:FB:74:1C:E3:70:70:89:E6:BD:BC:21:C4:0D:BA:0D:6B:33
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       38FB4DAD7C1F0D823F669A292C4C56FB3135353E
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e39342e3138302e302f32342d3234203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:07 +0000
ROA not before:           Wed 03 Apr 2024 20:19:07 +0000
ROA not after:            Wed 02 Apr 2025 20:24:07 +0000
asID:                     61666
IP address blocks:        138.94.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fb:4d:ad:7c:1f:0d:82:3f:66:9a:29:2c:4c:56:fb:31:35:35:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:07 2024 GMT
            Not After : Apr  2 20:24:07 2025 GMT
        Subject: CN=80C6B5FB741CE3707089E6BDBC21C40DBA0D6B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:2d:91:8c:e1:34:ee:70:b5:25:cd:35:71:
                    0b:31:80:c1:d9:2e:1b:71:8e:0f:11:a9:9f:1c:95:
                    2a:c7:cd:fe:37:d8:b3:f5:5c:94:ac:43:c0:e7:30:
                    4c:c3:eb:79:75:04:83:63:0c:e2:8f:03:81:2d:f3:
                    a9:78:02:4f:28:96:fe:ff:7b:31:bd:d6:0b:67:ff:
                    3a:48:9c:16:fd:9d:51:2e:33:c5:68:a4:26:d6:11:
                    6d:3c:09:6c:b6:f3:f8:c7:96:36:e4:11:f1:26:9e:
                    93:b4:a7:07:d3:47:ed:87:ce:26:18:62:ce:5f:e8:
                    08:43:79:08:d1:69:f4:16:84:cd:08:66:72:b6:cd:
                    2a:b2:bd:51:f6:58:e4:d2:08:e6:70:09:99:ba:d3:
                    df:f7:74:54:3d:32:36:28:fd:85:d4:e1:76:39:82:
                    60:07:e8:57:24:e9:c1:ff:15:0b:3a:36:5e:82:32:
                    d7:ae:f5:70:cc:49:d0:1d:9d:ce:82:27:3d:bd:0a:
                    8c:54:ba:e0:17:df:48:01:f9:a2:6a:65:3c:56:c3:
                    40:31:a7:89:9a:86:a1:98:86:3e:c8:ee:75:ee:67:
                    1d:91:04:ff:aa:0d:62:f4:0f:a7:99:2e:ba:f6:e3:
                    9d:d9:f0:9a:0b:88:e9:f9:0b:e9:4d:43:e5:92:5a:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C6:B5:FB:74:1C:E3:70:70:89:E6:BD:BC:21:C4:0D:BA:0D:6B:33
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133382e39342e3138302e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:cf:46:d0:ff:45:7b:22:5c:f8:cb:5a:ab:51:f2:52:65:
         4a:32:a2:77:10:38:ea:f7:39:64:29:7c:a8:1d:6a:0e:34:11:
         5a:27:95:25:f1:23:82:10:06:35:fc:a8:c5:45:70:a6:be:f0:
         ed:ff:9e:90:c7:13:f5:2e:73:38:c7:92:1e:0d:92:9f:6a:e0:
         17:63:1d:93:52:1f:cf:50:12:27:1d:ac:53:24:7e:34:84:dd:
         52:eb:ed:c6:f2:69:1f:08:d7:a1:85:0f:82:45:d4:4d:f8:59:
         6e:63:14:a6:0b:00:9b:86:40:ed:17:a9:89:ad:3b:6b:3c:8d:
         ff:6f:cb:67:57:a1:22:f0:bb:e3:ac:51:87:fa:01:be:fd:99:
         0f:b2:6e:c6:ac:5c:76:ec:7f:77:09:3c:8f:47:4b:48:60:0d:
         c1:c2:a9:fd:de:81:c7:7a:29:94:23:37:ce:9e:a0:f7:b3:e2:
         b8:a0:8e:ee:fb:a8:cb:ab:e8:18:a7:97:90:d8:4d:04:3b:2f:
         10:27:6c:dd:1e:a2:69:4f:4f:da:ac:cb:2d:cb:15:c1:ea:59:
         a5:f9:5e:66:40:35:b9:cc:2a:a7:9d:bb:68:f3:e7:d5:14:00:
         6f:7f:a2:12:88:3c:43:89:85:51:f5:72:96:af:f8:1b:31:39:
         c0:b3:6f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org