Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa
File:                     3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa (raw, json)
Hash identifier:          HzuIWR1exMvAD50uoakB8kXvJ8P6ZYrZrw6m+GKyIHU=
Subject key identifier:   75:7E:5F:C4:26:65:8D:32:C1:FD:06:B4:5F:71:61:B8:C3:9C:53:F2
Certificate issuer:       /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial:       41F6DAE17FD29B8447A75E87A8D0E7AB5740FEDA
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa
Signing time:             Mon 16 Sep 2024 19:21:59 +0000
ROA not before:           Mon 16 Sep 2024 19:16:59 +0000
ROA not after:            Mon 15 Sep 2025 19:21:59 +0000
asID:                     53218
IP address blocks:        138.186.204.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
                          rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 13:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f6:da:e1:7f:d2:9b:84:47:a7:5e:87:a8:d0:e7:ab:57:40:fe:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
        Validity
            Not Before: Sep 16 19:16:59 2024 GMT
            Not After : Sep 15 19:21:59 2025 GMT
        Subject: CN=757E5FC426658D32C1FD06B45F7161B8C39C53F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:da:7c:8a:7e:45:7e:f0:be:42:8f:b2:44:2e:
                    c6:b3:9c:95:a8:2e:aa:61:0d:41:16:de:91:71:c4:
                    5d:81:80:bf:46:f0:44:d8:7c:64:84:48:fd:c0:53:
                    12:7e:03:9a:39:50:85:cf:76:a9:82:e6:d6:96:8e:
                    cc:ae:eb:3d:98:5c:3c:b6:f3:06:b6:27:1e:32:7a:
                    61:04:14:c9:52:0b:30:c1:9f:9c:ff:49:0e:24:69:
                    50:e2:bb:0e:af:2f:da:49:1e:93:49:cb:90:0b:aa:
                    87:76:b8:36:ef:9c:79:74:89:69:8c:36:66:b0:01:
                    86:dd:4b:e9:14:45:6e:9f:4e:64:41:a2:b3:d1:3e:
                    bb:78:70:df:5e:03:02:a1:6a:b9:13:06:b7:42:6e:
                    42:87:00:c1:da:ae:43:a7:d1:23:5e:ca:2b:57:4e:
                    8c:2a:e4:9e:d6:49:37:fa:ae:ec:bf:99:74:49:36:
                    e7:90:24:04:08:34:14:6e:ca:aa:c7:6b:3c:8c:80:
                    0f:b7:20:e9:85:76:62:49:15:f5:e9:b2:86:92:2e:
                    89:cc:62:d8:ab:7a:00:0f:36:23:9d:ec:00:ba:f0:
                    de:0e:8e:e9:d9:d1:5e:5f:9f:5d:17:86:72:4c:80:
                    57:08:cd:ba:de:4a:e5:23:a2:b2:ea:e5:bd:64:cd:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7E:5F:C4:26:65:8D:32:C1:FD:06:B4:5F:71:61:B8:C3:9C:53:F2
            X509v3 Authority Key Identifier:
                keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/3133382e3138362e3230342e302f32322d3332203d3e203533323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:37:e1:a5:28:2a:3e:9a:77:94:da:1c:3b:8b:16:ed:92:3f:
         0a:5f:83:c5:de:e2:2f:68:06:9e:76:1d:6e:74:e8:44:b4:be:
         58:e5:b3:48:e3:c3:5b:95:8e:1f:44:3d:6b:3e:7e:6a:7c:f4:
         4d:92:98:37:0f:0d:6a:5e:f1:fe:32:9f:a4:af:a0:4a:29:e4:
         13:f4:d3:ac:a1:18:98:c9:f0:f5:30:7c:d7:e1:9a:6c:e9:b1:
         4d:9c:15:09:3c:43:77:d3:92:25:ba:d3:db:e0:0c:3c:77:cb:
         85:1f:5b:43:ab:2b:1d:93:f3:10:2d:9f:4a:d3:fa:5a:28:ca:
         b8:aa:7a:19:a6:39:91:0b:8f:ef:5b:1b:3c:07:60:9f:b2:02:
         41:de:5d:5c:0a:8e:57:ea:06:53:c9:31:82:1a:56:04:9d:1b:
         97:90:ea:37:bc:21:51:29:02:6d:5f:87:7a:41:c0:8e:6b:9f:
         bf:57:f1:ff:e5:dc:a4:46:eb:09:f0:1f:e6:40:15:49:e8:3d:
         63:cc:9e:40:a8:0e:89:39:82:ed:b0:b8:ca:9b:ed:d7:d9:b0:
         cd:2b:69:37:1a:b8:82:1e:48:d1:7c:67:98:61:a5:58:46:11:
         9b:ee:d5:b0:af:ed:93:46:8c:bd:42:52:ae:57:16:72:31:ab:
         36:07:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 12:52:55 2024 by rpki-client on console-ams.rpki-client.org