Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa
File:                     3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          lk1gB+rZbsYKIAKIs5tYWQGAZVPWP/wlakto8TvFjFM=
Subject key identifier:   36:DB:5F:6A:35:CD:49:D7:9B:03:73:0F:C1:B8:E2:BD:7B:68:7C:34
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       57296F686C9739CF06F67E1C6FD4F64773996B9F
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:21 +0000
ROA not before:           Sat 27 Jul 2024 21:08:21 +0000
ROA not after:            Sat 26 Jul 2025 21:13:21 +0000
asID:                     262485
IP address blocks:        138.118.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:29:6f:68:6c:97:39:cf:06:f6:7e:1c:6f:d4:f6:47:73:99:6b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:21 2024 GMT
            Not After : Jul 26 21:13:21 2025 GMT
        Subject: CN=36DB5F6A35CD49D79B03730FC1B8E2BD7B687C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b2:78:d3:b0:e5:d3:1b:0a:eb:48:35:ca:0c:
                    ae:67:bd:a6:c4:7a:d6:59:aa:5f:31:79:e5:8f:10:
                    af:e6:99:60:a1:28:c6:d7:e6:11:ae:32:db:05:eb:
                    dc:cd:ba:3b:62:56:7e:5e:25:d5:b9:46:20:94:8b:
                    d9:db:5d:d1:87:e9:9c:61:cb:5e:87:da:32:64:41:
                    bc:f2:13:00:5f:61:d8:78:47:e8:97:ec:f0:8e:6b:
                    97:55:f7:e3:bd:6c:75:50:fb:91:0a:28:a1:a4:f1:
                    9a:07:2a:cf:3b:32:36:a0:a9:5e:b6:81:7b:55:b4:
                    52:b6:f6:0c:e1:aa:a5:0e:e7:02:e0:9b:ec:7f:15:
                    df:e6:72:e0:af:7b:c6:70:32:b5:b5:33:34:62:d3:
                    a3:d7:87:82:a8:9d:ef:35:6b:13:3f:a8:c2:f3:7e:
                    4d:08:5a:5c:a0:d9:eb:5b:e9:35:2b:3e:2e:f8:7f:
                    b3:ad:b5:8f:ba:7d:c7:8e:e4:e5:7f:3d:f8:ee:dd:
                    57:7f:d7:69:db:4f:ed:cf:88:b2:87:ce:d4:c7:9a:
                    fe:a8:67:3f:70:9f:1d:e6:65:75:13:3a:ed:3a:ef:
                    6e:09:06:81:69:7e:59:7f:2d:cf:f6:78:81:f8:4b:
                    25:b9:bb:2d:dd:1e:3a:c1:7b:d9:8a:23:ac:dc:d6:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DB:5F:6A:35:CD:49:D7:9B:03:73:0F:C1:B8:E2:BD:7B:68:7C:34
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:6f:03:26:15:96:12:0d:ed:21:6d:79:62:58:83:dc:f6:7a:
         98:42:17:d4:fb:6a:84:09:dc:53:c5:24:39:7b:a8:07:6c:fb:
         71:00:59:6c:8a:4f:80:65:5f:ba:1f:64:8e:a1:85:d0:f4:ad:
         98:8f:ae:f8:7a:28:39:50:a1:79:19:2c:6e:7d:70:1a:a7:4d:
         68:4f:ff:b9:0f:b0:e6:20:78:98:4e:dc:db:28:c6:1f:56:32:
         e6:5f:d1:50:85:04:fd:98:7b:87:2a:65:1b:63:43:10:e9:6a:
         d7:13:7b:6b:b7:a8:a5:c0:fe:43:9e:d2:5a:27:eb:3c:5d:ed:
         3b:8b:56:2b:4d:dd:59:65:3c:3a:42:3d:7d:c0:c6:e3:ac:73:
         94:25:ef:38:1f:a7:13:bd:de:3e:e5:93:b3:f3:43:85:55:1d:
         4d:ff:7f:0b:d1:0b:01:18:e0:15:40:db:0f:b0:e2:9f:8f:64:
         36:bb:05:79:aa:a4:6f:5d:ec:49:b5:1d:53:a2:cd:38:17:c2:
         2a:7e:8b:65:2b:3d:24:f8:4d:98:47:22:e0:94:64:63:e3:c2:
         71:16:ce:af:f2:96:b7:1b:bb:ce:2f:df:3e:35:f8:e0:6f:b3:
         58:b8:f4:e5:e4:f9:9a:63:6c:d1:bf:c5:10:d3:e2:fe:3b:70:
         0b:55:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:47 2025 by rpki-client