Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3133382e33362e3138342e302f32322d3234203d3e203532393638.roa
File:                     3133382e33362e3138342e302f32322d3234203d3e203532393638.roa (raw, json)
Hash identifier:          Kpc+4rnwdVBscDsyK73syAszLeKdDXsyejTgzs9vc4k=
Subject key identifier:   AE:08:0A:5B:BD:2D:C6:0F:ED:7B:59:88:13:11:30:4B:86:A8:8E:8F
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       4C6A45A9DF4CC46F25533EA062FC01DF126A2B5C
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3133382e33362e3138342e302f32322d3234203d3e203532393638.roa
Signing time:             Thu 04 Apr 2024 07:08:03 +0000
ROA not before:           Thu 04 Apr 2024 07:03:03 +0000
ROA not after:            Thu 03 Apr 2025 07:08:03 +0000
asID:                     52968
IP address blocks:        138.36.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6a:45:a9:df:4c:c4:6f:25:53:3e:a0:62:fc:01:df:12:6a:2b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Apr  4 07:03:03 2024 GMT
            Not After : Apr  3 07:08:03 2025 GMT
        Subject: CN=AE080A5BBD2DC60FED7B59881311304B86A88E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:13:e1:f9:a9:5c:17:19:91:e3:9c:74:1a:
                    c1:51:84:24:4b:1a:7d:23:c9:2d:82:d6:25:ec:c7:
                    c0:0a:75:89:8c:c2:c0:31:0b:5c:8c:94:b5:56:cb:
                    44:f8:f0:41:a3:06:81:37:14:d0:f8:6a:0a:44:c7:
                    3e:8f:e7:e4:f7:f1:c9:36:10:63:35:eb:8a:ee:85:
                    b3:7a:e1:f2:67:16:86:32:29:ff:fa:99:52:e6:ed:
                    46:00:4a:d7:e6:2f:2b:78:75:3b:d1:66:08:a8:5a:
                    44:74:6c:f5:7a:9b:53:ac:c9:75:e5:97:c7:3c:1a:
                    5d:a2:31:7c:21:7c:b1:24:b5:70:90:e1:a1:12:0e:
                    33:31:01:8b:fa:23:f4:54:0e:ee:84:a4:b9:72:c8:
                    d6:00:5a:27:20:f4:a7:49:12:6c:70:b7:26:26:e0:
                    55:84:e2:a7:e9:e4:b3:ab:56:53:8d:ca:fd:02:83:
                    fe:97:6a:4b:45:72:39:65:7c:0b:5c:2a:38:78:89:
                    fc:1c:bf:73:23:2e:bf:dc:79:2c:d6:e6:e7:78:09:
                    26:eb:52:6b:ba:ac:ab:fa:f5:10:5a:9c:8a:40:2c:
                    1a:5f:3b:14:55:d4:ef:07:0c:e1:5e:47:8f:86:72:
                    45:fb:4e:75:e6:6e:33:52:ec:2d:08:13:9c:18:0b:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:08:0A:5B:BD:2D:C6:0F:ED:7B:59:88:13:11:30:4B:86:A8:8E:8F
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3133382e33362e3138342e302f32322d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:97:cd:5a:26:c7:92:51:42:a4:6c:5f:00:b7:98:e1:15:1d:
         46:6a:20:96:6c:af:ad:18:b5:d5:7f:48:4a:36:a1:33:30:a0:
         b6:b4:cf:cc:99:36:eb:26:f1:0a:84:1c:34:e7:9b:8e:f2:e6:
         a6:d4:8b:8c:ad:09:91:cd:d7:02:3c:6e:74:16:a6:c0:51:7c:
         9d:d1:d2:10:c5:32:29:d9:1f:a2:41:e2:03:4a:fc:24:99:20:
         76:7c:c8:3a:fb:84:ea:3f:09:81:0b:b6:18:cf:bb:da:b5:44:
         7d:b1:87:f1:c4:dc:96:d9:c3:97:1d:00:b7:a7:c1:79:87:cd:
         62:c5:4d:00:26:92:f9:de:c5:3f:2e:59:ea:77:90:89:2f:fc:
         8c:1e:26:36:bb:ba:97:0d:24:86:31:a2:ba:ac:cf:4c:ef:b7:
         31:a1:a3:74:62:b9:b7:ed:79:83:1f:de:75:29:a0:58:ba:48:
         68:15:3f:13:f6:d7:53:7d:7f:26:c5:5c:be:1a:96:4a:78:43:
         ea:a7:f6:7b:44:f8:18:b7:4b:48:d7:5b:c6:c1:5c:cd:c6:81:
         f8:af:9a:d0:c0:12:62:12:9e:0d:52:90:f9:b8:8d:39:47:c7:
         31:b6:5b:d6:a0:52:49:73:93:33:31:93:89:28:82:6d:a6:2f:
         da:36:c7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:43 2024 by rpki-client on console-fra.rpki-client.org