Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/3133382e39392e37362e302f32322d3234203d3e20323634313537.roa
File:                     3133382e39392e37362e302f32322d3234203d3e20323634313537.roa (raw, json)
Hash identifier:          aVfa3YjOQxjQVrQZy9NECunSDTMW2ym29/Vbf4i7eJ4=
Subject key identifier:   85:1E:A3:E9:26:B8:A8:F7:5B:75:EC:4A:37:2F:82:03:BD:8E:16:AB
Certificate issuer:       /CN=8E9DBEB91BAD24BEDB971D083305707C8D38F623
Certificate serial:       10827AA85E2291C6FC0906244E577C267C2F9330
Authority key identifier: 8E:9D:BE:B9:1B:AD:24:BE:DB:97:1D:08:33:05:70:7C:8D:38:F6:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/3133382e39392e37362e302f32322d3234203d3e20323634313537.roa
Signing time:             Thu 04 Apr 2024 12:59:56 +0000
ROA not before:           Thu 04 Apr 2024 12:54:56 +0000
ROA not after:            Thu 03 Apr 2025 12:59:56 +0000
asID:                     264157
IP address blocks:        138.99.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.crl
                          rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:82:7a:a8:5e:22:91:c6:fc:09:06:24:4e:57:7c:26:7c:2f:93:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E9DBEB91BAD24BEDB971D083305707C8D38F623
        Validity
            Not Before: Apr  4 12:54:56 2024 GMT
            Not After : Apr  3 12:59:56 2025 GMT
        Subject: CN=851EA3E926B8A8F75B75EC4A372F8203BD8E16AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:9f:2d:87:87:79:d7:d8:61:82:30:f8:68:
                    1d:aa:31:fe:9c:14:a9:08:88:8c:38:a0:fe:18:47:
                    ad:cd:61:78:7b:d3:f0:09:8f:35:99:bc:81:06:4b:
                    d8:21:2c:04:37:2b:8e:d6:66:82:12:87:bd:69:a7:
                    2d:6f:9f:56:da:3e:92:3a:d7:ba:f4:88:85:db:f0:
                    96:39:e0:3a:c1:58:e6:bf:d5:52:8f:95:82:6f:45:
                    fe:3e:ab:8b:1b:c8:5f:c2:60:4f:01:25:dd:ee:27:
                    f5:ac:49:cc:a3:9e:c8:f1:a5:de:26:b2:7b:df:82:
                    9c:4d:bc:37:9e:de:f0:e4:0c:a3:f4:1b:0e:c4:91:
                    a9:9f:03:bc:00:85:8f:c3:a1:97:ba:5e:9c:2b:73:
                    9a:48:ff:5b:00:19:d2:f3:57:a8:68:b9:7a:dc:f4:
                    f1:7c:57:54:3e:ae:81:54:38:ce:24:8e:4d:75:b9:
                    be:31:78:86:61:87:5c:9c:9d:c6:9b:19:c6:31:c3:
                    5a:2c:1d:23:9b:41:34:42:c4:7c:4d:09:c7:ae:fc:
                    91:45:bc:d4:f0:3d:99:79:5d:44:c3:a1:45:a3:23:
                    07:3d:ef:a4:3b:df:02:3e:bf:08:04:66:bc:1c:b6:
                    6d:3e:f5:b6:ab:5d:14:02:75:21:b9:36:a0:80:e3:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1E:A3:E9:26:B8:A8:F7:5B:75:EC:4A:37:2F:82:03:BD:8E:16:AB
            X509v3 Authority Key Identifier:
                keyid:8E:9D:BE:B9:1B:AD:24:BE:DB:97:1D:08:33:05:70:7C:8D:38:F6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E9DBEB91BAD24BEDB971D083305707C8D38F623.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6etm44QjWrR5EfTWAV3qzNSnqZHTSM9JM6c27XkWkag1/1/3133382e39392e37362e302f32322d3234203d3e20323634313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:05:76:92:ff:be:9d:19:27:24:6e:a3:a1:e5:ef:35:e4:00:
         99:94:6e:96:6d:44:00:c7:2a:cd:f0:46:92:94:35:79:6a:ec:
         1d:48:12:87:93:19:c5:60:55:9b:cc:a6:97:b1:26:f7:4c:47:
         db:d0:57:ff:97:49:97:1c:b2:0e:66:ea:f3:5f:28:51:ef:5b:
         7a:08:54:87:64:82:ff:90:13:66:74:74:50:9d:f3:06:d4:a4:
         9a:c0:3a:4c:cf:03:df:55:ab:8c:f7:7c:f5:e0:94:84:b2:d9:
         cc:71:b2:3f:1c:d6:19:71:b2:9b:80:5f:ec:f2:38:bd:d6:bf:
         f3:58:51:e3:3c:67:4e:bf:e4:dd:16:83:a7:e3:dd:57:5d:16:
         3e:88:e8:71:dd:0d:9e:db:ac:68:57:89:2f:95:1e:15:fe:29:
         46:47:f5:e3:6c:49:66:af:27:c4:08:4d:1f:f4:cd:b0:6e:75:
         bb:5a:10:45:56:55:fa:28:1d:e7:b1:59:83:d4:b2:fd:b7:67:
         73:2c:c2:b3:d7:94:df:20:c4:3a:b4:fe:14:a8:db:ba:a6:e9:
         a2:51:18:27:de:d0:ee:80:3b:97:95:1f:81:1d:6d:06:9f:6c:
         e7:b2:9b:ac:ac:04:30:a9:ad:0e:50:93:98:4c:f0:a1:96:10:
         b1:0d:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:05 2024 by rpki-client on console-fra.rpki-client.org