Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e342e302f32342d3234203d3e203631363934.roa
File:                     3133382e3138352e342e302f32342d3234203d3e203631363934.roa (raw, json)
Hash identifier:          FrqBFAgc4YocftMdIGaPRK5Y1CvkXblMs5hzsZcMFx8=
Subject key identifier:   25:D3:74:60:8E:4F:AC:F3:CD:1D:C5:5F:70:1A:FD:64:50:42:D6:21
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       47F96B879346EBCF20FC2826E420A7901ED91961
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e342e302f32342d3234203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:06 +0000
ROA not before:           Wed 03 Apr 2024 19:14:06 +0000
ROA not after:            Wed 02 Apr 2025 19:19:06 +0000
asID:                     61694
IP address blocks:        138.185.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl
                          rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f9:6b:87:93:46:eb:cf:20:fc:28:26:e4:20:a7:90:1e:d9:19:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:06 2024 GMT
            Not After : Apr  2 19:19:06 2025 GMT
        Subject: CN=25D374608E4FACF3CD1DC55F701AFD645042D621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:87:ae:9d:50:11:04:fc:ea:13:1d:7e:6b:
                    b3:c2:b2:13:7e:d3:1f:73:d3:dc:46:a5:80:4c:61:
                    a6:d5:bd:26:74:54:70:58:48:6f:59:22:4b:cf:2f:
                    7e:cf:68:5c:3d:a4:62:d4:a3:2d:a0:87:ea:61:4a:
                    ae:63:8e:2c:1c:05:f2:58:e4:ae:90:21:fa:f0:b1:
                    2d:da:fa:c6:c4:f2:01:40:1b:b8:1f:35:47:6e:42:
                    3f:3e:29:2e:33:19:00:b8:ff:4f:8a:16:87:dc:9e:
                    50:8b:a3:c8:76:40:4e:80:ae:16:28:11:55:f8:0e:
                    6f:06:65:22:c9:df:75:a4:5d:55:74:46:82:c3:b5:
                    31:0f:ed:5f:7d:5b:0e:43:71:f2:08:19:ef:b4:30:
                    43:18:b8:89:2b:18:66:a3:10:83:61:15:86:13:55:
                    df:d0:5c:52:ff:ed:c1:e7:7b:99:45:6d:94:92:79:
                    f2:51:b7:4d:15:88:f0:3c:84:0f:b0:1a:20:85:f6:
                    b8:81:2f:26:f6:15:6f:a9:76:1f:9e:f7:1a:0f:80:
                    93:70:f9:d6:e5:e1:46:80:66:b6:0e:82:28:2b:5b:
                    0a:3a:57:1c:ff:4d:d5:d9:0d:e1:40:54:22:aa:a2:
                    ac:54:6e:d9:98:0f:38:21:39:74:4f:1f:49:a5:3d:
                    46:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:74:60:8E:4F:AC:F3:CD:1D:C5:5F:70:1A:FD:64:50:42:D6:21
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3133382e3138352e342e302f32342d3234203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:76:63:1e:e0:25:b8:d9:37:10:5e:9e:a5:bf:de:48:eb:40:
         17:b3:a1:f1:91:12:ec:47:49:8d:36:b8:83:3a:36:c2:17:ad:
         00:30:02:af:16:68:41:96:86:fa:b2:1c:b6:92:af:1c:43:53:
         51:5b:20:62:81:ac:92:df:98:80:7e:97:3f:f5:b0:2b:7f:b7:
         a8:42:0a:a8:87:90:0f:1e:1b:88:f6:34:f8:12:3b:92:21:da:
         5b:7c:a1:24:cc:a8:fe:e0:9c:bc:67:1d:11:0a:1c:21:27:a0:
         1a:8f:34:60:3a:df:63:bc:62:e6:50:08:ed:b4:1b:61:be:bf:
         69:99:da:17:52:9d:d5:e6:63:30:17:df:3f:58:a7:22:21:21:
         2e:5c:d9:19:99:dc:63:c1:15:24:8a:d0:28:b6:6a:84:f6:bb:
         59:c6:95:3a:a7:e2:6d:a3:dc:96:f2:27:e2:b0:ec:ac:83:39:
         6d:52:dd:2e:e2:eb:80:dc:99:e8:9b:b5:a9:ee:ba:9a:f0:22:
         3f:97:18:5f:33:08:54:76:e4:58:e0:d3:68:13:fb:42:d2:3b:
         dd:49:b1:19:0e:98:ec:b0:07:32:be:78:8c:6d:20:23:da:65:
         f7:91:f3:77:24:63:2d:ab:92:0f:47:81:c5:23:04:64:7a:3a:
         e3:39:12:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:47 2024 by rpki-client on console-ams.rpki-client.org