Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa
File:                     3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa (raw, json)
Hash identifier:          d2xVGm7YFvkNs3By6FOCt2fuV2G1oav2ZfrYI9eorXQ=
Subject key identifier:   DA:8F:94:62:10:6F:2E:E9:44:CD:15:B3:0E:42:2E:09:D8:33:29:05
Certificate issuer:       /CN=8498356D517B9A4BCC9A959FD112ED6755FD7D34
Certificate serial:       5C28758547C9C7576EBE2C1949D9FF638D0F5E28
Authority key identifier: 84:98:35:6D:51:7B:9A:4B:CC:9A:95:9F:D1:12:ED:67:55:FD:7D:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa
Signing time:             Thu 25 Apr 2024 15:19:02 +0000
ROA not before:           Thu 25 Apr 2024 15:14:02 +0000
ROA not after:            Thu 24 Apr 2025 15:19:02 +0000
asID:                     264319
IP address blocks:        138.122.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.crl
                          rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:28:75:85:47:c9:c7:57:6e:be:2c:19:49:d9:ff:63:8d:0f:5e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8498356D517B9A4BCC9A959FD112ED6755FD7D34
        Validity
            Not Before: Apr 25 15:14:02 2024 GMT
            Not After : Apr 24 15:19:02 2025 GMT
        Subject: CN=DA8F9462106F2EE944CD15B30E422E09D8332905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:3b:e7:88:bf:a5:10:94:ff:0e:67:dc:ec:
                    88:0e:52:b6:e0:df:95:5d:6e:92:a7:fb:42:95:a8:
                    42:1c:e8:23:03:5a:9e:6f:76:c3:00:9d:ad:f2:78:
                    19:d6:0e:c7:e5:a5:d9:b0:17:0b:5a:a3:c6:9b:ed:
                    af:bf:cb:6e:9a:c7:f2:9f:47:bc:90:1d:8a:c2:6a:
                    24:52:cd:a5:78:ea:ee:27:15:d4:7f:35:65:29:40:
                    82:ba:57:0e:2e:06:fe:ba:e6:76:e8:5d:a6:48:09:
                    26:fe:2d:73:6b:25:53:99:2c:61:cc:c6:87:a1:5d:
                    bc:9c:ff:5d:f8:fb:06:c6:8d:44:dd:01:80:7e:5c:
                    3d:21:69:19:8e:dd:0b:23:99:e3:c2:1b:9f:cf:64:
                    9f:a9:9d:6a:9e:73:60:ae:60:2a:73:1c:e0:21:06:
                    09:05:ba:ff:37:33:ab:1b:37:41:7b:4a:a4:67:2c:
                    5e:49:6a:81:09:40:38:39:60:15:68:9c:61:74:45:
                    ec:81:5a:d3:45:32:fd:69:1b:39:4e:b6:c2:ba:8e:
                    34:da:db:ff:ef:cc:9e:34:2e:2d:e9:d0:32:71:cc:
                    34:40:70:8f:15:98:0e:f2:0f:3a:15:87:89:09:f3:
                    e1:ed:6a:98:45:bd:ec:12:a3:18:db:31:59:06:60:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8F:94:62:10:6F:2E:E9:44:CD:15:B3:0E:42:2E:09:D8:33:29:05
            X509v3 Authority Key Identifier:
                keyid:84:98:35:6D:51:7B:9A:4B:CC:9A:95:9F:D1:12:ED:67:55:FD:7D:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/3133382e3132322e3131362e302f32322d3234203d3e20323634333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:93:d6:34:de:08:e0:a9:69:f7:db:6d:2e:0f:ac:d4:2d:3e:
         3c:0d:3e:31:2d:1a:be:84:83:45:9a:7b:cc:c1:a6:8c:52:45:
         41:85:39:63:e0:57:31:3c:81:75:80:d1:94:30:20:6a:94:04:
         29:91:e1:10:80:65:0b:8f:e9:45:a9:14:68:98:94:71:ee:63:
         c7:3b:ef:10:24:d2:6c:86:27:f2:72:7f:2e:98:61:68:6b:38:
         a4:59:2d:ea:e6:18:b0:31:83:75:e3:93:67:e4:f1:2b:9d:a5:
         c0:c6:1a:da:93:b6:b6:89:f3:80:cc:61:97:32:94:99:c0:8c:
         6a:b9:69:f7:e1:75:a8:ac:3d:e8:db:8b:41:82:d0:cb:43:e6:
         f5:00:f1:fe:27:59:24:c1:52:d3:dd:30:02:72:dc:da:77:bf:
         2d:05:e4:04:56:12:1c:2e:7b:64:c1:89:af:4f:70:da:0f:8b:
         24:5a:bc:ff:94:a0:22:80:a9:37:aa:2a:69:a5:13:f3:03:f2:
         61:4b:97:54:55:0e:91:1a:09:9f:de:8f:74:aa:4d:c2:8c:5e:
         5e:08:07:e2:fe:a2:7d:22:39:46:ae:b0:2e:ce:36:ba:eb:51:
         88:5d:6c:21:6a:bc:7c:aa:14:23:c1:7d:cb:75:d4:11:0b:b3:
         ec:b5:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:45 2024 by rpki-client on console-fra.rpki-client.org