Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa
File:                     3133382e3131382e342e302f32322d3332203d3e20323634323431.roa (raw, json)
Hash identifier:          /9GYH2N+XyXPDjP8eJ6ParBRfT/FIddIxghYlE4vHXs=
Subject key identifier:   AF:AD:65:C6:69:08:94:47:CD:2B:BE:10:4A:75:63:65:5B:88:CB:E1
Certificate issuer:       /CN=56640C9EF0849E2AEBA73F54AE67BFC1539CEA42
Certificate serial:       3976805AB5A75F60400115B0AE033E5B9486DD4F
Authority key identifier: 56:64:0C:9E:F0:84:9E:2A:EB:A7:3F:54:AE:67:BF:C1:53:9C:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa
Signing time:             Thu 04 Apr 2024 02:32:48 +0000
ROA not before:           Thu 04 Apr 2024 02:27:48 +0000
ROA not after:            Thu 03 Apr 2025 02:32:48 +0000
asID:                     264241
IP address blocks:        138.118.4.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.crl
                          rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 01:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:76:80:5a:b5:a7:5f:60:40:01:15:b0:ae:03:3e:5b:94:86:dd:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56640C9EF0849E2AEBA73F54AE67BFC1539CEA42
        Validity
            Not Before: Apr  4 02:27:48 2024 GMT
            Not After : Apr  3 02:32:48 2025 GMT
        Subject: CN=AFAD65C669089447CD2BBE104A7563655B88CBE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:f9:37:76:eb:e9:37:90:c5:0a:6a:66:97:
                    3b:72:8c:25:18:84:3e:d9:20:23:22:c5:de:48:f5:
                    e7:bb:09:80:5f:20:73:e2:9f:6c:9f:b8:e4:c6:ba:
                    03:65:8a:5d:95:04:14:c1:5c:ab:40:bf:e8:2f:6b:
                    4f:0a:6e:68:e2:5f:3c:45:c4:e9:15:32:cb:0a:fd:
                    4e:71:25:44:6a:c9:3f:5d:a0:27:13:0a:a1:da:b9:
                    d9:70:40:9f:90:ee:a9:01:bd:3f:08:1e:84:1c:eb:
                    6d:b0:b5:fb:3d:ba:21:30:ae:81:71:89:49:26:79:
                    ec:11:6e:95:27:75:b5:e4:ec:c5:19:2a:4b:54:92:
                    8d:f7:2c:61:a6:dd:0f:a7:1b:a6:6e:79:77:1d:c8:
                    e3:aa:c5:4e:cd:15:88:38:83:48:1c:27:ba:b0:c1:
                    b4:24:25:db:b3:bf:fe:26:07:bf:27:65:b9:c5:5a:
                    b0:95:75:0a:f3:9d:3a:24:0f:56:10:e9:3a:ef:35:
                    8c:13:2f:7b:35:44:2a:ad:d8:34:b7:33:eb:2d:20:
                    6d:67:a0:68:16:de:6c:ec:d4:4a:f3:67:23:99:4c:
                    02:28:a6:31:39:e3:66:79:b2:ed:d1:29:b6:5f:f8:
                    7d:84:9f:35:c8:40:5d:67:58:68:e6:29:f0:7d:8f:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AD:65:C6:69:08:94:47:CD:2B:BE:10:4A:75:63:65:5B:88:CB:E1
            X509v3 Authority Key Identifier:
                keyid:56:64:0C:9E:F0:84:9E:2A:EB:A7:3F:54:AE:67:BF:C1:53:9C:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56640C9EF0849E2AEBA73F54AE67BFC1539CEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/1/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:9c:5d:2f:20:dd:5a:cd:e3:62:20:16:7f:3c:c7:cd:0a:
         d6:c8:15:42:17:60:34:6a:67:59:13:0f:b8:53:c4:29:51:f6:
         95:a6:c8:80:69:26:2b:02:4f:ce:41:81:4a:2e:6d:33:cc:8f:
         78:11:54:bd:c7:f9:e3:ba:04:e6:bf:8f:e7:c2:6c:72:46:2e:
         fa:74:47:90:ba:a0:7c:0a:14:42:3d:b5:2e:48:41:28:d3:6f:
         60:4f:5b:3b:94:8e:1c:ff:e7:e3:66:e4:d9:e3:5a:58:94:9d:
         78:bf:23:da:45:01:db:43:2f:3f:ec:3d:80:a0:1a:69:25:be:
         13:86:6d:e2:90:90:fa:d8:44:91:99:ba:9f:ac:52:d7:01:31:
         a8:e4:59:bb:59:2e:4c:92:f4:9c:8d:d7:d9:dc:6e:23:97:85:
         8a:dc:73:af:7e:e6:22:74:38:6a:21:2e:8e:a4:7b:f4:a8:ff:
         3f:16:f1:c0:c7:72:f7:c8:de:a6:00:66:c0:64:82:6c:73:d0:
         ce:52:a6:90:a5:21:07:65:c4:60:29:30:13:66:c2:95:e8:1e:
         6c:55:d1:af:74:e0:4b:12:5d:d0:fc:a1:b6:b5:52:b3:61:3d:
         9d:e6:5b:9e:d0:f2:93:2b:ae:e1:0a:1e:a4:12:35:0f:83:7f:
         9c:b3:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 02:14:31 2024 by rpki-client on console-fra.rpki-client.org