Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3133382e35392e38382e302f32322d3234203d3e203232363839.roa
File:                     3133382e35392e38382e302f32322d3234203d3e203232363839.roa (raw, json)
Hash identifier:          owuGBKyNckN1TS2piH1POcuuAABOQG9vuWBK9bS3iws=
Subject key identifier:   36:9A:5A:9B:B4:CE:FD:0B:39:32:07:4A:7F:DD:69:2A:D1:7E:96:A7
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       462CA0121534610D217B73E6B98DCCB2F7FE2FC2
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3133382e35392e38382e302f32322d3234203d3e203232363839.roa
Signing time:             Fri 05 Apr 2024 01:35:15 +0000
ROA not before:           Fri 05 Apr 2024 01:30:15 +0000
ROA not after:            Fri 04 Apr 2025 01:35:15 +0000
asID:                     22689
IP address blocks:        138.59.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2c:a0:12:15:34:61:0d:21:7b:73:e6:b9:8d:cc:b2:f7:fe:2f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Apr  5 01:30:15 2024 GMT
            Not After : Apr  4 01:35:15 2025 GMT
        Subject: CN=369A5A9BB4CEFD0B3932074A7FDD692AD17E96A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:37:9d:d4:79:bc:15:4a:13:74:c8:9e:d6:
                    bb:2a:fc:46:87:86:9c:fd:95:66:e3:72:59:66:84:
                    c2:d8:a6:63:60:87:4a:a8:f2:de:65:bb:5e:1e:46:
                    7d:a4:da:1a:1c:41:bf:05:60:66:52:00:4d:91:d0:
                    a2:55:9d:0d:a1:ac:bd:ea:99:a6:bc:04:ea:92:86:
                    9d:61:5a:2c:66:e3:a1:4f:97:ef:ed:66:b2:16:e7:
                    18:9c:de:52:de:cb:d7:7f:4f:22:6a:bc:e0:37:6c:
                    44:b4:3f:0f:94:48:7c:8e:14:9a:d4:14:3b:6d:7c:
                    d4:02:6f:a5:c1:60:3e:d5:c3:74:96:27:de:aa:63:
                    5a:ae:72:9e:f9:f7:db:2c:0c:49:af:aa:c5:c3:5e:
                    0e:f7:ac:5c:06:7c:76:7a:ae:43:ed:0e:c0:e0:41:
                    86:5a:93:a7:e6:2c:ac:4f:06:cc:d1:ba:f6:34:e3:
                    b7:9f:03:d4:ef:4f:94:65:de:a9:ec:d2:5d:9c:f7:
                    b6:f7:6c:3f:4e:e6:b6:d4:f4:29:49:d6:46:89:62:
                    10:cc:38:1f:07:8f:c6:22:f2:26:ec:a3:0f:77:f5:
                    a1:c3:3b:28:56:74:53:18:26:3b:22:6b:89:84:6a:
                    c0:02:86:c4:06:bc:7d:0e:ed:ae:88:99:35:84:f0:
                    e9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9A:5A:9B:B4:CE:FD:0B:39:32:07:4A:7F:DD:69:2A:D1:7E:96:A7
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3133382e35392e38382e302f32322d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:89:4f:e3:cc:dd:8c:aa:be:1d:d6:26:0b:bb:dd:a5:9d:9e:
         e5:30:cb:38:eb:1b:98:96:00:da:51:37:8a:31:57:89:6e:e2:
         db:68:e4:93:5f:cf:f2:6b:10:12:d3:89:68:48:89:cf:9f:d8:
         f9:4d:8f:0e:7e:30:f9:28:72:0a:b6:a1:2e:d4:f5:1a:9b:65:
         aa:f1:a6:43:e9:fc:d0:4a:20:4c:02:1e:32:55:ae:11:de:86:
         31:c9:10:f9:62:d3:c2:bd:8f:16:f9:98:89:47:ab:e6:b2:fe:
         36:c7:8a:5f:cd:e6:9c:e3:b7:eb:ac:36:0b:e9:26:51:a4:cf:
         e4:39:3f:7e:4c:09:6e:85:aa:6a:b0:85:48:6c:16:e8:4b:fa:
         65:7f:08:fa:b6:6e:94:bf:dc:18:86:b3:5d:5c:07:d7:ab:4d:
         22:f9:34:bb:2f:ef:36:df:e9:f1:9f:d7:91:cf:a3:7d:f9:da:
         2e:81:12:63:74:24:9b:59:06:80:b3:bb:e3:df:4e:19:43:3a:
         29:5d:4f:26:09:18:7f:3e:24:53:dc:c9:a3:63:47:5d:b3:2a:
         08:6e:7b:b1:8c:72:ae:8f:c9:13:43:c7:6c:36:b0:08:90:cc:
         b5:23:46:cb:2f:9f:f5:c1:82:bb:86:ef:72:18:f5:44:57:bc:
         e9:7f:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:46 2024 by rpki-client on console-fra.rpki-client.org