Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/3133382e3132312e35362e302f32322d3234203d3e20323634323835.roa
File:                     3133382e3132312e35362e302f32322d3234203d3e20323634323835.roa (raw, json)
Hash identifier:          8Dl652xkKlauxIdG4R6j0ernP7WlyqjIx+xh69b/Qkc=
Subject key identifier:   7B:59:70:57:EE:DA:1D:C5:A0:4B:82:2D:93:65:86:6D:3C:0B:DC:13
Certificate issuer:       /CN=17A303D8E6A89A6A5148E842F9400F754E558ED5
Certificate serial:       2C222E06D11DC62372370208CC0FC51206F7C012
Authority key identifier: 17:A3:03:D8:E6:A8:9A:6A:51:48:E8:42:F9:40:0F:75:4E:55:8E:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/3133382e3132312e35362e302f32322d3234203d3e20323634323835.roa
Signing time:             Thu 04 Apr 2024 17:36:09 +0000
ROA not before:           Thu 04 Apr 2024 17:31:09 +0000
ROA not after:            Thu 03 Apr 2025 17:36:09 +0000
asID:                     264285
IP address blocks:        138.121.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.crl
                          rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:15:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:22:2e:06:d1:1d:c6:23:72:37:02:08:cc:0f:c5:12:06:f7:c0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A303D8E6A89A6A5148E842F9400F754E558ED5
        Validity
            Not Before: Apr  4 17:31:09 2024 GMT
            Not After : Apr  3 17:36:09 2025 GMT
        Subject: CN=7B597057EEDA1DC5A04B822D9365866D3C0BDC13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:46:4b:40:2a:3e:5b:49:cc:82:56:32:f7:
                    54:b6:3b:1f:75:ba:18:9c:35:b5:1c:ab:37:54:f1:
                    ef:7c:b2:bc:bc:18:50:b4:9d:d2:a6:28:6c:c5:43:
                    f9:81:8d:83:20:01:b2:f9:e8:a2:df:2f:ce:c7:f0:
                    51:98:54:c6:d2:e8:59:08:7b:29:20:ec:b8:ed:20:
                    99:3e:29:c4:48:82:8b:98:c7:21:69:47:69:f5:ed:
                    ac:11:9b:d1:86:5c:c9:33:5e:2c:d3:4c:2a:77:19:
                    72:d0:19:f8:0c:e0:b4:02:05:99:2d:29:57:3c:b6:
                    00:1e:3a:4e:b5:ea:e8:c8:ab:31:6f:ef:58:df:81:
                    97:79:91:54:1a:ca:09:dd:f0:4b:e2:b5:11:af:ca:
                    84:9d:ba:dd:a0:a7:06:6a:55:e1:7b:b8:10:7b:c8:
                    8b:10:99:e2:d8:c3:24:2d:85:47:da:5b:26:f5:21:
                    91:4f:cb:ec:6c:84:50:17:07:4e:23:3f:67:c0:3d:
                    c9:a3:37:94:11:2c:a6:cc:75:ce:69:b9:90:35:6d:
                    4b:22:dc:b4:55:0f:48:ba:c7:f9:b3:e8:42:f0:31:
                    a8:d3:35:f6:a9:b5:59:ca:94:2e:eb:14:a2:99:b3:
                    ca:e6:28:2a:44:22:22:44:d8:30:1f:59:d7:a3:b9:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:59:70:57:EE:DA:1D:C5:A0:4B:82:2D:93:65:86:6D:3C:0B:DC:13
            X509v3 Authority Key Identifier:
                keyid:17:A3:03:D8:E6:A8:9A:6A:51:48:E8:42:F9:40:0F:75:4E:55:8E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17A303D8E6A89A6A5148E842F9400F754E558ED5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/1/3133382e3132312e35362e302f32322d3234203d3e20323634323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:43:3c:e8:90:34:66:3a:b2:b4:3b:e5:64:5b:2b:f0:16:b4:
         d1:56:db:9d:d3:e8:1a:b2:c7:e7:eb:41:0d:08:a1:6e:bf:f5:
         cc:5a:f7:0b:0c:f3:80:29:0e:9f:c2:d6:60:03:cb:a9:f7:88:
         53:c7:86:a6:76:a5:17:e9:5d:8e:19:1a:43:6d:70:e9:2f:fd:
         7d:13:7c:d2:b9:28:94:c5:be:7b:76:92:1a:8a:46:51:9e:32:
         86:d3:66:70:b1:58:00:9f:60:ba:74:3a:ab:0e:83:a1:08:d0:
         e6:93:ad:9c:39:d8:41:d0:bf:76:b7:62:d9:0c:58:5b:eb:8f:
         52:47:8a:1c:7a:7d:47:e3:e8:f1:73:09:58:55:e1:36:a5:5c:
         79:69:34:7a:45:26:c8:f5:1b:b5:46:2e:fd:5a:28:e4:ae:15:
         e0:02:05:28:3b:42:a8:8e:d0:70:24:08:52:73:0d:cf:7f:8b:
         ec:61:84:34:5f:c0:50:27:67:f0:b5:8e:f4:92:96:86:ce:76:
         96:d9:29:84:a4:09:37:f1:bd:22:50:d6:08:3a:58:70:ff:be:
         cb:ed:22:26:a1:6f:30:16:4c:79:1b:c2:38:4e:0f:2c:eb:f2:
         c4:88:ec:9e:3f:4b:58:39:cc:10:55:46:75:5f:b5:2c:f8:09:
         d5:08:48:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:19 2024 by rpki-client on console-ams.rpki-client.org