Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa
File:                     3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa (raw, json)
Hash identifier:          D0aMxAuRP2kZL6wYhh0FC/YZImtxs7uRAcHiow5mnkY=
Subject key identifier:   1D:61:76:E4:48:D4:FA:77:DB:DC:E8:E1:3A:EB:3A:0A:DE:A1:CC:CE
Certificate issuer:       /CN=3E3635534C5268C5F8F31D910454018D21BBA954
Certificate serial:       360BADB52F56570AD9592DEA0B3433C46E86962A
Authority key identifier: 3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa
Signing time:             Wed 03 Apr 2024 18:32:05 +0000
ROA not before:           Wed 03 Apr 2024 18:27:05 +0000
ROA not after:            Wed 02 Apr 2025 18:32:05 +0000
asID:                     263869
IP address blocks:        138.186.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl
                          rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:0b:ad:b5:2f:56:57:0a:d9:59:2d:ea:0b:34:33:c4:6e:86:96:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E3635534C5268C5F8F31D910454018D21BBA954
        Validity
            Not Before: Apr  3 18:27:05 2024 GMT
            Not After : Apr  2 18:32:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:58:9d:39:43:1b:9d:c7:34:cd:8a:63:43:
                    57:71:0f:b2:89:f5:70:8a:56:c9:d9:31:6f:22:ee:
                    b5:e5:51:33:3a:e0:a8:f9:d6:e7:ec:a1:44:08:cf:
                    dd:02:5c:5c:c1:a9:19:8f:9a:fc:77:36:41:fb:ed:
                    6d:69:2b:86:ff:ab:bc:db:d8:75:78:58:a7:43:1a:
                    a3:12:64:13:f3:91:20:bb:ce:19:53:8d:dc:44:d1:
                    2d:3b:2a:73:1a:80:d4:4b:dd:aa:80:8b:36:d2:44:
                    32:99:74:fc:dc:63:6d:3e:91:8b:3e:d1:1d:37:78:
                    14:fb:69:a7:6b:77:3c:88:db:b7:11:57:cc:99:86:
                    50:17:af:f7:d4:e7:cb:ec:8b:46:fc:0d:e3:97:fd:
                    17:c1:94:66:48:15:ec:5f:a9:99:55:4a:32:58:fb:
                    ec:ea:7f:76:f1:59:e1:23:83:26:d8:b0:c8:93:c5:
                    48:31:fb:44:0b:82:9c:02:f5:8e:ef:5b:db:15:80:
                    56:4d:bf:1f:85:62:12:f5:88:8f:be:6d:18:9e:58:
                    63:99:78:a7:d7:b5:1c:f2:78:05:65:48:af:ec:7c:
                    6d:5d:18:06:7f:08:b3:04:c0:db:39:ca:a5:c3:e6:
                    93:03:2c:32:99:a0:ea:77:2b:b8:3f:13:cb:d8:3d:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:61:76:E4:48:D4:FA:77:DB:DC:E8:E1:3A:EB:3A:0A:DE:A1:CC:CE
            X509v3 Authority Key Identifier:
                keyid:3E:36:35:53:4C:52:68:C5:F8:F3:1D:91:04:54:01:8D:21:BB:A9:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3E3635534C5268C5F8F31D910454018D21BBA954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3635534C5268C5F8F31D910454018D21BBA954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hyTrLCYb1ED7s6Yq8ZQ6ivJSW3PhhCZyRFXFRYnYpCe/1/3133382e3138362e3139362e302f32322d3234203d3e20323633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:c1:e6:b9:83:fc:62:dd:7f:2e:a0:e4:68:9e:e5:ea:32:14:
         c7:24:ef:8d:b3:3c:88:d3:d1:51:47:5f:92:81:3a:d9:10:41:
         a3:85:42:d7:33:ab:5d:68:0c:0d:61:9b:78:26:81:dd:1e:aa:
         b4:ad:48:ce:df:cd:10:82:c6:db:f6:f3:51:f6:cf:e9:33:0e:
         ea:a4:3d:c5:57:3a:a0:32:1e:01:47:1e:78:d6:23:71:62:cf:
         ad:c0:c9:0f:a6:d5:96:3b:f1:1e:14:a6:2a:89:12:54:20:41:
         a2:8f:1a:1b:81:d9:02:71:2d:72:e9:bc:da:11:8e:99:7d:e6:
         b0:ea:7c:36:dd:0f:6a:7d:1d:b2:dc:87:db:c0:35:f1:39:d8:
         eb:be:76:08:17:6b:cb:e1:0b:21:71:84:e4:28:64:61:1e:75:
         dc:22:6f:b0:32:5f:38:2f:3b:c3:c0:96:99:28:44:b6:9b:54:
         3e:39:cf:0a:a2:b9:38:0b:24:81:8e:c2:e0:5d:bc:2e:b7:f8:
         dd:b3:f1:5d:2a:ed:39:93:78:de:b8:8a:df:e8:21:b5:f1:63:
         ee:ee:39:51:f8:23:98:60:58:77:bd:58:6c:ce:9c:e8:d9:0d:
         24:be:ed:4c:e4:45:a8:a0:01:77:4e:45:6d:a4:37:c8:38:02:
         5c:f2:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:05 2024 by rpki-client on console-fra.rpki-client.org