Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32322d3234203d3e20323634313737.roa
File:                     3133382e39342e3233362e302f32322d3234203d3e20323634313737.roa (raw, json)
Hash identifier:          a7r2nfhsKDCZB9saFCkx0Y34zm4HMdFgg+G4BtjvmQM=
Subject key identifier:   74:C1:D8:BF:68:92:C8:F1:1E:18:4C:66:13:6B:D5:22:DF:49:5A:AA
Certificate issuer:       /CN=482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA
Certificate serial:       25AEE498AF78408970B4A97D1198E97AAEE8B3CE
Authority key identifier: 48:2D:CF:F0:F8:B4:5D:D8:B0:4E:33:F6:96:42:72:3E:6D:DA:7D:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32322d3234203d3e20323634313737.roa
Signing time:             Thu 08 Aug 2024 13:14:34 +0000
ROA not before:           Thu 08 Aug 2024 13:09:34 +0000
ROA not after:            Thu 07 Aug 2025 13:14:34 +0000
asID:                     264177
IP address blocks:        138.94.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.crl
                          rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ae:e4:98:af:78:40:89:70:b4:a9:7d:11:98:e9:7a:ae:e8:b3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA
        Validity
            Not Before: Aug  8 13:09:34 2024 GMT
            Not After : Aug  7 13:14:34 2025 GMT
        Subject: CN=74C1D8BF6892C8F11E184C66136BD522DF495AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:9b:00:bb:01:e9:04:45:d1:85:7d:94:6e:
                    f8:c0:c3:40:c0:95:d7:e9:7d:dd:d7:24:4f:cc:ba:
                    6b:da:8f:c2:e7:98:97:99:3f:81:fa:de:52:70:7a:
                    71:00:7b:68:b4:50:26:d6:98:61:76:5d:ae:41:a5:
                    c5:11:11:46:f4:86:3b:45:d8:d6:71:f4:70:02:b5:
                    54:cc:92:c3:89:97:62:bd:fa:30:5a:52:c8:8c:00:
                    cc:6f:89:a9:f6:5a:00:34:b0:ff:55:16:8c:66:68:
                    ae:42:3b:21:3b:c5:9b:6e:63:0d:59:e5:28:a6:96:
                    c5:36:22:71:a6:8f:60:48:83:f4:ca:a0:bb:3b:6a:
                    f6:f1:05:1b:24:d7:47:e6:40:b4:59:9d:7d:52:88:
                    8f:32:54:04:7f:e0:b6:7c:3a:a5:1b:b8:5e:b1:69:
                    30:4a:f6:ed:9e:7c:a7:cb:18:4b:1b:c7:39:af:6f:
                    da:9b:37:a3:69:d5:d2:45:6f:cb:05:17:e4:cf:57:
                    1f:c2:a4:4f:f8:42:33:2f:92:47:d2:68:ab:00:f8:
                    3a:e5:84:ce:96:9c:63:6e:bc:1e:72:93:f0:05:83:
                    85:83:09:3a:4f:45:44:9c:df:f2:2e:17:8e:1c:ea:
                    57:71:30:83:38:be:b1:ec:20:d6:5e:44:b3:6c:d2:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C1:D8:BF:68:92:C8:F1:1E:18:4C:66:13:6B:D5:22:DF:49:5A:AA
            X509v3 Authority Key Identifier:
                keyid:48:2D:CF:F0:F8:B4:5D:D8:B0:4E:33:F6:96:42:72:3E:6D:DA:7D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/3133382e39342e3233362e302f32322d3234203d3e20323634313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:50:93:6f:54:83:65:00:bb:c1:e0:57:ce:f7:7f:e6:da:7d:
         8e:18:06:c7:e6:cf:12:df:e3:42:5a:9e:fd:90:47:68:e5:a3:
         0a:69:ff:25:09:f8:d9:23:c1:8f:1d:e6:fb:8c:9e:60:a5:bc:
         52:8d:48:bf:83:69:38:48:0a:ad:d8:91:d1:30:91:a2:e1:9f:
         a4:9a:76:c0:70:89:54:61:cd:cb:c6:46:52:96:c9:2f:08:07:
         ce:cf:66:1b:fa:1f:2d:26:76:88:ef:f1:f8:a1:a7:7e:d3:c4:
         56:08:39:41:fc:c9:69:6e:f1:a4:86:cd:84:9e:fc:64:c4:a6:
         09:84:5e:b1:07:80:e0:9a:a0:e9:41:10:5f:1f:7f:4d:f5:68:
         68:4f:09:b3:dd:2e:f4:5e:89:89:8a:ab:c3:6c:93:76:66:9f:
         94:4e:92:f0:a1:ea:30:62:fc:a1:c2:71:3e:c0:13:b1:42:52:
         c1:59:0b:54:1f:1f:bb:15:83:51:ff:1e:9d:44:b7:59:6e:02:
         6d:1c:0c:a2:61:81:3c:c6:6b:f7:0a:1b:97:1a:ff:d7:71:a7:
         65:1a:46:f0:33:c8:7f:24:98:4d:83:7f:04:8a:99:f4:43:47:
         ba:1b:fe:bd:85:44:0e:f6:bd:f2:f0:cc:c2:26:24:17:a0:23:
         a9:b2:1d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org