Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230302e302f32322d3234203d3e20323634313639.roa
File:                     3133382e39342e3230302e302f32322d3234203d3e20323634313639.roa (raw, json)
Hash identifier:          LmS1FYOCrlWMPX7Yctf7bLtiX/R3dxXFQRUThmNmLeQ=
Subject key identifier:   DE:17:21:9D:D6:1C:70:1B:DD:EF:26:A5:21:BA:6B:A5:48:40:F4:46
Certificate issuer:       /CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
Certificate serial:       421A65DD47C4C0D7881F19F724DBA69CCA44D42C
Authority key identifier: 5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230302e302f32322d3234203d3e20323634313639.roa
Signing time:             Mon 17 Jun 2024 18:25:19 +0000
ROA not before:           Mon 17 Jun 2024 18:20:19 +0000
ROA not after:            Mon 16 Jun 2025 18:25:19 +0000
asID:                     264169
IP address blocks:        138.94.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl
                          rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1a:65:dd:47:c4:c0:d7:88:1f:19:f7:24:db:a6:9c:ca:44:d4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
        Validity
            Not Before: Jun 17 18:20:19 2024 GMT
            Not After : Jun 16 18:25:19 2025 GMT
        Subject: CN=DE17219DD61C701BDDEF26A521BA6BA54840F446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:f9:59:3f:5c:b6:c3:25:80:5f:0a:f6:03:
                    5c:60:84:27:8b:08:46:5a:ea:5e:c1:40:dc:80:11:
                    82:fc:6b:4f:3c:c6:9f:62:38:af:1b:f1:11:5a:c7:
                    92:ac:1b:32:1a:09:a9:53:26:eb:df:4e:26:56:03:
                    10:a7:96:1e:49:eb:c9:28:2f:3f:33:76:38:07:37:
                    3b:68:c2:a9:84:00:7c:82:29:b5:37:51:ab:53:1d:
                    a7:53:26:64:67:43:c4:b6:65:57:af:01:14:93:b2:
                    ce:ab:5a:95:f3:6f:94:f5:e0:b9:33:bd:e0:89:3c:
                    32:ec:72:00:c0:2f:28:d8:db:77:9b:a3:38:c7:c2:
                    bc:c7:70:dd:70:d2:b1:61:83:bc:84:db:94:56:5a:
                    51:d9:97:71:2d:72:8b:a1:cf:fe:24:76:6c:89:d7:
                    cc:36:17:57:c3:f0:dd:9f:d8:ea:4d:73:7d:f5:fd:
                    a3:17:dc:3c:c7:ee:fd:eb:c1:c6:52:9a:77:2c:30:
                    71:3e:ff:42:46:19:3d:aa:99:a2:78:53:7e:a3:97:
                    59:9f:af:fb:b0:37:a8:16:23:c2:54:e7:7a:9b:f9:
                    c2:ff:f2:09:8b:56:e6:18:bd:73:73:fb:c3:1e:b3:
                    fe:1a:b5:32:49:f7:17:d3:e1:e0:57:ad:b7:dd:bc:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:17:21:9D:D6:1C:70:1B:DD:EF:26:A5:21:BA:6B:A5:48:40:F4:46
            X509v3 Authority Key Identifier:
                keyid:5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/3133382e39342e3230302e302f32322d3234203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:89:60:8f:70:be:92:45:14:f9:f9:84:9a:ba:95:50:15:53:
         cc:c0:55:1d:eb:64:f3:e2:0c:d9:9f:9c:8a:85:34:de:d8:03:
         d1:1b:98:eb:82:d7:e0:ed:6d:4c:5b:5d:3d:b2:c9:3e:37:77:
         1f:e4:7f:71:06:56:27:ee:1a:b9:21:94:a1:a9:a0:cb:84:a0:
         d0:b6:14:7e:b1:53:bb:33:01:07:54:12:21:e8:56:b4:51:bc:
         5d:39:a6:d5:e9:1b:54:1d:b8:16:9d:23:3c:d7:bd:5c:ef:38:
         ca:10:14:08:2e:c9:f0:ec:e0:bc:18:a2:84:be:73:e9:e9:4b:
         18:31:95:43:4a:2f:bc:a2:0f:af:e2:8f:a7:77:bd:64:23:cd:
         a2:84:fc:82:39:cf:54:84:a2:77:8d:e4:12:e1:a7:30:12:4d:
         0d:f8:15:12:b2:ba:9f:e2:33:ef:d8:c8:b2:5c:32:2b:ef:a8:
         6b:f5:27:cb:72:a7:94:b8:58:98:34:28:04:57:56:24:ef:ad:
         2c:c1:93:9c:fe:f8:03:35:40:8f:e5:05:cf:1e:09:9f:14:b3:
         09:33:3b:db:08:8d:50:f3:de:cc:4d:5f:c3:7d:48:fb:c5:4b:
         5f:cb:1e:6b:bf:65:81:9c:29:5e:aa:9c:1e:a4:f1:2e:c6:62:
         79:37:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:32 2024 by rpki-client on console-ams.rpki-client.org