Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa
File:                     3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa (raw, json)
Hash identifier:          Ngw/Xvarno/W/Y632B9fkAfNzMhT2vf9bMUn2puUHpo=
Subject key identifier:   E8:22:2D:52:F7:A6:34:DE:F0:2B:BF:58:C3:CD:C8:10:C7:27:F3:22
Certificate issuer:       /CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
Certificate serial:       346C9B8BDB1977C6CF85780C9A0C5009A5728BC0
Authority key identifier: AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa
Signing time:             Thu 14 Nov 2024 03:21:02 +0000
ROA not before:           Thu 14 Nov 2024 03:16:02 +0000
ROA not after:            Thu 13 Nov 2025 03:21:02 +0000
asID:                     264267
IP address blocks:        138.118.224.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl
                          rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6c:9b:8b:db:19:77:c6:cf:85:78:0c:9a:0c:50:09:a5:72:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8
        Validity
            Not Before: Nov 14 03:16:02 2024 GMT
            Not After : Nov 13 03:21:02 2025 GMT
        Subject: CN=E8222D52F7A634DEF02BBF58C3CDC810C727F322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:95:aa:62:0e:a2:7f:14:5c:94:cc:58:c9:
                    d9:a9:8b:f5:e9:4c:62:dc:2b:1f:1a:95:e8:96:fa:
                    4e:45:9c:48:b6:f2:8e:06:8f:76:ef:39:01:4c:64:
                    96:9b:5c:e0:17:e9:82:a8:c2:88:43:b3:3b:6c:75:
                    52:95:09:74:bb:e9:c5:98:32:98:b1:93:c3:cf:f1:
                    23:d0:c2:7b:1a:0b:37:5d:c5:34:4a:d0:3e:3a:b8:
                    27:0e:8d:5f:19:6b:bc:81:86:bb:71:10:97:8b:3c:
                    98:93:91:fc:1d:d9:4c:40:47:ab:c4:3c:9f:7b:58:
                    3d:3b:2b:8b:5f:ae:4c:af:21:68:0e:3c:cf:e5:d4:
                    99:5a:89:0a:ff:29:e3:2b:8f:ab:4a:63:97:f5:5d:
                    1f:a9:63:8e:39:8d:2f:62:f8:af:b9:fc:45:c6:46:
                    d3:6c:1e:83:68:3d:55:87:ce:b7:19:ec:8b:74:e9:
                    57:6b:cf:af:8c:d6:0e:dd:d3:98:21:eb:f9:09:e3:
                    52:e9:e5:f0:b0:51:91:e3:c0:ef:a1:e8:ca:d8:8a:
                    90:80:bc:be:8d:9a:40:2a:37:6b:b0:ae:aa:bc:9c:
                    39:c5:0f:35:b6:67:7d:a3:84:18:79:39:cb:81:b5:
                    e0:bd:8a:13:39:7b:2b:a2:b6:a6:6e:68:2d:0a:b5:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:22:2D:52:F7:A6:34:DE:F0:2B:BF:58:C3:CD:C8:10:C7:27:F3:22
            X509v3 Authority Key Identifier:
                keyid:AE:0C:16:86:3F:4E:C3:36:AB:79:66:D9:9D:0A:DD:1C:C8:B7:4E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE0C16863F4EC336AB7966D99D0ADD1CC8B74EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8RAWjs8JR889FhvJeXsWrLUuTsotMN9q9qdYQZBV2zaP/0/3133382e3131382e3232342e302f32322d3332203d3e20323634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:db:c0:39:6a:b1:17:82:86:fa:17:c7:0c:f3:bd:ee:ba:f3:
         c1:02:48:c5:02:af:db:6c:6f:4f:c2:43:be:af:a3:27:2e:d4:
         9f:1a:d5:96:65:02:c8:76:26:63:3f:30:de:bd:82:59:d7:cb:
         39:5a:7b:ec:ac:ee:23:7c:e0:f3:e8:0e:0c:73:26:63:b2:46:
         9d:82:87:41:a3:00:32:56:30:85:17:7c:86:fd:25:1f:a5:93:
         cf:41:49:2f:f8:89:41:af:a5:61:73:17:f2:be:78:4e:8e:bb:
         a1:ba:ea:eb:d1:36:ab:cc:95:29:fd:30:c1:5a:ea:b1:b6:56:
         f7:f9:a2:67:84:e4:35:6b:85:a7:75:63:84:02:7e:e5:4d:66:
         e7:69:18:8f:49:06:65:a8:ec:1b:44:f5:46:bf:20:83:61:85:
         47:44:55:35:e7:45:f1:f3:bd:42:00:bc:06:f9:88:4d:2a:d6:
         4a:18:b9:6f:a6:a4:39:b2:82:d9:25:80:0d:ac:e9:e9:f9:9f:
         c2:de:11:ac:52:8e:f7:98:65:87:73:30:d2:ab:d4:df:a9:c5:
         b8:cc:03:2c:a0:f0:d4:df:68:63:62:d8:40:fd:04:db:3f:28:
         d8:72:6d:eb:e9:f1:20:8f:06:42:7c:34:9c:23:6b:be:22:5a:
         ff:fc:15:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org