Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234392e302f32342d3332203d3e20323730363632.roa
File:                     3133382e3131372e3234392e302f32342d3332203d3e20323730363632.roa (raw, json)
Hash identifier:          qpjz/c3BMwzgDz8VAtf4XR94MPG/ulYee4VVGkNp2Dk=
Subject key identifier:   0D:4A:2C:B7:50:B3:A6:24:9C:A2:DB:CD:ED:06:C1:E9:24:91:9D:2A
Certificate issuer:       /CN=EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9
Certificate serial:       76509A16E7FA273E769FC9F0F9E4FB893D85A934
Authority key identifier: EE:F7:6C:4E:20:E9:35:4E:61:3C:1A:D9:D6:B9:1B:47:1F:A1:2C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234392e302f32342d3332203d3e20323730363632.roa
Signing time:             Thu 03 Oct 2024 21:21:32 +0000
ROA not before:           Thu 03 Oct 2024 21:16:32 +0000
ROA not after:            Thu 02 Oct 2025 21:21:32 +0000
asID:                     270662
IP address blocks:        138.117.249.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.crl
                          rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:50:9a:16:e7:fa:27:3e:76:9f:c9:f0:f9:e4:fb:89:3d:85:a9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9
        Validity
            Not Before: Oct  3 21:16:32 2024 GMT
            Not After : Oct  2 21:21:32 2025 GMT
        Subject: CN=0D4A2CB750B3A6249CA2DBCDED06C1E924919D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ff:8f:c1:70:14:44:c0:46:2a:53:6e:2a:f4:
                    3c:46:e7:20:32:eb:f5:44:cd:77:ac:23:08:08:43:
                    8c:5e:52:c5:88:5a:db:37:e8:a5:84:e3:bc:0e:bd:
                    89:72:e8:17:14:1f:41:99:43:ea:c7:f3:8c:ce:be:
                    64:73:0b:ef:5f:4a:82:4e:f9:10:23:2f:a0:79:8e:
                    a3:38:2f:ba:7c:cc:17:d3:1a:24:ba:11:bc:de:c5:
                    62:b3:ae:dd:a3:a2:bc:fa:ec:37:b9:29:87:3a:51:
                    ef:f5:ba:a8:49:6b:99:e8:42:15:ae:ef:6c:c4:a5:
                    77:f7:39:13:7b:b6:50:3c:17:82:99:80:d8:ca:fc:
                    fa:5f:db:56:86:d5:1c:92:11:3d:12:57:aa:29:88:
                    3f:60:c1:16:b7:a8:56:ea:a9:95:96:ab:3a:2f:77:
                    72:07:88:13:62:07:70:2d:d1:76:00:45:ef:4a:1d:
                    be:6d:bc:c9:aa:fd:78:43:ac:59:54:43:7a:a9:4d:
                    a5:e3:60:62:ce:e7:74:ac:3a:80:e4:0d:4c:ac:25:
                    59:06:a7:3b:20:f9:b7:45:01:28:84:ba:68:23:ab:
                    3a:56:05:41:22:f4:23:0f:57:43:d5:6a:a9:99:f5:
                    41:05:df:81:75:0b:31:85:bf:a6:21:51:91:04:31:
                    59:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4A:2C:B7:50:B3:A6:24:9C:A2:DB:CD:ED:06:C1:E9:24:91:9D:2A
            X509v3 Authority Key Identifier:
                keyid:EE:F7:6C:4E:20:E9:35:4E:61:3C:1A:D9:D6:B9:1B:47:1F:A1:2C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3234392e302f32342d3332203d3e20323730363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:49:21:99:26:e8:dc:c9:45:45:a1:7b:b2:cc:64:ff:fb:41:
         b3:a2:26:48:d9:17:40:8f:af:fd:4c:fa:0f:f9:76:50:31:c9:
         10:7b:c6:2c:24:ad:99:f3:e7:93:17:27:d0:c9:b3:8c:82:ac:
         90:90:36:ef:24:71:8b:57:aa:e7:fb:af:21:03:df:5c:49:97:
         bd:68:d9:0d:33:f4:e9:f7:47:63:68:b1:f7:ab:4a:89:16:d3:
         5d:21:14:4f:e6:30:93:59:06:48:71:2f:7b:d1:f3:ad:40:43:
         f2:09:57:1a:fd:4e:3f:19:05:a8:fc:97:d7:05:d3:37:ff:ab:
         f6:04:dd:8a:74:e2:3f:35:42:13:88:66:f5:a2:3e:5f:4b:8f:
         34:9e:2c:01:02:d7:13:b3:dd:87:41:09:af:97:a0:bb:08:4b:
         d6:99:2f:d8:e3:d6:6e:1d:27:09:8e:27:46:d8:a4:9f:33:73:
         7f:b5:34:23:e7:8f:06:cc:c0:46:2c:92:bc:cf:fd:96:6e:71:
         d5:10:73:c0:c0:60:3f:c0:be:6c:30:55:b1:db:5d:af:9b:d3:
         d4:5c:65:53:4f:c7:52:76:8a:68:36:fe:ac:68:2d:fc:fa:c0:
         4c:c8:2b:f1:01:0e:99:e7:c7:d3:be:30:9c:39:7f:e0:2a:1b:
         ba:bb:32:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:54 2024 by rpki-client on console-ams.rpki-client.org