Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3235312e302f32342d3332203d3e20323730363632.roa
File:                     3133382e3131372e3235312e302f32342d3332203d3e20323730363632.roa (raw, json)
Hash identifier:          C8wfIeDruTLCIRrfLZ0NDBcjajphs6NwsGeeWZmG1EI=
Subject key identifier:   63:A5:A7:89:20:8D:4E:78:33:49:6B:DA:BE:40:F8:DC:63:40:59:09
Certificate issuer:       /CN=EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9
Certificate serial:       318B04450A52448F4C07E0CD5DFA0EBA880FA16C
Authority key identifier: EE:F7:6C:4E:20:E9:35:4E:61:3C:1A:D9:D6:B9:1B:47:1F:A1:2C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3235312e302f32342d3332203d3e20323730363632.roa
Signing time:             Thu 03 Oct 2024 21:21:44 +0000
ROA not before:           Thu 03 Oct 2024 21:16:44 +0000
ROA not after:            Thu 02 Oct 2025 21:21:44 +0000
asID:                     270662
IP address blocks:        138.117.251.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.crl
                          rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8b:04:45:0a:52:44:8f:4c:07:e0:cd:5d:fa:0e:ba:88:0f:a1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9
        Validity
            Not Before: Oct  3 21:16:44 2024 GMT
            Not After : Oct  2 21:21:44 2025 GMT
        Subject: CN=63A5A789208D4E7833496BDABE40F8DC63405909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:c9:6c:1d:31:4f:da:bf:9c:27:cf:19:56:
                    bd:c2:60:e7:c1:55:3c:3a:20:b6:77:6d:aa:a8:36:
                    98:e1:a6:1a:a1:58:21:32:73:d4:e6:7b:6c:8a:5a:
                    be:d8:a5:9d:65:fc:8b:86:51:0b:83:ff:ea:78:ed:
                    be:c1:bd:62:16:3a:45:c2:37:a8:e6:7a:16:e4:d1:
                    c7:06:b0:fa:1d:57:19:26:ef:59:e9:fc:b8:76:65:
                    37:05:9a:c8:56:d6:49:8c:26:07:75:a8:2e:66:bc:
                    29:44:f3:ce:b0:d9:ae:61:05:b9:c5:94:24:15:b5:
                    f6:93:8e:6b:f7:b9:3d:f7:c5:42:39:06:e3:04:5e:
                    0c:86:0c:8e:37:57:7f:5f:5b:5c:12:b4:94:94:0e:
                    18:69:af:2d:fb:39:c0:7c:bd:82:9e:a8:83:26:82:
                    68:09:fd:5e:4e:95:56:75:b9:c9:89:e4:ee:75:e3:
                    f7:1f:c3:2b:e6:25:9d:2a:e0:6a:e2:79:3d:da:03:
                    a6:de:d6:c5:74:db:81:ad:ce:98:cc:9e:00:7d:f3:
                    99:90:68:5c:7a:f3:72:7b:b0:61:ad:89:1b:7c:e8:
                    ed:5b:e0:9e:62:23:ab:21:9b:5c:0c:03:fc:9e:b4:
                    b8:e6:68:ed:06:cf:e6:d9:9e:bd:7a:6e:f3:ae:bb:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A5:A7:89:20:8D:4E:78:33:49:6B:DA:BE:40:F8:DC:63:40:59:09
            X509v3 Authority Key Identifier:
                keyid:EE:F7:6C:4E:20:E9:35:4E:61:3C:1A:D9:D6:B9:1B:47:1F:A1:2C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEF76C4E20E9354E613C1AD9D6B91B471FA12CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3235312e302f32342d3332203d3e20323730363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:71:de:77:b2:b7:f3:71:ca:6e:cb:62:96:c8:91:50:20:ba:
         fd:39:c2:83:49:5c:2c:40:00:59:87:82:9c:f2:c1:ea:1c:bf:
         96:50:8f:96:a2:bd:d2:35:a7:b5:ab:71:26:51:05:a8:4b:fe:
         9e:c5:ee:f1:33:42:d4:57:44:ff:48:00:ec:a4:14:34:6d:9c:
         20:6f:c6:37:f8:8a:b2:c1:27:ea:3a:77:bd:82:a3:b2:ba:cb:
         c8:30:33:34:c8:0c:b9:15:20:3a:17:aa:04:70:27:65:81:c4:
         e0:8d:bb:38:47:4e:79:ed:45:e1:58:4c:15:dd:29:b9:b1:3b:
         c6:12:cd:89:55:77:20:21:a0:bc:4d:da:7a:76:6f:e2:f9:94:
         c5:ec:a4:b0:40:e6:bc:8d:d9:76:30:d6:54:6e:60:75:fd:28:
         f8:d4:ce:3b:c5:5b:80:89:3c:ef:64:56:54:e6:f9:d4:7a:e0:
         ac:74:80:a5:9a:29:b9:98:77:8c:0d:fa:87:b0:33:44:02:22:
         13:98:6a:82:bc:a2:5a:8e:fc:c6:75:47:54:14:07:20:44:48:
         91:67:84:f0:62:27:b1:7c:32:60:7d:9c:2e:f9:6a:ce:43:d4:
         46:f6:62:9d:59:1b:91:20:65:b8:19:be:6a:8d:2e:94:73:f2:
         f0:fa:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:54 2024 by rpki-client on console-ams.rpki-client.org