Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa
File:                     3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa (raw, json)
Hash identifier:          UUwqHz8aP4J45S1HstaQBRZYJ8Xbp4V1qVjmuo0651g=
Subject key identifier:   77:0E:F7:AB:28:0A:5B:0E:8B:21:F3:87:15:E6:67:25:CD:69:DC:5C
Certificate issuer:       /CN=A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50
Certificate serial:       05CCC162708631D202F9F09AE003A4F7046184C3
Authority key identifier: A5:DF:D1:94:11:A6:33:92:94:4A:2E:9C:A0:5F:DE:B1:D0:E3:FF:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa
Signing time:             Thu 04 Apr 2024 00:44:50 +0000
ROA not before:           Thu 04 Apr 2024 00:39:50 +0000
ROA not after:            Thu 03 Apr 2025 00:44:50 +0000
asID:                     61632
IP address blocks:        138.121.236.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.crl
                          rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cc:c1:62:70:86:31:d2:02:f9:f0:9a:e0:03:a4:f7:04:61:84:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50
        Validity
            Not Before: Apr  4 00:39:50 2024 GMT
            Not After : Apr  3 00:44:50 2025 GMT
        Subject: CN=770EF7AB280A5B0E8B21F38715E66725CD69DC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:c1:4b:7e:22:44:b9:42:f4:73:28:11:ac:
                    ad:77:24:0d:d0:41:1f:0a:99:82:16:e3:67:56:9c:
                    9e:f6:8d:9a:20:09:64:62:58:ae:f1:55:7b:d5:b7:
                    4a:7a:7e:f6:a1:8c:e5:42:c0:14:05:38:1e:34:03:
                    4b:fa:00:83:a9:5f:7e:42:0a:e6:b1:0f:61:d4:ab:
                    32:04:5a:4d:52:68:34:c8:75:ab:0a:83:46:75:c1:
                    b9:af:e6:40:22:da:3c:ad:1b:b6:c1:26:65:6c:30:
                    51:00:da:ca:ad:ac:c6:cc:99:d2:f1:2f:91:86:e0:
                    ff:e5:b9:b1:70:9c:62:7e:21:ff:de:42:fc:7a:11:
                    ff:b4:bd:76:fe:36:58:b3:82:c1:e6:5f:c1:e9:63:
                    31:d4:88:c5:28:c5:2f:5a:a3:84:3f:f2:6f:95:77:
                    e8:34:9b:cc:9b:d7:ae:f2:c9:00:6a:0f:fe:72:11:
                    63:3f:9c:36:4f:ae:27:60:30:dd:fc:0b:22:c3:d3:
                    ae:8f:f5:ae:3a:9c:86:bd:7b:ec:d1:18:07:a7:55:
                    7f:0b:f6:3c:3b:0c:94:94:dc:5e:5f:ab:47:6a:2f:
                    05:01:21:cc:ab:56:8e:f8:23:76:71:a4:29:23:b8:
                    89:5f:6d:fc:4c:54:6d:55:af:32:f3:cb:b4:91:81:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0E:F7:AB:28:0A:5B:0E:8B:21:F3:87:15:E6:67:25:CD:69:DC:5C
            X509v3 Authority Key Identifier:
                keyid:A5:DF:D1:94:11:A6:33:92:94:4A:2E:9C:A0:5F:DE:B1:D0:E3:FF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/3133382e3132312e3233362e302f32322d3332203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:96:02:4b:a5:b4:62:fe:16:92:e9:d5:b8:18:25:21:20:
         ef:7e:80:79:60:6d:9d:46:bb:87:1a:e7:36:63:6e:7b:42:6a:
         ca:c9:b0:44:9c:1d:98:87:ac:9b:81:6f:2e:c5:cd:b7:db:f3:
         8f:6b:e0:c6:31:e4:5d:87:10:2a:ee:a5:67:98:3a:7a:96:e9:
         18:54:5b:9a:85:a3:c6:b9:f1:09:7d:e8:e8:fc:b5:38:64:de:
         39:c7:59:26:f7:0d:e1:51:9f:3c:a4:76:17:85:c4:24:fb:76:
         7f:4f:bc:6f:8f:e3:47:84:3d:5b:82:30:06:3e:99:b8:7c:25:
         84:b2:1f:e8:bd:3a:ba:fe:82:93:ad:9b:70:6a:30:07:6f:a5:
         9b:d5:14:df:6d:08:30:49:64:75:de:ca:af:d9:bc:06:90:6c:
         ee:12:03:56:e9:1c:2a:a8:7b:a8:59:d1:9b:4f:89:6f:de:86:
         53:88:6c:04:ab:8b:37:97:c6:1d:a1:cd:59:ad:9a:80:a2:2b:
         46:69:6c:e3:4d:89:16:a6:1e:2b:91:59:68:31:f1:fd:b0:fa:
         bb:af:97:da:c7:c1:51:f7:c1:1d:2f:f3:10:55:2e:1e:18:b3:
         70:47:5e:e4:1b:03:75:80:df:6f:19:3a:a6:03:de:f3:97:11:
         0a:f5:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:00 2024 by rpki-client on console-fra.rpki-client.org