Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
File:                     3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier:          ikW5Ttdnj6vTXpDnAEnT8BXRpYjAMXgbw1j8wQjHPWo=
Subject key identifier:   3D:B1:93:0B:87:65:25:44:FE:84:C5:CA:08:DD:51:4A:F4:E6:DA:F8
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       011B3578CE4263F1C3067DD053E8425A80712C9E
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
Signing time:             Mon 25 Nov 2024 17:04:22 +0000
ROA not before:           Mon 25 Nov 2024 16:59:22 +0000
ROA not after:            Mon 24 Nov 2025 17:04:22 +0000
asID:                     28287
IP address blocks:        138.118.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1b:35:78:ce:42:63:f1:c3:06:7d:d0:53:e8:42:5a:80:71:2c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:22 2024 GMT
            Not After : Nov 24 17:04:22 2025 GMT
        Subject: CN=3DB1930B87652544FE84C5CA08DD514AF4E6DAF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:48:38:76:b5:36:64:33:00:9c:e8:13:39:
                    13:08:b6:92:c4:d3:af:e7:ed:3f:2b:8e:dd:6b:05:
                    1b:4b:55:f2:13:c6:47:79:63:45:1c:af:5b:e3:8f:
                    6c:d3:1e:4d:d4:41:db:b9:cf:78:ba:95:74:29:b6:
                    78:b0:17:cc:7d:62:3a:17:90:31:62:4a:bd:23:2a:
                    70:d7:ab:2f:53:85:53:db:93:d1:36:48:5e:83:56:
                    c5:f6:4b:5e:8e:70:ce:7a:30:b1:03:c7:e1:b0:4d:
                    83:5b:5e:85:bf:2c:ac:49:71:d8:7e:65:f9:33:93:
                    84:fc:1a:5c:0f:e6:0e:2c:01:ae:11:fc:09:4f:e7:
                    7c:ea:85:54:cd:35:a0:00:bb:0b:8a:9c:b8:cd:2a:
                    92:39:64:ee:cc:f8:79:a4:81:7b:83:dd:07:65:ed:
                    da:39:06:a5:1c:27:fe:f2:02:1e:0f:e3:99:a4:f0:
                    85:34:00:1f:65:ef:a8:4d:03:66:c9:09:09:77:89:
                    2a:88:c3:20:81:fd:d2:56:3a:af:48:2a:8a:8a:b7:
                    1d:0c:ef:66:2d:3f:1f:9a:25:87:b3:16:8f:3f:dc:
                    a6:f1:db:07:45:41:40:53:d7:ec:bf:29:e4:8b:81:
                    d8:55:e7:d6:8d:f9:5d:f3:a5:10:64:53:fc:11:ba:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B1:93:0B:87:65:25:44:FE:84:C5:CA:08:DD:51:4A:F4:E6:DA:F8
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:8a:9d:9a:98:ab:01:64:01:6e:9c:36:c7:31:de:e7:78:04:
         16:8a:15:f9:50:91:4d:96:50:e0:ac:99:88:41:8c:ee:18:a8:
         4c:33:87:db:5b:dc:3c:09:0c:40:86:3a:07:90:99:6b:bb:a2:
         fd:44:0d:23:c8:9c:cb:a6:cd:9e:c2:f0:77:e3:3b:c5:a7:79:
         81:65:a9:75:a7:e3:52:c9:ea:00:92:c0:59:95:44:8c:7b:49:
         89:e4:1f:66:47:4e:03:3b:24:8a:05:de:b9:5b:04:6e:03:45:
         31:8f:e9:7d:2b:be:f2:32:29:69:eb:3c:18:b2:60:ae:ad:1f:
         8c:0e:e2:d5:b5:02:d0:3b:34:97:a0:25:7e:b7:84:4c:d2:e5:
         ab:6c:b3:c6:32:da:48:0f:ad:bd:15:1f:b6:75:26:3e:1d:f6:
         99:a3:57:b4:32:2b:a9:8e:ee:ca:68:68:c6:9e:7e:02:97:e0:
         b4:c6:5d:33:6c:d6:d5:6f:70:a5:ce:9c:f5:e6:d0:e5:de:60:
         e6:d4:e8:d7:50:1e:c7:b7:86:b6:c2:55:c0:aa:19:17:0b:36:
         2c:f8:e2:06:db:d3:fa:22:03:85:5a:d9:56:ef:b5:3b:0b:02:
         b5:a7:03:b7:4a:24:3e:4e:a3:c5:45:2a:64:fd:21:02:d1:32:
         10:d4:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org