Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
File:                     3133382e3131382e39322e302f32322d3234203d3e203533313731.roa (raw, json)
Hash identifier:          9CEzMSIoCoXge6dRPjJlZ6XLyM9XYov20orinidzzf8=
Subject key identifier:   F4:6A:7E:53:8A:0A:BB:BF:C1:CE:7D:D4:46:B1:C6:34:83:0C:1F:57
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       0A77FFDADCE13315CFCB72A3C249861C402751DB
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
Signing time:             Mon 25 Nov 2024 17:04:17 +0000
ROA not before:           Mon 25 Nov 2024 16:59:17 +0000
ROA not after:            Mon 24 Nov 2025 17:04:17 +0000
asID:                     53171
IP address blocks:        138.118.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:77:ff:da:dc:e1:33:15:cf:cb:72:a3:c2:49:86:1c:40:27:51:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:17 2024 GMT
            Not After : Nov 24 17:04:17 2025 GMT
        Subject: CN=F46A7E538A0ABBBFC1CE7DD446B1C634830C1F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:2b:15:75:97:0d:9f:cf:1b:ca:66:c2:b2:
                    59:36:92:7e:a0:6d:1d:4e:8c:00:8f:db:b5:77:db:
                    b2:45:ce:38:67:5e:8b:f3:2a:32:94:25:e7:4e:25:
                    88:3e:ef:70:56:ce:0a:bb:71:2c:55:6e:e3:1b:21:
                    f3:c6:9c:d1:a7:84:0c:b9:b7:78:22:7f:d5:47:df:
                    53:57:2e:c1:e4:60:f4:52:2c:09:cd:b1:6d:5a:9b:
                    d4:90:28:0d:b3:b6:c7:f1:8d:79:1d:d7:f3:d8:6f:
                    1c:a2:68:15:2f:33:1a:51:6f:62:fb:7c:ba:38:4d:
                    55:d1:1f:53:2b:92:02:13:b4:c1:df:c9:97:f0:1d:
                    c2:c6:16:51:91:97:80:01:ed:69:50:da:4f:4b:a8:
                    71:2f:fb:d7:8f:10:1e:a6:cd:1a:40:4f:c5:0e:ad:
                    07:e4:74:ba:ce:fc:0f:0e:32:21:35:a5:6d:3a:1c:
                    08:3e:04:43:af:b9:5c:a4:d5:34:30:cc:d6:eb:a8:
                    32:06:63:0a:a2:79:70:e1:8c:bf:be:28:b5:1c:69:
                    77:b7:83:95:9d:11:fa:f0:35:53:9b:58:4b:88:02:
                    6a:97:d3:62:a6:a0:8a:9d:ab:8a:21:b4:03:3c:28:
                    96:61:78:cb:c2:90:55:92:7c:9f:6c:0b:6a:02:ca:
                    4f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6A:7E:53:8A:0A:BB:BF:C1:CE:7D:D4:46:B1:C6:34:83:0C:1F:57
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:8f:35:d6:86:b1:94:7f:e0:3c:5e:56:87:3e:96:ef:fa:3e:
         7d:f8:04:dc:13:87:c6:74:72:11:c9:99:e1:df:b5:31:db:e5:
         ff:b0:b9:08:69:b6:78:49:d8:bb:26:4e:14:cb:c4:83:cb:8c:
         13:3d:a4:7d:fa:9a:a2:6a:04:0d:a0:63:12:06:7f:85:41:14:
         c1:0d:6d:a4:c6:f9:30:70:a7:a1:ec:a8:8c:3d:62:f5:47:fc:
         e9:07:80:55:25:70:76:05:ec:91:10:8b:bf:bf:61:bd:a7:26:
         4b:ae:cf:d2:4a:e9:0f:04:3f:4a:9e:b6:35:de:64:dc:b4:c6:
         84:c7:73:d1:69:c6:74:5b:35:1f:da:62:9b:ab:64:1c:e6:4f:
         7e:f5:34:ce:0e:31:45:2f:ca:2a:da:af:97:1e:d5:8c:58:b1:
         8c:e5:78:e4:04:08:4e:d5:0b:8b:79:19:a4:1a:7d:70:8f:d7:
         29:5b:51:76:36:78:0c:31:fe:b6:8e:ab:6b:0b:79:28:46:85:
         c2:1e:c4:c8:ab:e7:6c:7c:4b:03:60:07:23:41:49:7c:c5:38:
         d4:39:f6:58:db:46:d8:72:a3:bd:14:7b:8d:ef:13:24:59:e6:
         7f:33:93:19:54:4d:ae:34:1d:6b:92:95:f6:66:ae:60:b8:4b:
         4f:b4:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org