Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
File:                     3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa (raw, json)
Hash identifier:          D3LtGhaCHWjSu5x0cmPMW5OksSUcCmIpAMfVT0XMeYs=
Subject key identifier:   70:92:80:75:C9:D8:60:CF:6D:CB:98:F1:CD:C8:0A:FD:C8:4D:ED:EF
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       6C3C6A8CE3740E142296DC9680D36235243655AF
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa
Signing time:             Mon 25 Nov 2024 17:04:18 +0000
ROA not before:           Mon 25 Nov 2024 16:59:18 +0000
ROA not after:            Mon 24 Nov 2025 17:04:18 +0000
asID:                     264299
IP address blocks:        138.121.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3c:6a:8c:e3:74:0e:14:22:96:dc:96:80:d3:62:35:24:36:55:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:18 2024 GMT
            Not After : Nov 24 17:04:18 2025 GMT
        Subject: CN=70928075C9D860CF6DCB98F1CDC80AFDC84DEDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:89:90:3f:8c:da:af:15:b6:b7:45:29:88:
                    83:27:58:c7:69:9a:62:c1:15:85:79:87:0b:65:69:
                    0d:82:b7:52:4a:83:9d:b7:54:e6:74:e3:68:e9:e3:
                    50:65:8a:fc:95:ce:46:cf:6b:56:22:58:2d:ff:2c:
                    0a:ef:6f:a2:69:08:e2:25:19:13:97:ce:52:34:4f:
                    0c:f4:31:5b:65:e0:22:b7:ac:a4:92:1b:98:81:6d:
                    cb:33:66:e8:1c:9a:08:bb:fe:6b:b3:4b:31:ce:17:
                    18:49:09:af:d6:5a:75:8b:2b:be:79:80:fc:2e:2e:
                    e6:b0:eb:88:0d:56:65:ed:8a:fd:c5:d5:49:26:0a:
                    85:dc:6a:21:30:93:1c:00:97:55:a5:76:7d:b7:77:
                    1f:4f:26:f9:d9:a6:ba:67:71:06:20:d5:b3:0d:d1:
                    1f:09:8c:88:8c:67:9f:34:f9:25:d4:08:43:93:6e:
                    b6:06:35:6f:69:92:07:66:d9:4f:74:16:5b:5e:f9:
                    a1:65:0e:e2:89:de:09:c7:bf:8f:92:66:9a:73:72:
                    ee:59:4b:46:4a:39:50:16:db:89:ee:82:41:1a:93:
                    42:76:54:99:09:50:d9:67:2d:43:92:eb:a9:1d:10:
                    05:81:c4:e1:28:34:12:f5:f9:d1:dc:ca:42:c6:da:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:92:80:75:C9:D8:60:CF:6D:CB:98:F1:CD:C8:0A:FD:C8:4D:ED:EF
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3132312e3135322e302f32322d3234203d3e20323634323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:54:11:da:4d:90:7a:67:4c:30:f5:c6:05:26:8c:76:bf:e2:
         49:65:56:e1:5e:5d:d7:0e:b3:fa:77:94:b6:e6:0b:76:37:f4:
         2f:c7:8b:fb:42:3d:40:bd:b6:cd:33:14:8e:31:f2:5b:cf:10:
         84:72:37:71:f7:21:e3:40:02:24:a9:71:a2:bb:af:04:31:b5:
         a1:48:15:ef:fb:4c:c7:21:2d:bd:c4:19:e6:ad:af:64:c9:94:
         c3:18:1c:c2:f4:c4:9b:85:c8:55:9f:d4:d2:b0:c8:41:5b:b0:
         91:de:ad:4f:bc:68:39:63:34:1a:0c:d2:77:6e:8f:2a:ee:9c:
         4c:57:ea:c7:5e:c9:20:2c:70:ed:30:cc:10:5f:84:9e:af:06:
         c4:c9:9e:9a:24:33:54:3d:cc:e0:7b:75:60:e5:9f:f9:e1:c6:
         79:e4:19:5c:6e:89:ee:81:a2:3e:8e:59:3f:08:d4:1e:ca:86:
         09:a5:5f:ac:21:69:42:9d:4c:2b:69:cf:75:72:cf:9f:08:d8:
         f9:ca:f0:48:59:20:bc:f7:f9:d0:81:39:34:48:e1:f9:79:7c:
         c6:9a:49:d6:59:b6:cd:eb:e6:9a:32:ad:52:22:33:1c:4d:b9:
         d4:49:c2:40:85:d3:db:20:ea:02:4c:6d:ce:b3:7a:3a:60:3e:
         4d:44:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org