Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
File:                     3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier:          /GoAra99crLde5jwGfBMfVD08b6av3/8ORTQZ64VWD8=
Subject key identifier:   38:80:41:05:44:E4:6F:93:01:D2:AA:94:AF:03:BF:CE:CF:25:8A:31
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       02BD6A4FF16AFDE4A387E7F53EDB2829C81FA2BB
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
Signing time:             Mon 25 Nov 2024 17:04:03 +0000
ROA not before:           Mon 25 Nov 2024 16:59:03 +0000
ROA not after:            Mon 24 Nov 2025 17:04:03 +0000
asID:                     61844
IP address blocks:        138.255.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bd:6a:4f:f1:6a:fd:e4:a3:87:e7:f5:3e:db:28:29:c8:1f:a2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:03 2024 GMT
            Not After : Nov 24 17:04:03 2025 GMT
        Subject: CN=3880410544E46F9301D2AA94AF03BFCECF258A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:c3:99:70:5c:e8:17:ac:50:59:b3:e0:73:
                    14:91:3d:ba:81:da:a6:3a:98:fa:d8:13:c4:22:02:
                    bb:0f:07:4a:07:2a:d0:36:d9:f5:22:29:da:00:d5:
                    21:27:3e:5e:57:10:78:e6:07:48:6e:82:f8:64:86:
                    91:48:78:b4:8b:be:cb:f9:6b:f9:37:83:00:a5:68:
                    c5:f1:c4:a7:55:36:9d:c5:45:eb:55:1c:bd:b2:63:
                    e8:1b:5b:01:dd:bf:55:54:b4:7c:e9:04:6a:a6:14:
                    b5:cb:82:8c:b6:65:cb:f0:36:c9:26:ac:4c:49:ce:
                    6e:33:de:9a:88:4b:f1:31:f6:5e:5c:71:fe:06:f1:
                    a9:1d:ba:d0:6e:6a:85:ca:87:97:b7:b9:49:49:70:
                    da:1a:08:a6:ba:d9:00:26:e0:10:61:d9:25:e4:05:
                    ec:f0:4d:cb:a6:5f:a9:b7:7b:10:1c:db:be:78:b1:
                    c0:4b:62:22:2f:2b:66:9a:16:d6:0c:00:9e:fc:c6:
                    f5:76:19:10:e7:cd:67:3c:6e:d3:4b:e8:5f:55:ec:
                    2d:37:37:24:fd:27:b1:6c:52:52:77:60:5c:b9:5d:
                    b7:93:c6:e9:0f:d3:6c:11:f9:1f:4a:9f:21:ca:da:
                    79:8c:1f:f7:d4:de:74:38:9a:8c:98:05:49:b3:8d:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:80:41:05:44:E4:6F:93:01:D2:AA:94:AF:03:BF:CE:CF:25:8A:31
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:dc:1b:8e:ee:c4:00:2f:00:8b:63:cb:52:82:e5:f3:bf:43:
         56:62:77:ea:eb:99:e8:39:bc:33:13:83:5e:f8:c0:47:d8:f1:
         24:fb:a2:15:bf:19:57:c0:2a:f6:f7:e7:fe:8b:93:0a:8f:ee:
         5b:12:f5:50:36:99:a1:f7:d5:4e:db:1f:53:45:b0:4a:10:dd:
         76:46:90:59:fc:e7:9c:37:a1:77:60:64:91:3c:2d:aa:83:99:
         20:3c:e8:5a:f0:7e:be:d0:b7:d2:30:d6:99:1d:fd:44:0f:30:
         e0:6b:5d:3b:83:7a:b5:27:05:76:9d:a8:5e:84:e3:a1:9a:11:
         66:4a:38:d0:52:69:82:51:5b:d5:15:84:c4:39:0a:3e:b7:e7:
         2d:2d:1e:a6:b4:55:67:9a:90:08:0a:39:ac:6c:7e:4e:91:a3:
         21:0b:7e:98:55:33:35:79:03:83:64:4d:7d:b4:b1:56:26:cc:
         1e:07:b7:80:82:a0:ac:8a:b8:20:c7:12:70:e2:f0:bf:51:cf:
         01:f1:2f:72:1a:6e:f2:e0:86:a8:61:f9:e7:80:83:32:7b:e2:
         c2:32:4a:70:1a:a5:40:c6:5d:67:3d:43:da:6d:2f:aa:7a:9b:
         e5:aa:40:2e:b4:30:94:dd:c3:9e:a8:ed:ea:7c:d6:4a:08:30:
         1f:b1:cf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org