Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa
File:                     3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa (raw, json)
Hash identifier:          sz3wmMFNHhW9dh6x6la48BvZx/UaQ0v+BgwrEWxwiPQ=
Subject key identifier:   E4:39:B0:C3:7B:C8:5B:8E:5E:DF:7F:3A:F1:AE:22:5A:D9:5A:00:7C
Certificate issuer:       /CN=849A24446B9E3C80503AA50B35CDFE864B50F299
Certificate serial:       6FE3B315AFDDC2EC6D92801CD8761314F06EE30F
Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa
Signing time:             Thu 04 Apr 2024 09:25:22 +0000
ROA not before:           Thu 04 Apr 2024 09:20:22 +0000
ROA not after:            Thu 03 Apr 2025 09:25:22 +0000
asID:                     263877
IP address blocks:        138.186.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl
                          rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e3:b3:15:af:dd:c2:ec:6d:92:80:1c:d8:76:13:14:f0:6e:e3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299
        Validity
            Not Before: Apr  4 09:20:22 2024 GMT
            Not After : Apr  3 09:25:22 2025 GMT
        Subject: CN=E439B0C37BC85B8E5EDF7F3AF1AE225AD95A007C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:c7:ee:08:db:8e:19:77:6a:d5:12:5f:56:
                    5a:43:d3:f6:a8:e6:8e:ad:70:82:db:73:17:45:4d:
                    f3:8d:9d:9a:f7:02:01:25:e2:cf:91:f0:04:78:06:
                    55:03:36:1d:29:4d:d6:c1:7a:c3:90:8a:07:2e:e2:
                    a5:b5:c5:4a:3e:62:1e:0f:bc:41:67:8c:39:c7:47:
                    aa:e3:e9:50:20:22:49:8e:63:74:a5:84:0c:1f:d7:
                    e8:4b:fb:a9:66:3d:a6:32:f7:69:c9:e6:fe:03:c1:
                    9c:0f:fb:3b:15:ab:f0:d0:82:46:31:3a:7d:c1:d2:
                    03:de:f1:14:4a:bd:59:f8:2d:48:dc:5c:4a:19:e1:
                    e9:d3:66:3f:3a:26:1d:b1:53:b3:b1:83:53:14:c2:
                    84:fb:a6:cb:b8:6b:7c:4d:d9:78:78:db:a9:70:04:
                    6c:4a:6e:11:33:2e:1b:4d:12:3b:fa:e0:73:f2:da:
                    d2:1c:cb:0f:a1:e4:97:a3:e0:d9:d4:f3:65:5f:0d:
                    46:49:46:64:99:4f:ed:c5:75:61:c8:49:97:e4:dc:
                    10:78:40:b5:0b:b9:c5:7c:73:d0:ea:4b:8d:cc:ba:
                    4a:77:47:05:80:3b:ae:78:24:eb:87:7b:15:da:68:
                    ec:f3:41:31:ca:10:53:6d:5a:44:e1:0a:e7:d8:b1:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:39:B0:C3:7B:C8:5B:8E:5E:DF:7F:3A:F1:AE:22:5A:D9:5A:00:7C
            X509v3 Authority Key Identifier:
                keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/3133382e3138362e3137322e302f32322d3332203d3e20323633383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:eb:ae:3d:bf:63:d0:a5:6d:12:45:97:36:33:69:e0:86:
         3f:ab:c8:75:88:76:8b:9d:56:8e:f5:53:58:64:eb:5d:fb:f4:
         a9:6c:94:7f:42:c6:de:91:6e:b3:53:65:a5:31:fb:86:f9:32:
         de:53:d6:e5:44:fc:b6:2d:a4:4e:df:af:4a:6e:b7:0e:86:d3:
         b7:cb:1f:39:05:4e:50:88:23:b6:69:71:c3:be:6e:6d:2e:6e:
         d3:b5:bc:4c:24:a4:ab:93:5a:93:95:61:ef:17:eb:80:81:33:
         5f:dd:af:62:f9:9a:eb:79:4b:19:77:b8:20:86:c8:5f:e9:5c:
         97:56:1f:45:eb:f0:9b:8e:e7:a8:52:69:ff:af:6e:37:42:3b:
         bb:c6:f0:12:6b:83:10:25:e8:0f:7d:d7:94:39:ad:b1:4b:ac:
         3f:0f:1d:7c:b2:02:e3:ba:c9:25:0c:74:5a:c6:7d:0e:05:6d:
         d2:65:38:f5:8f:41:e8:49:fa:6b:52:61:8a:fd:bb:df:a2:4d:
         e1:d2:82:e1:0c:c3:ca:f9:68:9f:f5:cb:4b:e0:02:05:07:25:
         36:f4:a0:ae:d4:17:f9:3c:af:3a:e3:0a:04:e5:bd:1a:c1:3d:
         35:ab:a0:c5:dd:91:df:60:e3:b9:51:96:66:ce:cb:f5:23:8a:
         4a:8c:20:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:19 2024 by rpki-client on console-ams.rpki-client.org