Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa
File:                     3133382e302e3137322e302f32322d3234203d3e20323634353532.roa (raw, json)
Hash identifier:          0MFfiXic+V90A0smzs10RYsb8NM7jYXCSdh17VQBpAs=
Subject key identifier:   5A:73:26:DA:76:9C:49:45:F1:77:D4:20:DD:21:AC:74:7B:0C:2A:06
Certificate issuer:       /CN=42E0C742D5DC5A6C41753F73202F41323E27436C
Certificate serial:       3A46B04DBB9FA6C08EB50C22D379A7ABA2B8EE8D
Authority key identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa
Signing time:             Thu 04 Apr 2024 03:39:48 +0000
ROA not before:           Thu 04 Apr 2024 03:34:48 +0000
ROA not after:            Thu 03 Apr 2025 03:39:48 +0000
asID:                     264552
IP address blocks:        138.0.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl
                          rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:46:b0:4d:bb:9f:a6:c0:8e:b5:0c:22:d3:79:a7:ab:a2:b8:ee:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E0C742D5DC5A6C41753F73202F41323E27436C
        Validity
            Not Before: Apr  4 03:34:48 2024 GMT
            Not After : Apr  3 03:39:48 2025 GMT
        Subject: CN=5A7326DA769C4945F177D420DD21AC747B0C2A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:19:44:e0:51:23:7d:05:1f:7c:95:de:06:
                    68:99:7c:b7:9d:b5:83:33:e7:93:19:72:14:42:75:
                    10:03:84:de:54:a5:57:86:89:46:e1:9b:72:b2:31:
                    5a:39:4e:66:fd:1f:18:43:1a:bc:0b:44:25:80:61:
                    df:5c:04:dd:61:48:33:a7:09:8c:9f:d5:a8:dd:43:
                    75:30:9f:76:6e:72:a9:ea:2c:6b:71:74:65:ba:8b:
                    d1:aa:a7:47:d4:44:a7:e3:4b:ed:da:f9:16:05:83:
                    db:a4:4e:b7:f5:b2:82:2c:51:7d:48:d1:39:99:5d:
                    4b:a9:ae:9a:ef:f5:ab:9f:87:d8:b4:4f:16:51:27:
                    4f:e5:f2:4e:5f:50:11:5e:a7:ee:6a:38:93:f4:9f:
                    ba:ef:b3:36:68:be:04:b2:4d:c5:82:51:59:ec:6d:
                    39:bc:b4:66:1e:f8:5d:88:7d:e7:f3:5c:6c:2e:12:
                    db:46:81:92:43:ed:1e:1a:1f:5d:61:45:ea:d0:53:
                    3d:8f:af:c4:60:55:2e:58:a8:df:43:32:98:2c:57:
                    f7:2f:59:33:44:92:1d:39:81:b4:f7:9b:2a:a0:ce:
                    b8:4e:08:86:37:cf:a0:32:f4:50:b3:a0:77:67:5d:
                    e7:82:ad:62:58:0f:96:ee:9c:35:76:2d:94:0e:4f:
                    2a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:73:26:DA:76:9C:49:45:F1:77:D4:20:DD:21:AC:74:7B:0C:2A:06
            X509v3 Authority Key Identifier:
                keyid:42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:28:df:c2:ad:be:08:7b:ae:8f:d8:10:ba:3c:6a:ea:5b:b4:
         c0:dd:25:18:73:90:9f:7f:58:9d:45:f7:02:d1:01:28:3b:5c:
         c4:a3:79:40:d9:8f:bf:db:a7:03:0d:f8:8c:05:68:b9:d5:f6:
         33:9a:f1:b7:bd:09:2b:ce:99:6f:af:9f:ab:58:f1:98:82:52:
         69:bc:f9:35:2b:f7:2f:a6:cd:0b:7b:08:82:0e:01:86:60:09:
         8e:3c:f6:6c:08:b2:93:9b:b4:de:97:50:92:c6:4e:0a:08:36:
         e9:3e:fc:58:43:8a:c3:8c:29:09:b8:ff:d3:0e:7d:0c:04:da:
         05:53:a7:cb:37:44:45:0b:d2:e4:b5:7c:c1:b3:76:6e:05:f1:
         76:ff:cb:81:e0:a3:5f:57:f8:1b:e9:1c:c3:26:64:0e:60:c9:
         ee:90:0d:a9:94:b7:9b:fb:9f:e4:b8:8a:b3:e1:f3:3d:e8:23:
         ec:86:6b:90:3d:aa:fc:63:83:04:70:0f:7a:4c:5f:a3:af:7b:
         89:21:3a:9b:9c:08:a5:f1:22:9b:9e:f8:01:5e:7a:68:d4:ce:
         e9:95:c8:85:03:7a:b5:d0:3a:06:4f:93:6d:62:99:ce:f7:1b:
         5a:1c:e3:4c:c7:14:88:66:78:1c:36:24:61:a6:4a:93:ca:a0:
         d9:5f:f7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:22 2024 by rpki-client on console-fra.rpki-client.org