Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa
File:                     3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          ybog7ODMwSFCzZpmeY93S0d3byie1VcxeVBmKQeiE1E=
Subject key identifier:   70:CA:88:D4:0D:2A:47:A3:B6:8B:CD:CA:26:05:14:B2:17:61:55:79
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       28BD1629BA8CC4A434247EC2B65A0EB86635A9D2
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa
Signing time:             Thu 07 Nov 2024 20:54:50 +0000
ROA not before:           Thu 07 Nov 2024 20:49:50 +0000
ROA not after:            Thu 06 Nov 2025 20:54:50 +0000
asID:                     263665
IP address blocks:        138.255.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:bd:16:29:ba:8c:c4:a4:34:24:7e:c2:b6:5a:0e:b8:66:35:a9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Nov  7 20:49:50 2024 GMT
            Not After : Nov  6 20:54:50 2025 GMT
        Subject: CN=70CA88D40D2A47A3B68BCDCA260514B217615579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8c:30:20:b4:b9:f9:c0:45:23:1b:1b:a0:ed:
                    fe:bb:b3:d6:4b:84:73:69:4a:2d:36:f3:df:a6:e7:
                    c9:e0:a4:88:d7:f4:63:6f:0a:1d:0d:8f:17:40:4f:
                    d4:8f:95:23:61:22:90:8b:41:6a:27:c4:3a:f6:14:
                    80:77:f5:85:9c:44:bc:89:43:90:d0:65:d8:cf:34:
                    c7:3f:a9:da:9a:52:15:af:0c:1e:af:1a:b3:46:f2:
                    ca:0c:9f:1f:e8:51:f5:79:66:e0:08:e8:e4:36:2e:
                    f7:06:5e:0f:ba:be:d9:ba:27:92:d0:61:08:15:4b:
                    32:72:a6:b0:27:08:9c:30:d5:fc:0f:51:95:80:f4:
                    25:12:ed:55:5b:14:f5:40:fc:d5:9f:71:f7:1c:62:
                    c5:c5:da:44:bc:40:ed:36:d4:30:cb:47:0a:9e:53:
                    df:b7:ac:b1:57:1c:f4:8e:bd:28:ad:66:37:3b:bb:
                    1f:d8:fc:6d:fb:cd:5d:1b:3c:b7:53:51:89:fc:00:
                    fe:cb:6b:d1:c2:0b:e6:21:b9:b9:89:e9:8f:8c:9a:
                    cc:d3:fc:50:26:2f:be:9b:c0:91:c9:e0:5a:48:50:
                    8c:46:69:86:5e:0e:10:fb:7e:81:30:3c:e2:12:39:
                    07:1d:0f:e4:e7:f4:70:42:8c:c8:91:2b:e0:d4:9c:
                    a4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CA:88:D4:0D:2A:47:A3:B6:8B:CD:CA:26:05:14:B2:17:61:55:79
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:8c:a0:37:bc:9b:f2:26:93:0a:75:f6:85:38:6f:65:38:
         00:7b:46:cd:95:09:99:4f:45:d4:be:9b:a1:f0:fb:fd:b1:ee:
         b5:47:9a:56:ba:c4:06:c0:41:94:c6:29:ca:35:1f:8c:03:1a:
         04:4e:3c:be:b4:54:d2:c4:94:f9:36:87:74:99:8e:fa:46:91:
         8a:cd:1d:38:f2:cb:2d:02:2d:93:14:2d:76:a0:58:e9:cd:44:
         04:9a:b9:11:4b:74:b6:8a:45:03:af:a1:aa:11:62:74:24:cb:
         9e:bf:4e:d9:e7:e4:c6:8c:d8:23:e3:00:2e:3d:a5:46:2f:53:
         88:96:85:2e:4c:ff:f3:90:5a:22:38:70:91:f4:28:2b:6b:f3:
         0e:8c:04:03:b5:d2:23:bd:70:0a:7a:e9:eb:fa:d2:cd:e8:e2:
         b6:5e:8c:6f:70:1d:20:bd:04:51:b5:75:99:90:c4:d1:39:0f:
         b5:e7:69:04:06:1b:7b:74:2b:b2:91:b8:97:85:6d:f8:d6:07:
         a8:c2:f3:17:28:5d:c3:c6:75:99:4d:72:b1:83:38:a9:6b:76:
         b5:dd:7c:08:95:e7:6f:6f:b4:72:09:a2:1c:b2:fa:30:41:27:
         f4:7c:d8:a5:a0:47:cd:22:86:28:f0:b0:93:2d:b0:75:11:fd:
         48:4e:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org