Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa
File:                     3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          j9yOXQrLw+K3tX5ujSjMc6Fzy6joPanvoCBMCtoQzrk=
Subject key identifier:   D1:AC:70:78:6B:8A:62:6F:C4:B4:9C:D2:13:58:CA:08:86:F8:98:04
Certificate issuer:       /CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
Certificate serial:       0D445D7957E59636CEC28FC443168632C24C7423
Authority key identifier: 8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa
Signing time:             Mon 09 Sep 2024 15:04:37 +0000
ROA not before:           Mon 09 Sep 2024 14:59:37 +0000
ROA not after:            Mon 08 Sep 2025 15:04:37 +0000
asID:                     263665
IP address blocks:        138.255.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 01:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:44:5d:79:57:e5:96:36:ce:c2:8f:c4:43:16:86:32:c2:4c:74:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
        Validity
            Not Before: Sep  9 14:59:37 2024 GMT
            Not After : Sep  8 15:04:37 2025 GMT
        Subject: CN=D1AC70786B8A626FC4B49CD21358CA0886F89804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:95:e9:3a:0a:e0:1d:08:18:8a:b9:b3:d0:16:
                    ee:42:b8:48:db:1a:02:e5:95:21:5f:c5:49:78:e6:
                    71:e9:bd:89:0e:57:5f:b6:58:5b:ed:d7:ca:79:2a:
                    3a:32:45:d5:7a:ed:53:3e:2a:28:d1:58:96:6d:dd:
                    6c:a5:aa:e2:5e:e3:ed:37:4e:2a:23:97:90:8d:ec:
                    6a:66:fa:c9:7e:43:59:45:21:dd:5c:29:a1:46:68:
                    79:71:36:c6:56:f4:0c:1e:15:e8:c1:a1:75:7d:22:
                    0e:38:da:aa:f3:e4:f4:d7:c3:e9:2c:d0:e5:eb:e8:
                    72:76:1a:68:c8:e7:cc:fb:7f:66:58:aa:9e:cd:31:
                    26:b2:9b:ab:4c:07:2d:9e:53:74:2f:45:58:0b:ed:
                    ad:a9:3e:ed:ed:21:7d:66:7c:17:ae:8f:b8:cb:e9:
                    04:35:3a:94:ac:6a:87:1e:80:4e:b2:17:08:b0:f8:
                    c1:eb:eb:29:fb:19:a4:0c:58:28:eb:d5:2c:74:c8:
                    8c:34:0a:0e:8e:84:20:cf:15:24:3b:71:a9:ab:89:
                    c9:c8:44:58:74:e5:e8:1c:92:31:14:dd:3a:3f:2c:
                    da:e4:e6:62:a6:75:60:e0:72:b9:48:af:6a:0d:33:
                    97:26:25:61:f1:51:7c:ae:b9:6f:9d:9c:b7:9d:99:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AC:70:78:6B:8A:62:6F:C4:B4:9C:D2:13:58:CA:08:86:F8:98:04
            X509v3 Authority Key Identifier:
                keyid:8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133382e3235352e3137322e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:fc:44:6b:68:7c:73:f3:b3:c8:44:7e:af:b9:f9:08:c0:
         4a:1c:3f:fb:82:40:f5:79:6c:db:dd:07:71:25:3a:04:1f:63:
         c4:fe:e9:a6:52:88:44:a9:f1:e3:99:2a:02:b1:48:a6:78:c0:
         b7:36:2c:cf:d9:90:73:a4:ac:00:fb:cb:a6:fb:c5:37:c1:c9:
         f4:05:f3:e9:c1:b0:13:57:06:59:d3:13:b7:28:2c:74:a1:35:
         ce:c2:c9:ea:7f:31:3d:65:7c:da:96:3e:e4:b0:24:ee:8a:c9:
         a4:4d:db:4e:e0:ef:42:0a:7b:68:9b:be:75:22:91:1b:e4:c6:
         6b:95:16:88:3c:27:f1:ce:c2:24:25:44:d0:fc:2f:db:38:40:
         97:86:27:df:a4:d5:c4:8e:e4:c7:a4:c1:23:9a:de:4b:63:77:
         21:45:f3:86:4c:6f:6d:0c:3b:71:3d:04:3c:e0:48:df:33:dd:
         ed:55:e3:a7:35:71:f1:8a:51:d1:c0:57:01:19:a9:b6:9f:4b:
         7a:25:5d:10:12:dc:ee:3f:04:0f:15:14:34:41:cc:5c:31:2d:
         e8:29:42:ad:79:46:ed:ca:99:42:1e:f0:9c:90:dd:b2:31:d3:
         fb:72:e9:de:81:a0:b2:0c:5c:54:f1:11:24:73:9c:31:4c:e3:
         5d:5b:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 01:14:46 2024 by rpki-client on console-ams.rpki-client.org