Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa
File:                     3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier:          tLk+jKnuHbW7071lu3EN6wtlAmGvCArmwVk12TD6VxU=
Subject key identifier:   A0:A8:FE:7F:B5:9E:6D:22:45:A7:F9:F4:40:4B:24:50:E7:56:8A:80
Certificate issuer:       /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial:       4CA50583866CCCFCC507906D8D17E6A9E8BF4975
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa
Signing time:             Thu 04 Apr 2024 06:53:54 +0000
ROA not before:           Thu 04 Apr 2024 06:48:54 +0000
ROA not after:            Thu 03 Apr 2025 06:53:54 +0000
asID:                     262645
IP address blocks:        138.97.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl
                          rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a5:05:83:86:6c:cc:fc:c5:07:90:6d:8d:17:e6:a9:e8:bf:49:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
        Validity
            Not Before: Apr  4 06:48:54 2024 GMT
            Not After : Apr  3 06:53:54 2025 GMT
        Subject: CN=A0A8FE7FB59E6D2245A7F9F4404B2450E7568A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:b2:1c:71:3c:2a:41:22:dc:58:24:37:dd:
                    12:fb:22:b5:88:9d:67:1e:2f:fa:b9:f6:89:ee:c4:
                    e3:a4:87:f1:50:9c:e9:ae:01:ce:2e:9d:47:21:cc:
                    d6:0a:35:bd:e8:38:0f:89:1d:91:f1:ff:ab:f3:f9:
                    74:7c:46:08:1e:6f:38:65:78:09:e7:c0:08:2b:ce:
                    e6:31:cd:21:03:cc:6f:4f:86:3d:c0:7a:6c:57:48:
                    62:74:dd:d0:13:01:4e:2f:d8:69:bc:65:61:c4:fa:
                    1b:3f:1b:22:ae:bb:f8:d8:9c:aa:0a:e9:f2:42:43:
                    18:31:e7:00:85:c4:89:88:96:0f:b9:85:d8:17:56:
                    58:76:ed:ae:8c:25:a3:50:be:a3:17:64:f2:a8:06:
                    08:a0:58:c8:ca:70:1b:3c:d8:71:40:e2:82:2a:04:
                    da:68:9b:5d:b6:8f:a8:5a:b2:67:44:fa:c1:da:ac:
                    ec:19:50:8f:d4:88:ef:39:4d:79:4e:99:3f:51:e8:
                    a4:47:63:e5:00:e9:94:fc:f9:3c:de:34:2d:2e:42:
                    66:d5:60:6c:00:14:cd:93:de:95:46:b5:8f:cc:62:
                    16:ce:d8:76:cf:64:8f:b7:b6:a8:88:ac:b2:e3:be:
                    22:b3:11:76:93:32:15:5d:f3:54:11:a8:74:67:6c:
                    72:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A8:FE:7F:B5:9E:6D:22:45:A7:F9:F4:40:4B:24:50:E7:56:8A:80
            X509v3 Authority Key Identifier:
                keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:3a:fd:af:fc:c8:8a:14:e2:f6:0d:a5:4c:75:71:e5:14:a7:
         ce:f3:7e:da:9e:f0:f1:a4:ed:9d:2c:b2:8f:88:5f:35:f8:9e:
         18:31:27:f3:ee:2b:e0:3b:ef:3c:52:83:fc:20:3a:ce:e8:b5:
         8c:e0:b1:e1:70:0a:a5:e5:f9:93:87:03:d3:51:be:3f:bc:14:
         8c:3f:4c:9a:65:f2:2d:f9:02:f3:a0:47:1e:77:18:dd:28:71:
         4d:7e:8b:21:61:f6:33:fd:5e:00:5b:8b:2e:79:e1:0e:55:4c:
         cb:a9:c1:af:d8:e1:7f:df:77:f2:e1:dc:5c:86:55:d9:5e:c8:
         f5:3f:e7:b5:d7:7c:31:87:bd:2c:2c:fd:e6:d7:3d:63:74:38:
         fd:f1:1e:fd:54:66:5e:28:a8:dd:e1:fa:42:82:41:b2:db:53:
         44:bc:a3:85:f7:17:7c:64:aa:9c:b8:0e:5b:bd:7f:47:34:10:
         02:f4:7f:28:5d:7b:00:76:c1:5d:e0:03:8f:eb:ac:bb:d0:a9:
         74:3f:e0:40:5b:0f:99:a3:ce:bb:19:ec:d6:c3:9e:a4:c7:0e:
         5d:2f:b4:93:5a:d7:e8:eb:6b:2f:34:11:2a:78:eb:10:30:3b:
         7d:23:1e:69:ed:83:0e:91:f3:22:d5:7b:6c:f0:f8:71:21:2b:
         7e:24:83:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:44 2024 by rpki-client on console-fra.rpki-client.org