Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3131372e3232302e302f32322d3232203d3e203238323130.roa
File:                     3133382e3131372e3232302e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          9T+EeR0aCd4VDaeXKl2wcPTPlvTlHOSwna5kPp8Nv4o=
Subject key identifier:   DE:56:30:50:36:20:D6:79:3F:52:2F:96:D7:07:F9:CD:5B:FA:8A:02
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       4F55912009D0734F3BB4E86DE397D2A108312158
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3131372e3232302e302f32322d3232203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:48 +0000
ROA not before:           Thu 04 Apr 2024 04:32:48 +0000
ROA not after:            Thu 03 Apr 2025 04:37:48 +0000
asID:                     28210
IP address blocks:        138.117.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:55:91:20:09:d0:73:4f:3b:b4:e8:6d:e3:97:d2:a1:08:31:21:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:48 2024 GMT
            Not After : Apr  3 04:37:48 2025 GMT
        Subject: CN=DE5630503620D6793F522F96D707F9CD5BFA8A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:26:0a:03:73:f2:fd:46:c3:75:6c:af:9c:
                    0b:f5:ee:fd:56:9a:92:02:42:39:ed:b0:f8:4a:09:
                    07:de:32:c9:27:07:de:ba:66:59:2c:75:48:e7:c6:
                    bf:f2:b7:1a:3d:61:ef:f8:eb:fa:a1:af:25:d1:c5:
                    5f:ff:1c:62:03:0e:46:c1:e2:d9:79:a6:26:1d:b6:
                    4a:20:8c:27:5f:f0:e3:4a:e6:aa:67:be:22:2f:90:
                    c1:7a:b8:a7:52:68:ed:f2:f1:71:da:2e:dd:02:91:
                    11:e6:0d:14:11:65:65:74:d6:a7:e5:29:a3:90:ee:
                    51:b5:b1:2e:72:23:e5:03:e7:23:63:d7:b2:09:ac:
                    68:78:f4:df:9d:da:b4:af:76:12:20:e9:6d:e3:2a:
                    c2:88:32:75:9a:7c:eb:3e:e2:ca:05:52:40:50:21:
                    2d:f1:c5:a4:e1:be:43:22:92:26:0b:90:34:bf:e1:
                    9b:63:bc:ec:dc:8b:94:13:da:78:74:b8:c7:7e:c7:
                    55:8b:be:04:4f:a3:92:78:4f:19:bc:88:57:5d:c0:
                    c0:63:aa:6e:70:77:96:c5:93:82:e3:fe:43:e8:d6:
                    ee:50:f6:73:1f:b9:84:2d:5b:f8:97:39:d9:8f:e0:
                    a4:49:05:8c:43:f3:bd:64:75:04:a8:ed:45:64:5f:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:56:30:50:36:20:D6:79:3F:52:2F:96:D7:07:F9:CD:5B:FA:8A:02
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3131372e3232302e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:1c:c1:c4:22:b5:f1:98:ea:6c:d4:52:74:19:86:e5:66:3c:
         45:d7:c8:f0:0d:fb:43:d5:37:63:1e:88:9f:77:24:19:2f:b7:
         8c:56:60:93:0c:d4:05:98:e3:0c:df:51:83:8a:3f:21:ca:86:
         79:0e:76:58:4c:35:32:99:e3:38:3c:30:05:a3:16:83:52:c3:
         64:bf:a6:4b:f6:e4:3b:f4:3c:b2:68:48:8c:24:9f:f7:f3:d2:
         05:31:fc:87:77:77:34:33:98:82:f9:19:f6:81:35:91:74:f2:
         51:ee:87:dd:59:93:aa:a7:75:97:50:ef:82:cc:b3:4f:1f:f2:
         37:f9:21:dd:cd:e6:ae:ce:01:f3:33:03:36:35:37:b9:fe:a1:
         5d:ca:4e:2d:75:83:78:72:40:c2:30:2a:1a:15:00:50:02:39:
         42:32:b9:f9:e8:7c:05:c3:5a:9b:df:6f:83:0f:27:4f:8c:13:
         30:ef:6b:75:22:c5:98:42:0e:15:0b:9a:43:d9:40:2d:32:cc:
         c7:d0:5e:f8:25:c1:57:c0:f9:1f:e4:09:66:6d:01:7f:06:0e:
         24:8a:81:83:8a:33:6c:b6:81:6e:7f:db:50:d6:72:be:a6:fd:
         7c:44:fc:85:94:9c:b4:c2:84:02:f6:6f:ae:5b:89:85:bf:2b:
         e4:c0:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org