Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/3133382e39342e39362e302f32322d3234203d3e20323634313336.roa
File:                     3133382e39342e39362e302f32322d3234203d3e20323634313336.roa (raw, json)
Hash identifier:          uUjcG6o4AC7qnzR9yCo3aVYiPXlo8cvXru6W8lVZJog=
Subject key identifier:   18:87:53:19:41:CC:2F:FA:82:E1:5E:E7:48:9F:BD:95:FC:C0:BC:A4
Certificate issuer:       /CN=74AA35543A2DF00F88699C66FC46817694838CFA
Certificate serial:       209C3FA6B714FBDBB89EEACDFC7BB91A32017CFB
Authority key identifier: 74:AA:35:54:3A:2D:F0:0F:88:69:9C:66:FC:46:81:76:94:83:8C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74AA35543A2DF00F88699C66FC46817694838CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/3133382e39342e39362e302f32322d3234203d3e20323634313336.roa
Signing time:             Wed 21 Aug 2024 14:19:31 +0000
ROA not before:           Wed 21 Aug 2024 14:14:31 +0000
ROA not after:            Wed 20 Aug 2025 14:19:31 +0000
asID:                     264136
IP address blocks:        138.94.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/74AA35543A2DF00F88699C66FC46817694838CFA.crl
                          rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/74AA35543A2DF00F88699C66FC46817694838CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74AA35543A2DF00F88699C66FC46817694838CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9c:3f:a6:b7:14:fb:db:b8:9e:ea:cd:fc:7b:b9:1a:32:01:7c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74AA35543A2DF00F88699C66FC46817694838CFA
        Validity
            Not Before: Aug 21 14:14:31 2024 GMT
            Not After : Aug 20 14:19:31 2025 GMT
        Subject: CN=1887531941CC2FFA82E15EE7489FBD95FCC0BCA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:76:57:7e:7b:ad:62:a7:d7:58:b2:0b:4c:e0:
                    3f:16:d8:dc:d6:b6:a9:69:17:da:06:52:4a:66:53:
                    d9:25:87:67:e0:1e:f0:7e:0f:25:bd:1f:de:1b:6c:
                    cb:3e:26:f6:04:c9:78:ff:54:cb:1c:31:15:83:c1:
                    32:eb:c6:fc:8f:f2:98:52:f5:41:e0:06:b1:d8:6b:
                    14:86:2c:ea:05:f4:7f:64:22:9c:0d:96:d6:5e:a2:
                    96:31:50:fd:2f:85:b6:88:f2:ab:33:7f:ad:67:c8:
                    c6:e7:23:9e:29:48:9e:e7:67:61:89:a2:bc:0a:d6:
                    8a:54:f8:68:f3:1e:a2:00:3d:f2:00:54:f5:26:01:
                    93:47:94:7a:9f:c0:5c:df:c2:bb:37:c5:d1:f6:67:
                    b2:07:04:52:05:09:ea:95:b9:1d:14:9f:94:4d:44:
                    02:42:78:54:fe:ae:d6:16:b2:ef:24:38:1a:05:a3:
                    37:9a:98:61:1c:6a:f5:08:60:cb:b3:cb:7b:16:f7:
                    8b:8e:fb:7c:9b:6a:0a:17:a9:15:79:ff:66:ad:6d:
                    70:bc:29:f8:b4:cc:17:04:3e:97:87:2f:3d:62:5d:
                    1f:97:7e:e0:9f:75:1b:d5:f8:62:43:3e:d2:60:e3:
                    ad:64:20:09:2a:dd:80:91:24:c5:e5:31:09:9b:51:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:87:53:19:41:CC:2F:FA:82:E1:5E:E7:48:9F:BD:95:FC:C0:BC:A4
            X509v3 Authority Key Identifier:
                keyid:74:AA:35:54:3A:2D:F0:0F:88:69:9C:66:FC:46:81:76:94:83:8C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/74AA35543A2DF00F88699C66FC46817694838CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74AA35543A2DF00F88699C66FC46817694838CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VVYFA48J55KpbNCXG7XAGcM1FZ5Gy2CzCsdzrZwoQFu/0/3133382e39342e39362e302f32322d3234203d3e20323634313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:95:b6:35:6e:c6:00:74:4a:27:1d:71:8b:e8:ba:15:ca:
         b9:0f:48:94:45:0f:a7:3f:47:43:77:da:ec:e1:ed:e5:19:f3:
         d7:07:14:f6:1f:93:2a:87:4c:42:c6:f1:d8:39:c7:f8:63:0b:
         98:da:f9:fe:ab:d8:9c:c4:c9:0a:ec:cf:c0:27:a8:2b:7d:9c:
         3a:bd:9e:ee:9b:31:ed:4a:3f:d7:55:ca:b3:e0:31:75:e7:ec:
         38:46:56:64:ea:bd:8d:46:96:cb:1e:be:a1:20:28:79:a8:b2:
         cc:b4:97:ae:e1:3a:b3:6e:87:5e:7d:1b:fd:47:63:ef:6d:e4:
         93:ac:7a:60:c8:a0:35:fc:6c:ec:bb:4f:a9:a0:c2:9c:41:c5:
         a0:cd:63:fd:0d:fb:ec:fc:25:c8:42:1d:e0:98:55:50:bd:65:
         a6:3f:10:01:76:3e:30:b6:97:85:58:63:95:ff:6e:80:d6:ea:
         ad:87:02:f9:45:7d:c8:17:ef:67:64:b0:3d:43:ee:ef:01:37:
         77:f0:ba:d1:52:c4:5c:90:95:42:ef:37:25:a8:4c:4f:8d:d8:
         99:b4:32:44:5d:01:6d:bb:ca:78:3b:68:f5:57:2e:56:e1:9a:
         eb:b7:b2:79:a6:04:15:8c:12:5c:b6:5f:98:ae:04:de:dc:5e:
         7c:62:9f:42
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIJw/prcU+9u4nurN/Hu5GjIBfPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRBQTM1NTQzQTJERjAwRjg4Njk5QzY2RkM0NjgxNzY5
NDgzOENGQTAeFw0yNDA4MjExNDE0MzFaFw0yNTA4MjAxNDE5MzFaMDMxMTAvBgNV
BAMTKDE4ODc1MzE5NDFDQzJGRkE4MkUxNUVFNzQ4OUZCRDk1RkNDMEJDQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbdld+e61ip9dYsgtM4D8W2NzW
tqlpF9oGUkpmU9klh2fgHvB+DyW9H94bbMs+JvYEyXj/VMscMRWDwTLrxvyP8phS
9UHgBrHYaxSGLOoF9H9kIpwNltZeopYxUP0vhbaI8qszf61nyMbnI54pSJ7nZ2GJ
orwK1opU+GjzHqIAPfIAVPUmAZNHlHqfwFzfwrs3xdH2Z7IHBFIFCeqVuR0Un5RN
RAJCeFT+rtYWsu8kOBoFozeamGEcavUIYMuzy3sW94uO+3ybagoXqRV5/2atbXC8
Kfi0zBcEPpeHLz1iXR+XfuCfdRvV+GJDPtJg461kIAkq3YCRJMXlMQmbUR1ZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGIdTGUHML/qC4V7nSJ+9lfzAvKQwHwYDVR0j
BBgwFoAUdKo1VDot8A+IaZxm/EaBdpSDjPowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVZWWUZBNDhKNTVLcGJOQ1hHN1hBR2NNMUZaNUd5MkN6Q3NkenJad29R
RnUvMC83NEFBMzU1NDNBMkRGMDBGODg2OTlDNjZGQzQ2ODE3Njk0ODM4Q0ZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0QUEzNTU0M0EyREYwMEY4
ODY5OUM2NkZDNDY4MTc2OTQ4MzhDRkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlWVllGQTQ4SjU1S3BiTkNYRzdYQUdjTTFGWjVHeTJDekNzZHpyWndvUUZ1LzAv
MzEzMzM4MmUzOTM0MmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCil5gMA0GCSqGSIb3DQEBCwUAA4IBAQBOnpW2NW7G
AHRKJx1xi+i6Fcq5D0iURQ+nP0dDd9rs4e3lGfPXBxT2H5Mqh0xCxvHYOcf4YwuY
2vn+q9icxMkK7M/AJ6grfZw6vZ7umzHtSj/XVcqz4DF15+w4RlZk6r2NRpbLHr6h
ICh5qLLMtJeu4TqzbodefRv9R2PvbeSTrHpgyKA1/Gzsu0+poMKcQcWgzWP9Dfvs
/CXIQh3gmFVQvWWmPxABdj4wtpeFWGOV/26A1uqthwL5RX3IF+9nZLA9Q+7vATd3
8LrRUsRckJVC7zclqExPjdiZtDJEXQFtu8p4O2j1Vy5W4Zrrt7J5pgQVjBJctl+Y
rgTe3F58Yp9C
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:49 2024 by rpki-client on console-ams.rpki-client.org