Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/3133382e302e3134302e302f32322d3234203d3e20323634353531.roa
File:                     3133382e302e3134302e302f32322d3234203d3e20323634353531.roa (raw, json)
Hash identifier:          QUb64420G6uTmmRr4+ZQFrSWI+fEz+k8GhnMlk77jAA=
Subject key identifier:   11:EA:D8:FF:36:84:81:D1:F3:F2:AA:23:91:E9:4E:FD:A1:5E:9D:74
Certificate issuer:       /CN=4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9
Certificate serial:       17A7464103441B33F8C9FD50FFE90B9DEC4B917C
Authority key identifier: 4C:9D:D3:B6:BE:C3:85:CE:95:3F:CF:51:F1:93:49:CE:E8:A0:79:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/3133382e302e3134302e302f32322d3234203d3e20323634353531.roa
Signing time:             Fri 16 Aug 2024 16:16:33 +0000
ROA not before:           Fri 16 Aug 2024 16:11:33 +0000
ROA not after:            Fri 15 Aug 2025 16:16:33 +0000
asID:                     264551
IP address blocks:        138.0.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.crl
                          rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a7:46:41:03:44:1b:33:f8:c9:fd:50:ff:e9:0b:9d:ec:4b:91:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9
        Validity
            Not Before: Aug 16 16:11:33 2024 GMT
            Not After : Aug 15 16:16:33 2025 GMT
        Subject: CN=11EAD8FF368481D1F3F2AA2391E94EFDA15E9D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:52:b1:17:a7:46:12:36:68:bb:cd:b0:c4:
                    32:93:51:ea:d1:e9:68:b8:bb:de:65:46:31:f5:d5:
                    11:68:3c:86:96:76:04:0c:b1:7c:f4:ac:c6:87:11:
                    83:aa:a9:a0:6f:72:9f:d0:11:86:2c:bf:29:28:a0:
                    be:6a:f0:ab:5d:22:39:03:0e:50:27:cb:83:c0:0a:
                    b6:51:1e:0b:12:ba:38:78:94:8b:eb:b4:26:fb:27:
                    a5:77:fe:a4:3d:21:37:c3:9c:0e:9d:e8:f8:4d:80:
                    9f:d9:96:47:4b:7d:24:92:a2:38:f3:69:ac:12:3d:
                    4c:50:56:92:9c:0b:58:84:76:77:45:eb:8b:f2:fd:
                    0b:0b:56:e6:5a:d7:80:85:d9:ac:86:37:6d:36:c6:
                    60:a0:08:7b:57:1d:0f:6b:b7:c7:1d:4d:f7:74:63:
                    a4:d3:f9:aa:2f:37:c4:64:32:b1:9a:b3:9a:93:5f:
                    1c:7a:b9:19:f5:34:c1:f1:0b:14:f8:58:b9:6b:6a:
                    42:5b:74:d6:ee:0f:2a:5e:6d:60:11:b8:e0:99:b5:
                    7f:4a:02:4a:70:ab:2d:86:21:91:f2:f6:c3:4f:39:
                    79:bc:49:23:df:17:70:a9:63:0f:7d:ea:6a:35:46:
                    65:27:d0:61:42:63:b9:b8:f0:e6:02:08:40:1f:2e:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EA:D8:FF:36:84:81:D1:F3:F2:AA:23:91:E9:4E:FD:A1:5E:9D:74
            X509v3 Authority Key Identifier:
                keyid:4C:9D:D3:B6:BE:C3:85:CE:95:3F:CF:51:F1:93:49:CE:E8:A0:79:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C9DD3B6BEC385CE953FCF51F19349CEE8A079E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/0/3133382e302e3134302e302f32322d3234203d3e20323634353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:51:52:72:e1:c1:55:72:da:b5:d9:d7:7c:fd:04:60:a0:1b:
         7d:2e:e1:4b:63:e9:32:bf:c3:79:2c:bb:c1:48:ba:1d:34:d4:
         97:81:ec:e9:68:1d:c2:a1:c8:aa:db:b1:77:4e:9a:48:3c:50:
         dd:61:44:ed:ff:ea:a8:77:6a:2c:fa:ad:7d:90:31:48:dc:1a:
         88:a3:26:e0:18:aa:eb:c6:28:3a:2f:98:73:c7:ad:d0:ac:e9:
         16:62:53:a0:93:83:80:48:86:0f:c7:4c:a7:e0:d4:37:9b:45:
         b6:5d:bf:39:0a:e4:08:dc:4f:05:99:20:5c:7a:ce:50:62:04:
         e6:5a:37:28:51:5a:8b:0f:0a:b4:f2:b0:d1:cd:ae:85:1b:fa:
         e9:d4:2e:c1:2e:db:98:90:20:71:b3:44:80:ec:49:9e:73:8d:
         99:8a:dc:58:df:1c:e6:0a:00:da:f6:06:85:55:7b:29:1b:e9:
         d2:a3:31:0b:02:cf:7d:50:f1:81:5b:f6:8a:64:ba:ef:a0:fe:
         f7:2f:4e:41:bf:cb:dd:f7:cf:fc:9d:e5:ba:15:02:08:13:41:
         1e:ba:d4:a5:44:16:c8:88:9d:79:6d:39:22:5f:f3:97:42:a9:
         18:3c:24:ec:7e:aa:e1:c3:ed:d8:4a:8d:44:d6:28:f0:d5:6f:
         4a:21:ca:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:03 2024 by rpki-client on console-ams.rpki-client.org