Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3133382e3230342e3138382e302f32322d3234203d3e20323633393138.roa
File:                     3133382e3230342e3138382e302f32322d3234203d3e20323633393138.roa (raw, json)
Hash identifier:          KMnp7f5pMWdoseKllwgc0SC69/1fymJloUHF0B/B4ng=
Subject key identifier:   AC:32:72:54:37:23:98:13:E7:96:AC:81:57:64:86:51:B5:33:8C:D5
Certificate issuer:       /CN=6837437B682D69085C3574DE4EE122A490D3C359
Certificate serial:       3266B7B5A668FA67E04490AD65C67F7898F970A5
Authority key identifier: 68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3133382e3230342e3138382e302f32322d3234203d3e20323633393138.roa
Signing time:             Wed 03 Apr 2024 18:32:12 +0000
ROA not before:           Wed 03 Apr 2024 18:27:12 +0000
ROA not after:            Wed 02 Apr 2025 18:32:12 +0000
asID:                     263918
IP address blocks:        138.204.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl
                          rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:66:b7:b5:a6:68:fa:67:e0:44:90:ad:65:c6:7f:78:98:f9:70:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6837437B682D69085C3574DE4EE122A490D3C359
        Validity
            Not Before: Apr  3 18:27:12 2024 GMT
            Not After : Apr  2 18:32:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:24:c8:dc:a5:01:8b:29:f8:ce:ed:1a:a6:
                    1c:e8:26:66:f6:92:bc:0f:05:5a:ea:2b:a8:ad:c3:
                    2d:79:36:ae:96:9b:67:40:fb:a1:0a:0b:48:c6:98:
                    a5:71:18:94:77:3a:a9:28:dc:c9:2b:19:ac:64:e1:
                    2c:0c:8c:47:8c:8e:26:8d:96:32:9c:53:dd:67:57:
                    ac:bc:b3:01:b0:30:c7:3a:8c:a1:4e:17:56:41:f8:
                    41:e4:02:2d:15:1e:3f:92:b7:ea:7a:1a:39:a1:bd:
                    33:de:ca:2c:71:21:46:2d:60:c3:4a:df:95:12:7b:
                    52:d2:21:f7:1a:9b:af:74:a3:89:6f:79:6c:0c:40:
                    ed:23:4b:06:ba:e7:01:40:4f:92:c6:ce:a6:58:cd:
                    83:5d:ae:83:62:3f:86:66:fa:f4:41:ce:b0:a5:9c:
                    e0:b8:fe:24:aa:38:63:dd:76:8a:97:b3:6d:cf:83:
                    29:f7:27:82:94:dd:f2:c1:6e:9e:d3:79:a5:ce:4b:
                    09:1c:04:35:2e:d8:14:48:65:e6:d5:fb:c1:ec:16:
                    0b:30:7a:4e:8a:c8:9d:bf:d0:9c:4f:fa:d4:b4:f5:
                    6c:b7:6b:8e:68:a6:24:ae:c7:9d:39:bd:6c:ed:7c:
                    74:5c:05:e1:27:96:0c:06:59:17:df:1c:9c:6e:4b:
                    f8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:32:72:54:37:23:98:13:E7:96:AC:81:57:64:86:51:B5:33:8C:D5
            X509v3 Authority Key Identifier:
                keyid:68:37:43:7B:68:2D:69:08:5C:35:74:DE:4E:E1:22:A4:90:D3:C3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/6837437B682D69085C3574DE4EE122A490D3C359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6837437B682D69085C3574DE4EE122A490D3C359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/1/3133382e3230342e3138382e302f32322d3234203d3e20323633393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:26:fb:24:be:9c:a7:6d:41:b7:f1:c5:d6:f0:a5:71:14:e6:
         27:26:8c:4c:a9:16:94:7a:62:ad:35:c4:84:d5:c6:db:8b:10:
         3e:95:48:c1:27:9c:24:c6:04:33:d4:8b:d4:ba:57:0e:74:59:
         84:b6:f1:02:29:a6:3c:c1:eb:b2:71:ed:5b:c5:24:77:95:ab:
         50:a6:b0:1a:41:6f:61:1f:ff:a0:e9:1e:aa:98:40:1d:58:f1:
         cb:82:56:20:9a:f5:42:0f:db:13:56:98:cc:6c:73:f6:93:1c:
         f4:dc:82:20:0c:77:93:5e:1a:ce:02:03:75:3d:61:22:d8:0b:
         92:b7:2e:3e:68:66:c3:df:d1:29:24:a5:4e:57:d9:a9:47:d9:
         37:1f:1b:75:cf:67:64:c3:3b:61:d5:d3:1a:62:91:09:7f:a0:
         72:b4:d0:e7:5e:1e:0b:05:f9:9c:2b:0e:ac:23:92:47:a3:16:
         8c:1c:61:24:5b:36:12:ef:6e:7e:fa:ea:2a:cb:3c:69:81:66:
         e7:8c:13:41:2e:62:90:84:ea:4f:c3:cc:2b:ba:4a:66:ce:6f:
         f7:89:45:5a:25:25:34:f4:9b:01:d3:e3:4e:d5:b9:ac:4b:50:
         42:ed:6e:db:4b:d7:b3:96:e7:0e:08:0b:74:ff:63:46:52:92:
         d5:91:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org