Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa
File:                     3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa (raw, json)
Hash identifier:          Rm6OaXXi9wQ1DWI8Ea3mIs5OyQeZyp3SpcjNa41LGJ4=
Subject key identifier:   D2:62:3B:6F:57:93:83:A2:1D:98:BB:6A:88:99:10:8A:31:36:F4:F9
Certificate issuer:       /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial:       6A2095BB41FB73371F22B77C8050F1E0A902176E
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa
Signing time:             Wed 03 Apr 2024 18:32:53 +0000
ROA not before:           Wed 03 Apr 2024 18:27:53 +0000
ROA not after:            Wed 02 Apr 2025 18:32:53 +0000
asID:                     52708
IP address blocks:        138.118.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:20:95:bb:41:fb:73:37:1f:22:b7:7c:80:50:f1:e0:a9:02:17:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Validity
            Not Before: Apr  3 18:27:53 2024 GMT
            Not After : Apr  2 18:32:53 2025 GMT
        Subject: CN=D2623B6F579383A21D98BB6A8899108A3136F4F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:e5:97:41:f6:c0:9d:52:38:3c:7a:2a:d2:
                    c7:26:f2:a9:ca:e9:50:c9:b8:f1:1f:f1:a8:f3:bf:
                    66:99:6d:78:e9:05:e2:c9:b2:b1:ff:9c:ab:20:8c:
                    1c:59:f4:18:bb:18:b3:6d:56:4d:a2:fe:64:bf:97:
                    fd:0d:f3:74:d1:7f:e4:37:c8:59:c4:e1:c4:a5:2a:
                    cf:fd:fe:91:25:25:3f:ef:71:08:da:89:7a:64:01:
                    91:08:86:79:c5:a3:a0:b8:0a:7a:7d:46:b0:39:8f:
                    8a:49:36:45:24:07:5b:98:de:47:26:91:e0:66:57:
                    19:c7:b8:b2:86:a0:d3:a1:65:cd:3b:f4:eb:a6:64:
                    fa:40:3d:03:01:65:40:e3:32:74:54:3c:bd:c1:b5:
                    2b:e1:8a:3f:f0:92:08:56:70:c2:01:e8:17:4a:94:
                    d2:c0:a7:00:82:e6:0e:50:98:17:cc:e1:65:ff:9e:
                    8a:1c:36:ee:c7:92:d6:3a:0f:c7:67:c0:8a:31:9e:
                    f4:0b:10:a4:2d:d1:ef:95:90:83:9f:bc:56:3b:2d:
                    4a:90:c3:ba:29:43:89:c8:a1:3a:74:7e:9f:2d:20:
                    86:70:24:29:27:b2:18:72:d8:b3:b7:e1:57:6b:92:
                    92:ce:f9:0d:dd:7b:2c:07:6b:73:9f:98:26:3e:18:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:62:3B:6F:57:93:83:A2:1D:98:BB:6A:88:99:10:8A:31:36:F4:F9
            X509v3 Authority Key Identifier:
                keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:de:2a:a2:c6:22:b3:be:09:a1:82:3f:2b:0d:22:f7:e5:8e:
         1f:52:c6:d1:d8:dd:8e:64:a7:89:71:c9:28:ca:db:53:85:8d:
         17:8c:8f:85:96:db:8f:76:0f:30:e0:98:d1:0c:e7:75:46:38:
         9f:08:85:4f:fc:8b:86:b4:98:18:77:a8:db:4a:c5:0c:12:3b:
         00:c2:67:6a:65:1c:41:c3:19:93:cb:31:30:f4:4e:ba:68:4a:
         8d:4d:53:8e:0d:fe:22:74:be:b8:0b:05:cd:00:b7:e2:7c:ae:
         11:2c:9b:38:e1:b3:bf:a5:e2:d0:7e:71:d8:ca:ba:7a:e1:45:
         f3:51:34:50:0f:5c:61:bc:b1:ca:72:89:46:ce:ae:99:4d:79:
         e5:18:d5:3f:d5:4a:eb:b1:83:19:70:f3:a2:71:09:1c:22:b3:
         8c:bf:77:14:90:9c:99:a9:e5:d6:a1:b2:3a:bd:23:02:f1:ec:
         46:51:21:62:6b:e0:33:c5:13:11:3e:ad:2b:27:90:6f:1f:26:
         9d:79:e5:f8:d0:58:1b:e1:17:ad:6e:3d:2a:06:9d:83:ef:7e:
         ee:c9:5d:6a:4a:35:1e:86:55:cf:46:f5:be:b6:7f:81:aa:4b:
         a4:16:05:99:c1:fd:0b:79:f6:d1:a2:ae:b9:41:49:8a:2e:20:
         8e:be:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:03 2024 by rpki-client on console-fra.rpki-client.org