Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa
File:                     3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa (raw, json)
Hash identifier:          CJz4q1S5ffm097zCYOGzoWMPtDg0mQmqUXdRXkTInKE=
Subject key identifier:   7E:F2:D8:76:0F:C2:AF:BD:7D:D4:3B:8F:87:EC:F1:E9:11:9F:4F:A2
Certificate issuer:       /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial:       689352B69F395956C8D3499DF45D355168D0191F
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa
Signing time:             Wed 03 Apr 2024 18:32:53 +0000
ROA not before:           Wed 03 Apr 2024 18:27:53 +0000
ROA not after:            Wed 02 Apr 2025 18:32:53 +0000
asID:                     52708
IP address blocks:        138.118.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:93:52:b6:9f:39:59:56:c8:d3:49:9d:f4:5d:35:51:68:d0:19:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Validity
            Not Before: Apr  3 18:27:53 2024 GMT
            Not After : Apr  2 18:32:53 2025 GMT
        Subject: CN=7EF2D8760FC2AFBD7DD43B8F87ECF1E9119F4FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:0a:e2:ff:88:d9:ab:b6:1a:69:f0:6c:02:
                    17:c0:61:f7:8a:dd:a6:d6:24:7a:d9:02:8d:14:9a:
                    de:b0:44:b4:b9:c0:63:23:84:64:9f:48:58:54:9e:
                    ee:fd:cd:af:86:b4:69:97:95:07:33:f9:f4:1b:ee:
                    72:d8:3e:b2:47:2b:15:f0:13:a3:ae:50:be:c8:ef:
                    ad:43:75:cd:2d:83:2b:6f:44:90:b4:9c:3b:e4:ea:
                    23:df:b1:40:08:f9:6c:41:80:a3:48:b7:7a:aa:18:
                    f8:42:85:b0:28:4a:39:5e:ef:bd:db:6f:2d:19:e4:
                    10:7c:7c:eb:13:fa:ea:e4:22:ac:e7:61:c4:ee:03:
                    06:e0:22:3f:b7:d5:43:9e:56:da:1f:e8:fb:b9:eb:
                    cd:7c:70:3f:46:e5:16:a0:56:66:ae:0d:d2:dc:7c:
                    2b:8f:da:e7:3a:b8:9d:39:4c:36:23:01:4a:e9:c1:
                    c3:f2:47:10:00:91:90:a2:63:fd:4a:e7:a1:cd:9e:
                    a6:c2:b9:ae:6f:b8:d6:16:9b:81:c6:1f:e5:85:75:
                    fc:36:d8:bb:e6:77:30:55:a9:88:c1:01:74:75:df:
                    da:e7:0d:12:d0:cb:26:85:df:a1:f5:a4:0e:90:57:
                    c2:29:6d:f9:8a:db:71:bf:55:27:1f:1a:78:61:3c:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F2:D8:76:0F:C2:AF:BD:7D:D4:3B:8F:87:EC:F1:E9:11:9F:4F:A2
            X509v3 Authority Key Identifier:
                keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3133382e3131382e3130302e302f32332d3233203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:39:fe:c1:3e:2a:28:57:7b:22:c4:a7:af:6a:96:a8:cf:06:
         0f:d8:92:94:3f:56:7b:c7:e8:c2:2f:88:dd:31:e8:22:80:aa:
         37:25:13:ce:25:bb:8c:26:e4:97:cc:0d:b7:10:2b:0f:ca:64:
         87:dd:88:64:72:92:ed:49:ae:fa:52:81:41:4c:14:c4:f7:3a:
         52:45:e6:0b:18:7f:b3:de:a8:ea:f7:a9:25:f0:65:d3:38:2f:
         db:a9:62:50:93:c6:60:b6:14:b2:12:10:64:ba:04:b9:cd:60:
         61:05:88:c1:59:79:e1:38:2b:04:5a:a9:24:b2:f7:8b:c6:21:
         51:9e:7a:6e:08:ce:c3:db:0f:be:ab:ea:da:67:de:d6:02:28:
         08:12:2c:3a:3b:3f:f0:96:61:46:4b:a2:ac:2a:b6:b0:99:ff:
         92:4e:30:87:6b:ae:df:9b:d3:b1:ed:0c:db:04:25:57:e8:3f:
         4f:72:7f:b1:a6:7e:c5:a8:10:7d:cf:06:bd:99:7a:a0:38:cd:
         67:05:83:b6:2e:1e:db:05:45:59:d0:08:52:b1:66:75:5d:f2:
         6d:df:dc:ad:63:fc:96:33:04:c1:78:aa:d9:94:d6:e6:fd:b0:
         c0:60:22:37:c8:e9:44:51:9f:68:8b:82:e9:04:91:f9:16:d5:
         56:1b:04:d5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaJNStp85WVbI00md9F01UWjQGR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxODVFMUFBQUJERUFFNDJFNTgxMjlCREVBNENGRUNG
MEM4RjdDQjAeFw0yNDA0MDMxODI3NTNaFw0yNTA0MDIxODMyNTNaMDMxMTAvBgNV
BAMTKDdFRjJEODc2MEZDMkFGQkQ3REQ0M0I4Rjg3RUNGMUU5MTE5RjRGQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGCgri/4jZq7YaafBsAhfAYfeK
3abWJHrZAo0Umt6wRLS5wGMjhGSfSFhUnu79za+GtGmXlQcz+fQb7nLYPrJHKxXw
E6OuUL7I761Ddc0tgytvRJC0nDvk6iPfsUAI+WxBgKNIt3qqGPhChbAoSjle773b
by0Z5BB8fOsT+urkIqznYcTuAwbgIj+31UOeVtof6Pu56818cD9G5RagVmauDdLc
fCuP2uc6uJ05TDYjAUrpwcPyRxAAkZCiY/1K56HNnqbCua5vuNYWm4HGH+WFdfw2
2LvmdzBVqYjBAXR139rnDRLQyyaF36H1pA6QV8IpbfmK23G/VScfGnhhPB7XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfvLYdg/Cr7191DuPh+zx6RGfT6IwHwYDVR0j
BBgwFoAUBhheGqq96uQuWBKb3qTP7PDI98swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV
Z00vMS8wNjE4NUUxQUFBQkRFQUU0MkU1ODEyOUJERUE0Q0ZFQ0YwQzhGN0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MTg1RTFBQUFCREVBRTQy
RTU4MTI5QkRFQTRDRkVDRjBDOEY3Q0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxNnVHM2FXZkFCbnRLYm84djVwUnJBdGZvaU5XeWd3amVMbW5FUHZYVWdNLzEv
MzEzMzM4MmUzMTMxMzgyZTMxMzAzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKdmQwDQYJKoZIhvcNAQELBQADggEBAD85/sE+
KihXeyLEp69qlqjPBg/YkpQ/VnvH6MIviN0x6CKAqjclE84lu4wm5JfMDbcQKw/K
ZIfdiGRyku1JrvpSgUFMFMT3OlJF5gsYf7PeqOr3qSXwZdM4L9upYlCTxmC2FLIS
EGS6BLnNYGEFiMFZeeE4KwRaqSSy94vGIVGeem4IzsPbD76r6tpn3tYCKAgSLDo7
P/CWYUZLoqwqtrCZ/5JOMIdrrt+b07HtDNsEJVfoP09yf7GmfsWoEH3PBr2ZeqA4
zWcFg7YuHtsFRVnQCFKxZnVd8m3f3K1j/JYzBMF4qtmU1ub9sMBgIjfI6URRn2iL
gukEkfkW1VYbBNU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:41 2024 by rpki-client on console-ams.rpki-client.org