Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa
File:                     3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa (raw, json)
Hash identifier:          nBGoAthPclEQ6n6IsGf9xP34x7Jk17kKSO5RWE3IMZA=
Subject key identifier:   61:7A:D6:75:04:64:97:BF:98:FF:67:EA:14:23:D5:9F:20:C8:83:D9
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       6AF098FD2E3C51F56D3800FA39117647B1D039CB
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa
Signing time:             Thu 07 Nov 2024 01:23:52 +0000
ROA not before:           Thu 07 Nov 2024 01:18:52 +0000
ROA not after:            Thu 06 Nov 2025 01:23:52 +0000
asID:                     263444
IP address blocks:        138.36.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f0:98:fd:2e:3c:51:f5:6d:38:00:fa:39:11:76:47:b1:d0:39:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov  7 01:18:52 2024 GMT
            Not After : Nov  6 01:23:52 2025 GMT
        Subject: CN=617AD675046497BF98FF67EA1423D59F20C883D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:44:59:a1:50:2a:f1:fd:50:32:db:23:d3:
                    05:f1:2f:25:a2:be:04:54:40:fe:8b:10:ed:75:37:
                    f2:c5:07:de:af:6d:fc:63:6d:9f:51:76:a8:7a:83:
                    6d:81:4c:c5:e9:14:d1:b5:0e:c0:cd:45:ad:63:d7:
                    2d:c7:c5:83:88:c1:61:bb:39:ed:56:68:a8:83:6c:
                    51:d2:60:a8:17:ae:02:5b:9a:8e:10:31:3f:8a:96:
                    45:70:b3:43:b9:c3:c5:d6:d8:52:31:1c:77:4a:af:
                    dd:6c:35:85:8d:77:15:2e:bf:97:c6:c3:9a:e7:3b:
                    20:92:11:46:5c:d2:94:9b:dd:78:c3:39:33:99:54:
                    50:97:32:2c:05:2d:a8:7f:54:2c:d7:b5:e2:db:78:
                    41:eb:01:36:29:bb:76:33:83:69:ed:0c:29:e6:5e:
                    77:47:76:f5:43:2f:b1:da:e4:c0:cf:6a:b1:0c:8b:
                    b6:a6:6f:51:d7:f5:f2:7b:a4:b5:d6:4e:c7:20:02:
                    38:fc:ba:17:45:91:e0:99:d1:7f:d5:fe:58:45:eb:
                    9b:e4:12:a3:49:ae:0a:ba:f8:af:8b:5f:8d:37:c1:
                    86:5a:4e:42:d2:7c:e6:19:c5:db:b0:1a:e8:6d:45:
                    f2:f1:d1:2c:bd:90:e0:2d:62:0f:42:53:c0:9c:ab:
                    76:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7A:D6:75:04:64:97:BF:98:FF:67:EA:14:23:D5:9F:20:C8:83:D9
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3232203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:b4:ba:f2:5f:90:0b:3c:e0:42:c0:07:c4:09:d8:0e:86:64:
         94:6b:57:42:5b:bf:dc:c3:d5:d3:61:72:a1:5b:38:ec:5b:81:
         e9:90:47:e9:cb:32:97:ac:88:40:5f:ae:41:2d:8c:ce:49:0b:
         35:96:0f:cf:ea:f9:55:ce:43:e3:f5:c7:3b:94:84:92:ce:8a:
         bc:54:7a:af:5f:ba:1f:01:d6:11:c0:9c:b2:e4:46:f0:d7:32:
         95:58:48:1e:88:7f:6c:8a:35:bb:7d:a2:74:f7:e1:16:e1:4f:
         97:b1:01:f7:92:df:0c:08:81:3b:b2:fd:97:a2:8e:03:ba:b6:
         dd:0e:15:85:0a:db:83:de:89:42:e9:04:1b:e0:70:6d:a5:e8:
         65:e9:4f:c8:3c:20:00:54:71:a4:aa:d6:95:a1:68:e9:14:5a:
         c0:c7:b5:4a:d0:14:59:7b:34:c5:d3:f8:1c:9b:89:c2:12:0b:
         e2:93:c9:1d:87:4f:ea:1a:e2:bb:54:02:d1:4e:da:4c:88:7c:
         7b:1c:9b:4b:0f:5d:ac:45:e0:4a:b4:b1:11:9f:ed:0e:b7:35:
         7d:6c:57:2b:03:ae:39:59:d7:7c:41:e1:25:d5:e4:76:29:87:
         7d:14:6a:fc:c7:d1:89:3f:7a:81:66:95:80:31:8f:7b:1c:14:
         2c:f2:aa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org