Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa
File:                     3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          70ouJYShufzbj3mow7ovZmOs/D0qIWkGIM2XOKYi5uQ=
Subject key identifier:   0A:3C:12:53:88:BE:7D:F5:AB:80:47:2B:E8:B9:C3:2D:2A:9D:B9:8F
Certificate issuer:       /CN=D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29
Certificate serial:       2B56C76AC17679CE158B918DCA87C41363E6C8D7
Authority key identifier: D2:29:FD:3B:0E:20:6E:DD:EC:D6:4C:B0:88:F2:CA:5D:99:F5:CB:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa
Signing time:             Mon 10 Jun 2024 23:56:09 +0000
ROA not before:           Mon 10 Jun 2024 23:51:09 +0000
ROA not after:            Mon 09 Jun 2025 23:56:09 +0000
asID:                     263444
IP address blocks:        138.36.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:56:c7:6a:c1:76:79:ce:15:8b:91:8d:ca:87:c4:13:63:e6:c8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29
        Validity
            Not Before: Jun 10 23:51:09 2024 GMT
            Not After : Jun  9 23:56:09 2025 GMT
        Subject: CN=0A3C125388BE7DF5AB80472BE8B9C32D2A9DB98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ec:10:d1:8a:35:1c:8c:06:2b:cd:ef:7e:b7:
                    d3:9e:03:33:87:7b:47:0a:45:2e:2c:d9:b9:5c:9e:
                    c9:ae:47:a4:bb:9e:81:ce:b0:b4:c6:f9:63:d9:3f:
                    f6:6d:ae:ef:14:28:b8:16:d3:b4:cb:d0:79:29:21:
                    41:6b:e9:92:f2:ed:26:79:33:9a:e7:4d:61:fd:e7:
                    3b:85:9d:36:85:21:e1:98:02:4f:0f:ae:0c:38:19:
                    88:fb:c2:46:47:6f:ef:70:3f:4e:00:b9:fd:0b:dc:
                    e5:24:fc:66:49:0d:0e:9e:ce:98:50:82:97:f0:19:
                    2f:9f:9d:9d:c0:89:0d:1a:06:67:84:a6:f8:92:7c:
                    48:ee:6b:e2:01:79:fb:e4:6c:53:a6:c0:44:87:f2:
                    bc:d8:b9:db:28:9e:53:19:af:7f:78:f6:bd:3b:48:
                    f7:16:17:cc:7d:00:d5:d3:28:80:e8:1b:4b:a9:e6:
                    81:94:0f:22:6b:dc:e2:96:df:a3:8f:31:d2:7a:96:
                    0e:4a:d8:d4:76:40:1a:13:53:f2:2b:53:46:9a:e7:
                    95:a1:a1:ce:db:38:5c:5e:ac:99:64:f5:93:1b:58:
                    74:de:67:d6:64:9e:b7:1d:40:3b:fc:71:16:7d:82:
                    47:f1:61:fb:c6:fd:06:9a:98:3d:49:cf:c9:65:76:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3C:12:53:88:BE:7D:F5:AB:80:47:2B:E8:B9:C3:2D:2A:9D:B9:8F
            X509v3 Authority Key Identifier:
                keyid:D2:29:FD:3B:0E:20:6E:DD:EC:D6:4C:B0:88:F2:CA:5D:99:F5:CB:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D229FD3B0E206EDDECD64CB088F2CA5D99F5CB29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32322d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:d9:4b:38:7a:59:5b:24:af:f2:ab:8c:75:4c:77:51:64:6e:
         d8:df:ad:13:1a:86:0c:8a:75:3c:8d:14:e6:62:c3:62:59:70:
         e3:51:38:ed:a1:a1:ba:d1:5d:fc:e5:ca:9e:39:b8:83:f4:39:
         b5:3a:5b:b1:8b:ad:c1:1a:f1:b9:2d:87:91:87:dd:ff:b8:5f:
         ef:99:9b:6f:b6:1d:9e:40:71:e4:e8:18:16:b3:83:8f:a3:9d:
         62:c3:0a:90:7e:04:5c:ba:a9:b0:fc:25:09:9b:35:31:ef:dc:
         cd:00:72:73:8a:09:dc:b5:41:37:89:4c:a3:9d:46:71:03:29:
         81:17:b4:ee:11:04:15:80:ac:c4:50:6c:1d:98:36:c2:f6:93:
         44:a8:63:15:c1:0b:02:17:d3:25:32:6b:39:6f:2c:a5:bb:66:
         37:ce:80:84:7a:a5:ab:77:1b:42:5c:3d:74:d9:d7:5c:17:b9:
         87:68:ab:c4:63:80:76:a6:10:28:05:f7:f9:75:8d:7f:71:c7:
         68:16:e5:5a:92:bb:e2:6a:af:5e:78:a1:59:46:bc:58:fd:b8:
         17:b3:22:81:3e:f5:69:53:f3:f8:c3:0d:b1:21:44:1d:86:c6:
         5e:eb:88:7a:39:60:ee:44:7f:c8:eb:6c:34:37:83:9d:33:ba:
         37:e4:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:43:50 2024 by rpki-client on console-ams.rpki-client.org