Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa
File:                     3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          EgKXwk3eZGkcpvETYEThJ8HCS0RwOdOWYhHVVq3kcK4=
Subject key identifier:   1A:B9:B8:CF:E9:F7:28:44:B8:79:E0:02:8E:9E:18:44:DB:7D:19:95
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       068FE0A3F15353DDFF58F9527518566ACF57E991
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa
Signing time:             Thu 07 Nov 2024 01:23:50 +0000
ROA not before:           Thu 07 Nov 2024 01:18:50 +0000
ROA not after:            Thu 06 Nov 2025 01:23:50 +0000
asID:                     263444
IP address blocks:        138.36.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8f:e0:a3:f1:53:53:dd:ff:58:f9:52:75:18:56:6a:cf:57:e9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov  7 01:18:50 2024 GMT
            Not After : Nov  6 01:23:50 2025 GMT
        Subject: CN=1AB9B8CFE9F72844B879E0028E9E1844DB7D1995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0c:52:0a:24:e5:f6:3f:ea:cc:d6:e7:55:ef:
                    24:6f:a1:07:d8:0c:57:79:3b:ee:2f:a5:ca:34:2b:
                    2f:ac:69:74:34:94:10:35:be:40:cd:00:11:68:82:
                    d5:ae:30:4d:06:68:5f:74:11:bd:63:6a:62:cf:c0:
                    e9:78:09:c9:36:cc:9d:16:d7:e1:16:56:59:45:a0:
                    3d:cd:dc:7a:48:66:62:d1:72:20:ea:ee:e1:e4:dd:
                    ee:73:9e:fb:24:00:d7:58:9b:ac:09:bb:6e:72:8a:
                    ab:26:58:69:65:cc:b0:6e:fa:08:86:76:58:31:60:
                    a1:af:41:9a:18:44:be:bb:47:ff:fe:20:ea:82:2c:
                    b8:1a:da:6a:57:25:7a:e1:86:98:b3:3e:07:89:3e:
                    e2:ab:76:b4:aa:fa:b7:92:bb:20:4c:7f:99:3d:71:
                    19:25:41:e7:94:33:b1:b4:13:18:5f:19:91:f9:60:
                    b3:2f:b4:8d:50:a2:a8:c6:c0:3b:0d:70:8a:68:6c:
                    31:02:03:35:4f:99:85:c0:97:f2:c2:52:64:a8:df:
                    65:75:6a:e6:44:a7:51:9d:8a:7a:8e:1b:45:1f:df:
                    b3:ca:2e:58:f9:65:ed:7d:2e:67:8e:0b:44:03:06:
                    13:0d:08:0a:ba:59:a5:bb:d2:00:c6:99:8d:a9:5f:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B9:B8:CF:E9:F7:28:44:B8:79:E0:02:8E:9E:18:44:DB:7D:19:95
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136342e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:9a:e5:b0:3c:08:d3:4c:93:db:a3:39:87:65:d5:42:ca:77:
         b2:c1:be:36:3c:6f:11:0d:8e:82:dc:8a:72:07:ab:6a:de:d7:
         69:d7:4f:d9:35:23:43:76:9f:65:ea:b0:4f:6d:45:96:1c:18:
         27:6c:3e:c6:9c:91:29:4f:08:df:ce:69:d9:4b:40:16:7a:10:
         9e:95:ae:95:01:a9:a3:56:57:fd:28:6b:45:93:16:4e:06:ac:
         4a:22:3f:1e:96:2f:48:e9:ed:1c:79:88:06:d1:c2:46:f1:bf:
         43:ee:bf:4e:dd:42:61:cb:fc:09:5e:49:f5:cb:ab:a7:94:24:
         d8:56:06:41:0d:88:71:c2:2c:3b:c1:68:05:68:8b:b6:6f:01:
         4c:73:c6:7b:5d:c3:24:bb:64:44:0c:00:89:11:9b:e0:2b:cd:
         d8:ba:b6:dd:c5:5c:5d:3e:e2:b8:a8:04:9b:de:8e:6d:96:69:
         7a:3e:70:dc:0f:5f:e4:79:a8:02:ec:64:b2:ac:3b:e3:98:dd:
         7b:7a:60:dc:15:55:91:cb:a4:a6:f7:73:04:a6:98:24:b5:f1:
         c6:98:6e:e7:01:7e:86:2e:3a:31:a2:4c:1f:d0:a0:48:e8:ce:
         c1:64:35:52:1b:49:b7:20:c0:2b:e8:9f:80:d9:10:0f:68:94:
         86:cf:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:54 2024 by rpki-client on console-fra.rpki-client.org