Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136362e302f32342d3234203d3e20323633343434.roa
File:                     3133382e33362e3136362e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          vozeaLF6pmuOgSbFABDGZoUuganSya4IdYJcmaXl++U=
Subject key identifier:   34:B6:B7:FC:F8:2F:85:51:FA:11:7D:41:31:C2:7E:2E:1E:54:19:60
Certificate issuer:       /CN=414013A25F77129C74B069C1772DF23C085FA9FC
Certificate serial:       11B7238CCFBE8B8458E20A8B7578DA8FD8CC94E1
Authority key identifier: 41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136362e302f32342d3234203d3e20323633343434.roa
Signing time:             Mon 11 Nov 2024 15:03:25 +0000
ROA not before:           Mon 11 Nov 2024 14:58:25 +0000
ROA not after:            Mon 10 Nov 2025 15:03:25 +0000
asID:                     263444
IP address blocks:        138.36.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl
                          rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b7:23:8c:cf:be:8b:84:58:e2:0a:8b:75:78:da:8f:d8:cc:94:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414013A25F77129C74B069C1772DF23C085FA9FC
        Validity
            Not Before: Nov 11 14:58:25 2024 GMT
            Not After : Nov 10 15:03:25 2025 GMT
        Subject: CN=34B6B7FCF82F8551FA117D4131C27E2E1E541960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:20:8c:44:f2:aa:33:0f:c8:94:ae:71:1d:
                    e0:aa:ed:1a:ed:b1:a5:60:eb:6d:f8:10:d9:23:6c:
                    eb:e9:fa:c5:8d:86:40:4f:23:70:aa:92:03:40:69:
                    ea:6b:6f:a3:85:dd:5e:20:cf:56:d3:4c:41:7e:fe:
                    1b:e1:75:84:88:d1:db:70:d3:5c:90:f1:35:ba:94:
                    0d:b4:8a:8c:21:9f:ef:10:89:ca:2b:7e:45:db:d0:
                    40:51:e0:2b:64:5a:bd:f7:a2:d6:3a:a8:4f:fb:ba:
                    02:e5:0a:b4:3e:16:5b:a8:b6:f0:bd:05:e8:00:d6:
                    ea:98:2a:ba:77:63:2f:7e:b9:1c:37:64:54:8d:01:
                    f6:cc:e4:81:33:f0:fb:ee:b9:7e:c6:85:81:2b:a3:
                    85:9b:e0:30:07:58:71:e6:b2:d5:b5:a1:05:f1:1f:
                    4b:60:92:37:f3:66:b4:ab:1c:32:e7:33:df:93:c9:
                    75:6f:c6:e0:47:6d:43:ef:7a:d0:74:45:81:13:9d:
                    e9:19:eb:7c:6c:fd:f7:13:37:2b:03:0c:04:b2:16:
                    1d:19:1b:7c:39:7f:c4:3a:cf:78:c5:14:dd:9e:31:
                    0d:e7:f2:51:b9:4c:a5:5c:af:19:91:c2:26:87:7b:
                    8a:90:e9:0a:77:f7:62:78:09:1f:7b:6b:63:3c:43:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B6:B7:FC:F8:2F:85:51:FA:11:7D:41:31:C2:7E:2E:1E:54:19:60
            X509v3 Authority Key Identifier:
                keyid:41:40:13:A2:5F:77:12:9C:74:B0:69:C1:77:2D:F2:3C:08:5F:A9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/414013A25F77129C74B069C1772DF23C085FA9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/414013A25F77129C74B069C1772DF23C085FA9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3133382e33362e3136362e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:59:dd:ce:31:70:25:ea:a1:2c:ae:3a:cc:b6:24:0b:af:f1:
         2a:e6:c6:ae:92:a7:27:6f:e9:d6:d4:66:37:aa:58:ca:d0:b5:
         46:b5:f6:c4:43:4c:a2:cf:6d:9c:f0:8b:2f:ab:f4:83:6d:31:
         07:8a:67:32:7d:e0:1a:4c:0a:c2:40:67:e8:8c:44:6f:35:50:
         4e:fa:06:e6:d2:23:ee:49:23:3c:ce:8b:e5:4e:00:01:aa:e9:
         d2:7b:12:02:21:82:01:74:71:52:9c:75:16:36:6d:4d:c3:20:
         97:0a:d6:8f:3f:77:f5:24:a4:ad:a6:2c:9d:19:6b:0b:97:03:
         2d:bd:67:f1:42:77:3a:14:ac:c7:ce:53:f3:24:32:bb:65:be:
         94:2e:fb:e7:1f:8b:20:7e:1a:a3:33:1a:5f:ef:50:d8:63:e3:
         da:90:36:7f:af:67:92:be:6e:2d:01:6f:af:4f:8f:5e:e0:f8:
         37:eb:40:ff:51:6c:98:9c:9b:46:47:0d:76:52:53:87:f2:93:
         3d:d6:1b:5a:2e:21:f0:d9:d6:15:ba:09:44:dd:5e:0a:91:5f:
         d1:f4:4c:2f:0d:c6:05:62:d3:c2:49:0f:42:1c:14:32:1b:ff:
         df:72:88:5e:10:5a:55:8f:7c:b2:f0:35:95:64:ea:95:38:04:
         28:27:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org