Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136342e302f32322d3232203d3e203631363339.roa
File:                     3133382e3231392e3136342e302f32322d3232203d3e203631363339.roa (raw, json)
Hash identifier:          Egn0wWA7INTiMeC3R/Wt697rikbukAK02lZs2N+FoKQ=
Subject key identifier:   1D:09:8B:FD:88:90:C9:93:C2:69:50:8C:8E:FE:60:9A:7E:67:AB:21
Certificate issuer:       /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial:       2DBD70B4A0808D136BE6CE697DCAB8C9A77366A5
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136342e302f32322d3232203d3e203631363339.roa
Signing time:             Wed 03 Apr 2024 18:32:16 +0000
ROA not before:           Wed 03 Apr 2024 18:27:16 +0000
ROA not after:            Wed 02 Apr 2025 18:32:16 +0000
asID:                     61639
IP address blocks:        138.219.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
                          rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bd:70:b4:a0:80:8d:13:6b:e6:ce:69:7d:ca:b8:c9:a7:73:66:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
        Validity
            Not Before: Apr  3 18:27:16 2024 GMT
            Not After : Apr  2 18:32:16 2025 GMT
        Subject: CN=1D098BFD8890C993C269508C8EFE609A7E67AB21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bc:7b:6d:de:84:79:4b:43:9a:fb:27:c5:90:
                    79:b3:e4:9d:38:48:3f:5e:ae:7a:d8:6a:7d:8f:b5:
                    e0:24:b9:61:7d:aa:52:4b:5e:c5:69:8b:5d:2e:09:
                    d7:80:6e:fc:08:f6:43:e2:8e:12:d6:a8:b1:6d:3a:
                    96:b8:c2:10:d5:91:a4:37:09:50:80:8c:19:80:ef:
                    99:27:51:c8:a3:3e:67:c9:42:5a:a7:d0:98:18:4a:
                    e1:c2:cd:08:22:d6:ae:2c:e8:0c:25:70:a9:66:38:
                    eb:f4:1e:2c:87:ab:88:04:ec:34:3b:81:08:ef:31:
                    ee:8b:3c:29:a6:e5:2a:57:cd:fa:ea:d8:8e:a8:ce:
                    e0:8c:b9:2b:25:b5:14:e3:98:3b:08:1a:55:7a:7f:
                    30:9a:a3:53:c8:c6:c0:4e:4e:a7:09:93:cf:28:f2:
                    77:43:67:ae:18:b4:54:67:b0:47:6d:78:01:72:f7:
                    0f:62:51:d8:dc:1c:fe:70:d4:c4:6c:c9:5b:8e:dd:
                    2c:f4:89:37:1a:25:e8:fb:dc:00:ea:27:96:9a:a9:
                    78:80:f3:41:b5:81:b1:ee:f8:50:a7:c6:8b:84:84:
                    b7:c9:15:74:7b:d5:e8:6d:5e:69:5c:6a:b0:6f:2a:
                    bd:b3:35:61:e5:79:50:ba:56:cb:a5:1b:af:76:2e:
                    5a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:09:8B:FD:88:90:C9:93:C2:69:50:8C:8E:FE:60:9A:7E:67:AB:21
            X509v3 Authority Key Identifier:
                keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136342e302f32322d3232203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:a4:81:3c:cf:29:34:46:94:ce:46:7b:b6:0f:e2:a1:fe:5a:
         88:64:3d:8e:58:7b:15:29:2a:a4:05:41:1b:df:fe:18:b6:37:
         37:01:ef:d7:bd:f9:dc:cb:cd:11:a0:29:20:b5:16:54:72:96:
         28:75:85:7c:3e:27:0f:7c:70:17:53:a3:10:e0:e5:29:15:e0:
         39:c1:2d:8d:e3:f5:1f:9e:ea:bb:c3:68:1c:a8:32:c5:0b:35:
         b7:8d:2b:c1:d3:9e:f6:39:1c:d9:73:94:6a:0a:fa:d0:68:f1:
         d5:48:88:8c:34:62:f5:5d:32:11:5c:70:16:c9:d9:7f:82:76:
         21:70:02:09:ae:f2:99:84:22:91:0d:c1:36:7e:72:e3:a6:45:
         36:0a:ac:40:c6:57:77:bc:78:c3:99:49:62:c8:c2:6b:d2:e7:
         19:f6:f2:94:01:04:bb:61:08:bf:a9:6d:f9:c0:e2:a3:d0:ad:
         94:90:57:bb:33:cc:76:58:88:22:4a:7e:09:8c:2e:e5:80:9e:
         49:8f:df:6d:ca:16:24:bc:8a:4c:ec:59:de:5f:26:03:44:01:
         d7:27:d9:bf:82:09:16:04:73:19:93:80:57:31:2a:07:28:e1:
         c2:71:89:30:b3:f1:6f:af:4d:83:2f:e9:af:70:c5:4b:31:9e:
         d0:d4:6c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:51 2024 by rpki-client on console-fra.rpki-client.org