Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136342e302f32342d3234203d3e203631363339.roa
File:                     3133382e3231392e3136342e302f32342d3234203d3e203631363339.roa (raw, json)
Hash identifier:          x/tVNyGqUCh5L7rXPtZLFLQMv4yQTw/BZn3Eo+W5fP8=
Subject key identifier:   83:A0:9E:84:63:13:18:B7:F8:53:12:C9:62:54:73:DB:64:1B:CA:5D
Certificate issuer:       /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial:       15DB25B7D0A009E38A8B32DD7695059BFE3B2C7A
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136342e302f32342d3234203d3e203631363339.roa
Signing time:             Wed 03 Apr 2024 18:32:16 +0000
ROA not before:           Wed 03 Apr 2024 18:27:16 +0000
ROA not after:            Wed 02 Apr 2025 18:32:16 +0000
asID:                     61639
IP address blocks:        138.219.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
                          rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:db:25:b7:d0:a0:09:e3:8a:8b:32:dd:76:95:05:9b:fe:3b:2c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
        Validity
            Not Before: Apr  3 18:27:16 2024 GMT
            Not After : Apr  2 18:32:16 2025 GMT
        Subject: CN=83A09E84631318B7F85312C9625473DB641BCA5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:06:7c:35:aa:20:34:51:fc:b1:09:5b:ba:
                    70:d3:bb:02:4b:80:1d:f6:33:af:16:eb:f3:4c:4f:
                    5a:ec:ad:0c:a8:ad:b4:8a:64:b3:ba:59:21:16:d6:
                    a7:a4:a1:cd:9b:90:2f:8d:3c:91:be:b8:3b:b5:10:
                    88:12:8b:25:a4:cb:72:a8:cd:5e:82:92:13:74:ca:
                    d6:4e:65:c2:7e:6a:e0:2c:d7:13:88:20:e0:b4:fa:
                    22:c1:64:02:2c:f1:98:0c:cf:d5:b9:0b:59:9b:24:
                    8a:34:0e:d5:a2:75:1b:a1:c9:91:8d:f0:87:2e:a3:
                    77:56:ee:e9:49:33:f0:72:f2:9d:e7:9e:50:a4:38:
                    16:87:e0:fc:bc:70:f7:87:18:bb:a8:6c:20:71:ad:
                    b8:83:51:32:9c:c6:20:a2:af:df:74:82:02:d4:43:
                    c8:46:21:c2:f2:2a:57:54:f6:00:8e:57:c1:d4:24:
                    ca:cf:72:eb:03:f9:22:d6:fc:f3:86:d3:03:f8:98:
                    e9:f2:23:70:93:10:49:9a:0b:7b:94:62:49:96:fb:
                    0b:01:5a:25:44:5c:02:7b:21:c3:94:9e:29:2f:ff:
                    32:af:30:6d:25:f6:fe:ef:5a:3e:02:8a:a4:5a:b6:
                    51:79:d1:26:a7:ee:a5:84:c7:dd:30:5d:96:75:8f:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A0:9E:84:63:13:18:B7:F8:53:12:C9:62:54:73:DB:64:1B:CA:5D
            X509v3 Authority Key Identifier:
                keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136342e302f32342d3234203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:f5:8b:7d:2b:eb:ce:49:2a:e6:8c:01:90:4e:83:d9:59:e7:
         1e:c6:d2:3b:70:1a:51:30:83:6d:2e:77:7f:b0:f6:f3:c6:8b:
         a4:f1:83:ce:d0:81:4b:f8:e0:4f:8c:6d:d2:a5:02:47:1b:6a:
         45:5f:b5:53:1d:39:04:93:06:f3:68:a1:fc:15:64:ea:63:91:
         bf:fb:a8:11:8e:15:e2:3c:60:9b:81:80:07:22:75:44:65:af:
         a4:53:73:91:22:e4:aa:d9:6c:39:8f:0a:98:70:06:72:f4:a9:
         80:aa:39:6e:21:49:47:9c:46:f5:8d:86:0c:81:fc:c7:d1:c6:
         76:28:2e:8b:8e:48:19:a0:6b:36:36:66:7b:62:a4:b6:4c:28:
         b4:83:95:dd:fd:9b:88:a1:e5:c5:ce:f8:9d:65:7a:8e:8f:9a:
         18:ae:dd:9e:0f:d9:9c:aa:d9:45:08:19:21:b0:2c:48:77:ee:
         33:10:84:9b:95:35:bc:f8:75:6e:3a:04:02:86:69:67:5d:dc:
         63:22:d5:53:2e:f3:9b:5a:8e:c9:47:6f:ae:8a:e0:08:85:55:
         98:06:05:55:c9:bb:ea:9d:84:85:6a:fa:93:bb:c3:57:7c:6c:
         92:07:ef:50:0e:d6:6c:a9:88:c1:a6:fc:c3:7c:6c:84:9a:e1:
         9a:38:88:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:33 2024 by rpki-client on console-ams.rpki-client.org