Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136372e302f32342d3234203d3e203631363339.roa
File:                     3133382e3231392e3136372e302f32342d3234203d3e203631363339.roa (raw, json)
Hash identifier:          n6NxC5/QVEQFf8vrCbvzJ7PAVGOh3kTSEzZLDI7KAz4=
Subject key identifier:   7F:62:04:3F:62:37:40:38:33:AF:9A:70:49:77:7F:F1:B8:C9:8A:3D
Certificate issuer:       /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial:       40AE8F4C1B0E3F8BB9064E502BB325E74376FBC4
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136372e302f32342d3234203d3e203631363339.roa
Signing time:             Wed 03 Apr 2024 18:32:17 +0000
ROA not before:           Wed 03 Apr 2024 18:27:17 +0000
ROA not after:            Wed 02 Apr 2025 18:32:17 +0000
asID:                     61639
IP address blocks:        138.219.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
                          rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ae:8f:4c:1b:0e:3f:8b:b9:06:4e:50:2b:b3:25:e7:43:76:fb:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
        Validity
            Not Before: Apr  3 18:27:17 2024 GMT
            Not After : Apr  2 18:32:17 2025 GMT
        Subject: CN=7F62043F6237403833AF9A7049777FF1B8C98A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:dd:ee:08:8d:eb:be:a9:51:b1:3e:38:c7:
                    c5:41:02:bd:eb:e7:60:55:d0:03:64:a7:92:15:ae:
                    07:a1:77:88:c7:a9:02:d9:15:56:2b:8b:62:bf:63:
                    96:45:62:13:5e:09:a6:db:1a:7a:c2:c5:68:cf:5f:
                    2e:76:e2:fd:2d:df:01:ae:49:95:c6:7a:11:31:85:
                    c2:db:84:0e:28:01:8e:2e:0d:b0:3e:3d:ab:4a:5f:
                    d4:d6:71:c5:36:b3:53:68:1e:ee:13:60:a7:72:06:
                    e1:7e:83:39:79:16:15:94:ac:14:0f:34:c3:1d:57:
                    60:21:71:67:13:d4:5e:8e:28:a0:ed:3a:9a:cd:db:
                    fc:24:3a:43:99:f1:0f:b0:d8:5f:1e:8e:a8:3e:e5:
                    d8:75:89:f5:3e:0a:57:f9:a1:45:87:1e:5e:07:44:
                    b5:26:ef:f2:b8:fb:6d:6f:95:8d:86:70:0e:3b:f1:
                    cd:4f:6f:13:19:85:9f:f4:b1:ce:1b:3c:26:a6:21:
                    7e:d0:05:5a:77:d8:91:3d:33:70:cf:18:00:7b:48:
                    e2:62:dc:1e:cf:e1:09:f0:32:41:63:42:df:8c:e0:
                    e6:ed:09:37:61:73:a7:f1:c3:cf:95:23:6b:c6:7a:
                    f7:2b:a2:40:45:75:98:cc:2f:7e:3e:84:7b:bd:e5:
                    6e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:62:04:3F:62:37:40:38:33:AF:9A:70:49:77:7F:F1:B8:C9:8A:3D
            X509v3 Authority Key Identifier:
                keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133382e3231392e3136372e302f32342d3234203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f2:8a:19:3f:cc:2f:e6:5e:ef:e2:54:f5:7e:4f:64:fe:cb:
         d8:06:9e:7b:84:31:70:8f:aa:5e:ba:cf:09:1d:51:9e:5e:20:
         39:da:c7:4c:70:25:f6:18:64:4a:59:e8:8d:09:86:eb:2f:12:
         6c:c2:ef:13:0b:10:ea:42:74:7f:05:5c:a3:78:fd:3f:af:6b:
         fc:6f:81:2f:a6:b0:73:fa:44:4a:7c:06:b7:14:23:87:1f:1a:
         aa:fe:7f:2c:96:4e:b7:5f:c1:3d:7d:65:bf:f6:db:dc:00:a8:
         c9:09:c1:8a:46:36:95:3f:f6:c3:04:a8:6c:f4:db:19:18:c7:
         02:d2:18:ed:0e:35:0b:5d:da:e0:14:2d:5f:47:82:59:29:56:
         59:7b:25:63:c8:0a:42:eb:d2:98:b6:0f:96:5f:4b:82:2d:f0:
         9c:a3:91:6d:20:b8:8b:9f:3d:cd:f2:53:a0:d0:db:f8:d7:9e:
         e4:9d:2d:96:0b:de:92:1e:24:f1:fa:c3:25:df:c3:05:92:b2:
         13:9c:09:72:c7:cc:d6:9c:ab:b6:46:34:b3:34:67:3d:d6:37:
         55:e7:d8:09:e4:50:73:ea:6f:65:dc:f9:30:96:c8:c9:15:64:
         a2:66:0d:87:45:ec:5d:bc:41:a6:52:81:46:fe:a7:71:3f:36:
         de:4e:32:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:51 2024 by rpki-client on console-fra.rpki-client.org