Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139322e302f32322d3232203d3e20323634353835.roa
File:                     3133382e33362e3139322e302f32322d3232203d3e20323634353835.roa (raw, json)
Hash identifier:          IFmt5q3vaMuNAE/c6IKZ+QNcUjm1gF3X125MZSNBhTk=
Subject key identifier:   A4:5E:97:F1:5E:19:E3:86:5E:23:5D:14:90:BF:9F:88:5F:60:6F:4D
Certificate issuer:       /CN=0E5A5F5023E75AE879856236916A3D99195F7F79
Certificate serial:       1C2CD730B9288098B06EFEF4B3091F2A01BE71E2
Authority key identifier: 0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139322e302f32322d3232203d3e20323634353835.roa
Signing time:             Thu 04 Apr 2024 04:48:43 +0000
ROA not before:           Thu 04 Apr 2024 04:43:43 +0000
ROA not after:            Thu 03 Apr 2025 04:48:43 +0000
asID:                     264585
IP address blocks:        138.36.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.crl
                          rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2c:d7:30:b9:28:80:98:b0:6e:fe:f4:b3:09:1f:2a:01:be:71:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E5A5F5023E75AE879856236916A3D99195F7F79
        Validity
            Not Before: Apr  4 04:43:43 2024 GMT
            Not After : Apr  3 04:48:43 2025 GMT
        Subject: CN=A45E97F15E19E3865E235D1490BF9F885F606F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:f6:15:49:37:66:c5:22:a9:1d:b6:3b:e8:
                    3f:4d:02:d6:c3:f5:3a:d4:71:10:d2:fb:4a:60:44:
                    d4:74:e0:92:96:97:ef:55:87:e7:98:03:20:76:31:
                    99:7c:b5:90:84:e3:6c:36:ca:9c:48:20:71:bc:ca:
                    60:1f:37:37:11:40:a9:ae:75:e0:a0:19:b7:e3:de:
                    ea:92:37:b8:5c:29:f2:9c:f1:d7:e4:45:65:31:64:
                    c8:1f:28:43:bd:b0:a2:36:9a:d4:74:81:b8:f1:a8:
                    ce:f0:c5:39:d7:bc:1b:eb:c5:96:e5:49:56:19:28:
                    b4:a8:d4:f6:55:92:6f:41:37:1c:1c:cb:e6:c1:c6:
                    1c:4e:f4:dd:60:ac:35:64:45:ac:94:32:9f:6a:bf:
                    b8:fc:50:c8:19:07:c6:1e:97:5e:30:dd:6e:c4:16:
                    de:ca:77:00:4a:7b:c5:27:65:f6:30:a1:da:33:4b:
                    b2:14:27:76:0c:6a:63:99:00:c2:31:6a:23:9a:27:
                    35:66:4b:4f:cd:0e:f0:88:48:45:f0:12:50:34:2c:
                    99:f3:f7:e6:8c:54:96:7b:25:46:d0:77:9b:52:c7:
                    91:64:23:79:9f:01:83:1a:55:0a:ca:63:d5:85:4d:
                    5b:30:95:83:54:5f:24:13:4b:6e:8d:85:29:4d:fb:
                    39:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5E:97:F1:5E:19:E3:86:5E:23:5D:14:90:BF:9F:88:5F:60:6F:4D
            X509v3 Authority Key Identifier:
                keyid:0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139322e302f32322d3232203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:f4:99:4a:3a:2d:fa:0b:33:d2:9a:b9:93:f0:47:96:7c:
         b5:92:27:35:71:32:5f:ad:3d:f7:99:98:f4:1f:c6:29:e7:21:
         d0:ae:2b:a6:85:0e:19:e9:3d:ac:8f:14:38:7c:8c:92:50:54:
         dc:ee:f4:20:cd:f0:5b:ce:6d:40:13:7b:e3:d0:fc:21:4b:41:
         ed:43:f0:ef:08:a2:e1:17:72:45:b5:c5:02:a0:a5:e2:e4:90:
         00:ef:8f:e5:a6:c2:ec:4d:ec:a4:b5:da:a8:3a:19:52:bd:77:
         0d:13:ab:98:81:07:89:ec:bd:d7:57:10:5f:a9:a5:d9:a5:b3:
         6e:3e:e2:17:74:78:57:9d:70:c2:4e:fb:93:96:51:ee:44:6b:
         91:8a:2d:19:86:c6:d2:b6:01:1d:fe:45:5c:10:bb:8c:5b:e3:
         75:4a:f0:f1:e9:e8:f6:f4:e4:f6:2b:e0:13:25:ee:c0:22:76:
         40:f3:a8:8e:7c:41:31:94:7b:45:3f:88:0c:0b:ba:d8:a5:64:
         67:5b:a0:92:78:b4:8e:80:86:3a:d9:70:a5:54:d5:71:c8:ee:
         9b:31:2f:6a:67:38:79:ae:95:9f:27:6d:24:17:8c:10:36:1e:
         fd:85:38:11:6c:e3:2c:68:6f:ea:ed:b2:e6:75:14:88:2f:67:
         4f:20:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:52 2024 by rpki-client on console-ams.rpki-client.org