Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139322e302f32332d3233203d3e20323634353835.roa
File:                     3133382e33362e3139322e302f32332d3233203d3e20323634353835.roa (raw, json)
Hash identifier:          TVapaXE4eOm6Wtu63z0Lj8ki22S7FPJdcqfGgjCSmFs=
Subject key identifier:   C8:D6:68:C3:CB:33:52:45:B6:06:48:39:89:3C:64:1F:66:64:0C:42
Certificate issuer:       /CN=0E5A5F5023E75AE879856236916A3D99195F7F79
Certificate serial:       22410C6328A6F3D93B41ED028094C1A96FBD9484
Authority key identifier: 0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139322e302f32332d3233203d3e20323634353835.roa
Signing time:             Thu 04 Apr 2024 04:48:42 +0000
ROA not before:           Thu 04 Apr 2024 04:43:42 +0000
ROA not after:            Thu 03 Apr 2025 04:48:42 +0000
asID:                     264585
IP address blocks:        138.36.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.crl
                          rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:41:0c:63:28:a6:f3:d9:3b:41:ed:02:80:94:c1:a9:6f:bd:94:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E5A5F5023E75AE879856236916A3D99195F7F79
        Validity
            Not Before: Apr  4 04:43:42 2024 GMT
            Not After : Apr  3 04:48:42 2025 GMT
        Subject: CN=C8D668C3CB335245B6064839893C641F66640C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:03:df:0c:8c:ef:c7:1d:d4:23:f8:6c:93:b1:
                    d8:79:ad:f4:aa:a5:a1:00:2b:da:33:7f:97:31:a0:
                    e3:15:e8:1f:00:19:cc:5d:67:af:9a:7e:97:29:74:
                    b4:c6:79:53:e3:47:ce:2e:ff:e2:27:7c:98:4e:de:
                    d2:0c:a0:24:18:5f:d3:cd:bd:e5:45:d1:f1:f6:05:
                    f6:ce:93:68:5b:4f:17:91:df:03:b7:fc:dd:7b:b9:
                    34:2d:02:d8:65:01:a4:be:11:e6:92:cc:fe:26:11:
                    05:39:85:81:f5:1b:49:e7:9f:83:cc:ab:47:49:a0:
                    1c:df:79:e4:b1:40:d8:0b:b3:42:82:7f:71:82:ae:
                    d6:27:3a:85:da:6c:84:4c:48:04:83:75:d6:19:19:
                    ef:0b:d7:6c:8d:1f:71:7b:e0:42:f8:21:f8:27:6f:
                    b7:09:57:03:3d:5c:ad:93:cd:26:1b:d8:3a:04:ae:
                    44:69:03:8b:22:8b:9d:9a:10:2e:ad:13:06:96:ae:
                    ad:fb:7b:56:e2:de:1d:75:73:98:6f:46:1c:dc:c3:
                    08:8a:b3:36:78:2b:08:6f:7c:fa:82:ed:78:96:7d:
                    90:41:4f:d3:95:84:b7:3a:c4:1e:33:cd:9e:b0:50:
                    25:cb:3f:68:fd:99:f2:a0:fd:15:31:17:55:a7:f1:
                    fd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D6:68:C3:CB:33:52:45:B6:06:48:39:89:3C:64:1F:66:64:0C:42
            X509v3 Authority Key Identifier:
                keyid:0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139322e302f32332d3233203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:95:d9:50:83:d6:db:a9:a7:63:98:c1:3b:8a:e6:d2:a9:b4:
         38:7c:54:2e:09:c3:b8:ae:46:c8:29:07:81:b0:73:60:1b:92:
         16:e5:82:18:29:1d:01:29:17:97:e6:02:0b:8b:51:0b:80:ba:
         31:a2:9d:a7:2c:20:e7:f4:50:37:c9:c9:c4:6c:51:45:3d:f9:
         c4:ea:ee:2f:b7:ef:66:fa:96:82:d9:2d:7a:d3:7a:89:d5:c8:
         17:c4:7d:09:39:cd:02:d2:1a:24:22:1a:7f:82:5f:14:9c:d4:
         a8:8a:06:21:fc:e9:b4:19:1d:7d:43:1d:95:bb:cd:5a:a9:18:
         fa:46:58:f4:b7:7f:29:d5:21:0e:ba:c4:92:51:25:1c:07:71:
         64:5c:1e:da:13:74:ab:39:e5:7f:8b:01:12:8b:42:22:c7:01:
         8a:30:da:cb:e6:95:1e:10:23:04:e2:61:3c:9c:2c:13:b7:09:
         e2:34:61:76:c6:03:7d:71:7b:79:4e:f8:72:0d:db:38:73:c4:
         e6:17:69:80:b1:7f:8a:2b:3f:b2:94:77:ce:95:2f:96:79:8d:
         19:d9:20:c6:b6:fd:13:d5:cc:97:e1:a2:de:5b:f7:5e:f7:1e:
         9d:4c:99:7e:6b:64:92:4b:84:8a:3e:79:69:01:a4:5a:dc:cf:
         a4:be:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:52 2024 by rpki-client on console-ams.rpki-client.org