Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa
File:                     3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa (raw, json)
Hash identifier:          Td9c7gZUNwq6QI7zR/Pgcej4etmX18do3hUs1b+furI=
Subject key identifier:   14:4B:3B:51:7B:0C:B7:8D:6B:80:8B:D4:1A:74:E0:9C:32:47:AB:40
Certificate issuer:       /CN=0E5A5F5023E75AE879856236916A3D99195F7F79
Certificate serial:       7A0D030EB5598032822FC385179602A94B7D3BC8
Authority key identifier: 0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa
Signing time:             Thu 04 Apr 2024 04:48:42 +0000
ROA not before:           Thu 04 Apr 2024 04:43:42 +0000
ROA not after:            Thu 03 Apr 2025 04:48:42 +0000
asID:                     264585
IP address blocks:        138.36.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.crl
                          rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0d:03:0e:b5:59:80:32:82:2f:c3:85:17:96:02:a9:4b:7d:3b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E5A5F5023E75AE879856236916A3D99195F7F79
        Validity
            Not Before: Apr  4 04:43:42 2024 GMT
            Not After : Apr  3 04:48:42 2025 GMT
        Subject: CN=144B3B517B0CB78D6B808BD41A74E09C3247AB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:52:2a:b4:57:8b:60:aa:3d:36:22:1b:6b:a9:
                    fe:2b:c5:b2:e6:97:ac:c7:6c:0c:e6:db:5e:7e:09:
                    85:a2:de:57:89:06:3c:fd:95:ee:c5:6c:90:f7:b6:
                    3a:b2:64:f3:fe:bd:59:6b:55:90:50:49:72:cf:3d:
                    bc:c0:3b:01:2d:f0:2e:aa:95:4f:bc:29:ad:43:da:
                    6a:37:c6:f3:1c:16:27:37:1e:b8:1c:b6:ac:52:50:
                    a7:0f:c4:00:ef:ba:fd:34:3f:23:9f:6a:e5:1e:c8:
                    cd:f6:db:ca:71:34:3d:98:ac:bc:be:29:a1:ae:85:
                    04:56:0f:ec:22:2f:f8:8f:5a:b0:4b:dc:f9:d4:2d:
                    e2:85:c0:4f:dd:b2:c0:aa:b0:ce:d2:f4:3d:39:8f:
                    96:83:b2:c4:7a:27:cb:73:3e:52:9c:63:c6:5e:f9:
                    2f:7b:17:c5:ef:b1:e9:94:da:c4:4b:4d:ee:e3:d1:
                    92:b3:aa:91:55:02:65:90:92:eb:6e:73:0e:d8:4f:
                    63:91:13:3b:d6:cf:a0:e7:c9:05:3c:b3:4e:5b:d6:
                    f7:d4:c7:c8:b9:29:e5:09:23:3e:de:42:be:cd:2e:
                    03:f3:73:08:9e:56:c7:77:43:53:a9:27:d4:8a:0a:
                    59:97:b2:a0:26:cc:0f:3e:d9:3b:0e:87:f5:a8:7b:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4B:3B:51:7B:0C:B7:8D:6B:80:8B:D4:1A:74:E0:9C:32:47:AB:40
            X509v3 Authority Key Identifier:
                keyid:0E:5A:5F:50:23:E7:5A:E8:79:85:62:36:91:6A:3D:99:19:5F:7F:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/0E5A5F5023E75AE879856236916A3D99195F7F79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E5A5F5023E75AE879856236916A3D99195F7F79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJ8xJdhNXHYpXQnzahwLzxgHRW77gy8x3azzydQCbw43/1/3133382e33362e3139342e302f32342d3234203d3e20323634353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:76:4a:bf:4b:b8:f3:70:4c:50:42:64:66:e4:de:de:52:61:
         f6:76:ad:16:d1:8b:9b:ad:3c:d2:ff:0f:d4:81:67:ab:68:3b:
         94:f1:8b:8e:1b:f2:e8:6d:9b:b5:ab:fa:a7:1a:12:6c:b3:33:
         93:da:bb:f4:4e:b4:27:c3:b4:d2:90:85:d1:2b:5a:f6:c5:81:
         46:44:71:5e:b7:3c:ea:e1:b7:c5:3a:47:50:b8:4d:55:5a:57:
         bb:c1:13:ba:35:a5:80:03:5f:61:8c:d6:b8:25:31:e5:f4:01:
         38:99:b9:dc:cd:8d:5a:cb:68:f9:a1:64:b8:b0:d6:f0:24:19:
         d6:b8:1f:01:49:fd:1a:68:47:8d:41:d0:c5:c6:24:43:73:35:
         46:ab:8e:55:6a:d6:95:cf:17:62:8b:1d:3c:ff:7c:04:72:9c:
         8d:9b:00:ab:5c:ff:87:f5:83:85:fc:f7:2e:fc:52:56:d0:fc:
         67:79:5a:b3:30:49:5c:6a:c3:9e:40:cf:fc:2e:aa:71:de:22:
         1c:14:15:45:3f:b2:f5:59:73:9c:fb:99:8b:b6:fe:cf:03:26:
         8b:4e:68:5b:2d:cf:f3:92:69:2c:51:a9:9e:55:d5:2f:c0:4c:
         85:8b:cc:9b:47:0a:ae:e9:e2:46:53:13:10:2f:3f:9f:95:a4:
         de:22:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:40 2024 by rpki-client on console-fra.rpki-client.org