Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa
File:                     3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa (raw, json)
Hash identifier:          SKvHBF4eFbOzMxLMpZSdfIv2DFRuAhzDT9TfUOTZuHc=
Subject key identifier:   28:F0:BF:62:EF:27:DB:1A:B6:5E:54:23:DC:48:DF:7B:CE:FE:69:1D
Certificate issuer:       /CN=701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A
Certificate serial:       7B42A011393E5B0C81B5BB654A110E329D99199A
Authority key identifier: 70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa
Signing time:             Wed 03 Apr 2024 18:38:28 +0000
ROA not before:           Wed 03 Apr 2024 18:33:28 +0000
ROA not after:            Wed 02 Apr 2025 18:38:28 +0000
asID:                     263849
IP address blocks:        138.185.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.crl
                          rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:42:a0:11:39:3e:5b:0c:81:b5:bb:65:4a:11:0e:32:9d:99:19:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A
        Validity
            Not Before: Apr  3 18:33:28 2024 GMT
            Not After : Apr  2 18:38:28 2025 GMT
        Subject: CN=3082010A0282010100C68FEC4693BBAB6F755F6DDCDAA7AE2454EDE0924B4E0ABDC47B170710E8B4E44E52DA1AC56105ABCAA73808253B8B0D8C48B9796EBBE73C3862D72C4814A01C2D81987235A04686EA5D244B6E7658BE88342E77F97767F9ACA2DA8BB79F183846F0571B96D0C95E0FA6BB308175C21BBCE8A5E5FC8F5E830E18F2E155D3A3D5A6AF2B60130FC98A52A394D9C1E15E57BAAC1DD015B04F9EC29D73610A4799021CE774182501389AE77BA5C4254577BB1495BB376E52A2CCAE90684D37A76EA79AF67193546B6CA2D1D7C1554B96989E7A82BA09B0892599FFE042655F277C53E363C740AEDBD5A84DDFD21AE6E04DFEA1505356940A8DCA0F3272C5B34B27410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:ec:46:93:bb:ab:6f:75:5f:6d:dc:da:a7:
                    ae:24:54:ed:e0:92:4b:4e:0a:bd:c4:7b:17:07:10:
                    e8:b4:e4:4e:52:da:1a:c5:61:05:ab:ca:a7:38:08:
                    25:3b:8b:0d:8c:48:b9:79:6e:bb:e7:3c:38:62:d7:
                    2c:48:14:a0:1c:2d:81:98:72:35:a0:46:86:ea:5d:
                    24:4b:6e:76:58:be:88:34:2e:77:f9:77:67:f9:ac:
                    a2:da:8b:b7:9f:18:38:46:f0:57:1b:96:d0:c9:5e:
                    0f:a6:bb:30:81:75:c2:1b:bc:e8:a5:e5:fc:8f:5e:
                    83:0e:18:f2:e1:55:d3:a3:d5:a6:af:2b:60:13:0f:
                    c9:8a:52:a3:94:d9:c1:e1:5e:57:ba:ac:1d:d0:15:
                    b0:4f:9e:c2:9d:73:61:0a:47:99:02:1c:e7:74:18:
                    25:01:38:9a:e7:7b:a5:c4:25:45:77:bb:14:95:bb:
                    37:6e:52:a2:cc:ae:90:68:4d:37:a7:6e:a7:9a:f6:
                    71:93:54:6b:6c:a2:d1:d7:c1:55:4b:96:98:9e:7a:
                    82:ba:09:b0:89:25:99:ff:e0:42:65:5f:27:7c:53:
                    e3:63:c7:40:ae:db:d5:a8:4d:df:d2:1a:e6:e0:4d:
                    fe:a1:50:53:56:94:0a:8d:ca:0f:32:72:c5:b3:4b:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F0:BF:62:EF:27:DB:1A:B6:5E:54:23:DC:48:DF:7B:CE:FE:69:1D
            X509v3 Authority Key Identifier:
                keyid:70:1C:A9:DD:24:FE:6B:BE:9C:FF:CE:3F:0A:DB:C6:64:A1:21:57:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701CA9DD24FE6BBE9CFFCE3F0ADBC664A121571A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Af9TMr5DUSn2QsMbcZYka9ZPMW7tKw1QL1LkcAEwYX38/1/3133382e3138352e3230302e302f32322d3234203d3e20323633383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:e0:23:54:bc:f0:ec:1d:57:9f:2f:f2:a1:df:36:07:08:
         93:07:be:66:e1:b4:61:8d:d3:00:eb:52:e0:4b:1c:fd:ac:8a:
         cd:c4:76:6f:22:86:33:38:c6:c9:92:ed:72:70:c4:04:d8:c9:
         c7:19:70:1a:f1:9c:fc:ff:9b:12:d0:e7:06:ec:77:14:c3:16:
         af:c9:f3:84:07:cf:ec:51:0f:99:c9:6a:c8:d1:7b:30:e7:80:
         8f:63:8f:26:01:ac:3f:f3:eb:ea:bc:b3:87:3f:84:d6:3c:f2:
         d9:3a:c3:f8:f2:2d:1d:ca:b6:ea:36:d7:15:cf:f4:23:bf:70:
         ce:92:3b:6b:6a:13:d7:c2:fb:e2:b0:13:4a:bf:f9:ac:17:86:
         3e:a6:d8:8e:eb:5d:b6:b4:aa:84:4d:af:18:8e:5d:64:a4:92:
         4c:27:a0:bb:8e:a1:6a:6a:42:37:28:d9:09:bb:78:aa:48:c1:
         18:0a:00:16:c2:36:f6:f2:14:28:d4:28:cc:92:f4:63:57:b1:
         6e:94:e3:dd:fc:16:6f:a1:f4:e7:ee:99:ca:dc:c8:67:db:4b:
         66:c6:64:40:7d:b2:fb:4b:67:09:43:a2:07:5e:c6:85:0f:71:
         d1:cf:df:fd:10:04:e6:d3:67:43:4a:be:35:54:21:f6:49:c7:
         a1:74:18:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:36 2024 by rpki-client on console-fra.rpki-client.org