Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa
File:                     3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa (raw, json)
Hash identifier:          cSpVPmKqiNCfvBOUC18C4A0VaK/2K/ff7DMRQzyxnOQ=
Subject key identifier:   65:58:DB:9E:CE:D3:D4:47:1B:25:67:05:BC:46:DC:DB:55:EC:61:74
Certificate issuer:       /CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
Certificate serial:       6DABEDC3A27411EBD114728EACBC683A8B2834D1
Authority key identifier: B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa
Signing time:             Tue 18 Jun 2024 14:10:54 +0000
ROA not before:           Tue 18 Jun 2024 14:05:54 +0000
ROA not after:            Tue 17 Jun 2025 14:10:54 +0000
asID:                     263840
IP address blocks:        138.185.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl
                          rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ab:ed:c3:a2:74:11:eb:d1:14:72:8e:ac:bc:68:3a:8b:28:34:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
        Validity
            Not Before: Jun 18 14:05:54 2024 GMT
            Not After : Jun 17 14:10:54 2025 GMT
        Subject: CN=6558DB9ECED3D4471B256705BC46DCDB55EC6174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:a6:36:f0:c9:ea:96:3c:46:a2:3c:f5:46:
                    0b:b6:13:79:32:6b:e9:c0:97:bf:da:c3:3a:b3:4b:
                    2b:31:59:79:d2:d1:78:6d:e8:77:24:ad:2b:d7:e7:
                    c8:d4:df:03:df:e0:02:1c:7a:02:e0:4b:37:68:50:
                    8f:0a:63:73:4c:85:dc:e9:86:00:69:87:68:5d:2d:
                    13:b9:25:1d:bc:b7:a9:7f:4c:25:60:70:a2:fe:ae:
                    06:8b:82:a0:b9:09:4f:b0:b6:c3:da:12:67:f2:c1:
                    4b:87:41:2e:b1:97:bc:1f:d7:b9:d6:0c:df:a9:06:
                    17:6b:84:53:ff:ba:41:78:4f:4e:3d:c9:7b:d5:39:
                    28:a5:56:35:07:c0:c5:1a:c9:ea:b7:d9:2e:bd:90:
                    3f:06:df:8a:2b:5c:c2:fb:33:b6:f5:39:8f:87:46:
                    f7:63:53:9f:6b:f9:e2:01:12:e4:c2:4e:aa:89:6c:
                    b4:98:5c:49:19:81:4b:5e:f4:60:e0:76:91:31:1c:
                    f6:ec:b4:9e:47:c3:04:5b:fb:f4:50:03:8a:e5:4a:
                    ba:43:9d:ff:d0:af:03:e8:de:3d:cf:60:2e:d9:ae:
                    c4:61:e6:b1:55:ae:da:27:a7:8d:76:7a:fc:38:fc:
                    c1:63:4d:d8:60:a8:18:5c:47:99:32:a9:70:dd:ed:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:58:DB:9E:CE:D3:D4:47:1B:25:67:05:BC:46:DC:DB:55:EC:61:74
            X509v3 Authority Key Identifier:
                keyid:B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3234203d3e20323633383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:fa:2c:6f:08:46:9d:2a:30:9a:d4:68:0e:08:01:51:16:8d:
         38:71:d2:21:16:88:0e:df:e3:65:c0:7b:51:7d:b7:5b:b5:3e:
         38:88:66:16:d1:82:ba:f6:fc:bd:7a:f9:b9:cd:0a:5d:df:4e:
         35:26:e9:14:a8:7e:ef:a8:23:4d:fd:a8:8f:70:6c:9e:40:4e:
         00:a7:41:51:df:b7:fd:06:f4:a3:0d:ff:8e:a3:b3:29:8a:33:
         12:56:b3:fc:5f:41:b0:9a:5d:92:bf:32:02:20:22:42:a8:67:
         83:48:05:09:04:4d:f7:8b:78:a7:63:e4:1b:ab:a6:d6:32:4f:
         ef:e9:b9:0d:cf:b4:88:b9:e0:53:d4:63:93:52:69:db:44:0a:
         4e:41:c6:57:ca:ff:59:be:c2:2e:73:db:84:2e:58:2b:d8:8b:
         30:d4:4f:81:3c:30:79:86:c4:12:14:4e:42:d9:fb:f2:b5:e0:
         6b:fd:3d:1e:2a:4c:05:5d:4a:d5:24:01:8f:03:17:21:d1:95:
         5f:30:32:08:5b:ee:9c:b7:85:ef:52:b0:b0:40:85:bf:e1:c0:
         14:cd:3d:38:5c:82:47:04:6c:11:c3:15:3d:f7:25:fb:9a:9d:
         ec:2e:eb:b6:08:fd:18:f4:86:a2:a2:54:6f:16:e0:70:7d:f5:
         c9:dd:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:15 2024 by rpki-client on console-ams.rpki-client.org