Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e39312e302f32342d3234203d3e20323730383737.roa
File:                     3133382e3138352e39312e302f32342d3234203d3e20323730383737.roa (raw, json)
Hash identifier:          DRJcpiDxLc0H4zkWXF413a2JQnqx7ed5yJ1cEodkhTk=
Subject key identifier:   9B:DD:78:B8:70:78:4A:7C:DE:9A:47:60:EE:F4:B5:F1:C4:8C:D2:24
Certificate issuer:       /CN=3E268A146165B7580B59E044B59D275B5F824225
Certificate serial:       3A3C916CC6B6D3C65B4F05D7784235D99830F6F9
Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e39312e302f32342d3234203d3e20323730383737.roa
Signing time:             Thu 04 Apr 2024 01:16:13 +0000
ROA not before:           Thu 04 Apr 2024 01:11:13 +0000
ROA not after:            Thu 03 Apr 2025 01:16:13 +0000
asID:                     270877
IP address blocks:        138.185.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl
                          rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:3c:91:6c:c6:b6:d3:c6:5b:4f:05:d7:78:42:35:d9:98:30:f6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225
        Validity
            Not Before: Apr  4 01:11:13 2024 GMT
            Not After : Apr  3 01:16:13 2025 GMT
        Subject: CN=9BDD78B870784A7CDE9A4760EEF4B5F1C48CD224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fb:23:f1:a4:0a:f8:44:c8:a8:9f:cf:d9:1c:
                    0f:a7:54:52:4c:cc:3c:86:b6:c5:00:dd:71:3c:bd:
                    0c:71:cf:b0:e6:41:97:bc:30:6a:bd:d8:e0:9d:aa:
                    b5:37:ad:3e:32:db:1b:55:df:f6:57:5d:76:2e:4f:
                    63:98:c4:9d:48:b7:7b:bd:fc:8c:c9:d0:5a:8e:9f:
                    64:47:36:1e:aa:7f:a6:7e:58:44:f8:1f:e7:ae:d7:
                    ff:a8:e2:64:b9:fb:b7:24:12:e3:18:57:8e:2e:5d:
                    a8:d5:e4:c6:bb:33:5e:11:55:fc:82:90:64:da:ef:
                    8c:c8:74:1d:80:6f:29:e1:c3:66:b2:1a:e2:c6:65:
                    d6:f2:06:b6:a4:d6:9d:cf:30:8e:ae:bc:00:25:fa:
                    76:dc:0d:37:66:ff:3c:2b:e2:eb:56:e7:38:60:8b:
                    19:c6:e2:63:58:4e:5e:1d:aa:52:93:92:9e:09:04:
                    cd:df:54:7f:f0:00:0a:2e:ba:96:89:6b:98:a9:c3:
                    55:86:c5:75:29:31:f5:0f:7b:0b:bc:42:83:60:01:
                    3c:b4:41:46:17:22:52:92:75:7d:01:dc:d0:f9:a4:
                    73:8a:f1:45:c0:f0:10:71:09:14:b3:ea:60:70:9e:
                    5c:27:d6:f3:3b:5c:9c:d7:3c:0e:de:60:74:f0:4a:
                    89:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DD:78:B8:70:78:4A:7C:DE:9A:47:60:EE:F4:B5:F1:C4:8C:D2:24
            X509v3 Authority Key Identifier:
                keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3133382e3138352e39312e302f32342d3234203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:ad:1f:23:c5:01:51:0f:95:c9:de:e3:9c:e5:62:6e:25:ec:
         89:5e:3a:a1:5c:18:8a:f5:6b:f3:6e:b4:ea:61:3e:8a:ec:54:
         4f:6a:9b:10:81:b1:62:14:b2:79:d5:f5:96:4d:11:da:df:72:
         1c:0c:cc:3b:16:68:8c:58:c1:fb:8a:fa:da:b2:24:83:5e:ed:
         35:d1:29:8e:02:03:19:b6:3c:b7:c6:07:49:49:82:5d:c4:1a:
         d3:9b:68:c3:5d:23:55:53:e4:ad:0f:8e:72:28:67:b1:f0:5a:
         37:b6:b8:cd:13:bb:fa:b9:7f:ab:2f:20:c5:4d:dc:97:c9:ef:
         1c:aa:1f:c6:9e:80:f9:c8:1d:95:49:26:ae:ba:03:77:a7:98:
         e0:0b:1b:10:66:89:d0:3d:cf:40:91:b3:9a:b6:f4:b6:bf:72:
         1f:11:7d:91:9e:73:99:3e:26:9c:c1:52:79:ca:b0:ff:58:01:
         0b:44:49:a9:19:e3:65:a6:21:c3:26:61:40:7a:d9:30:d0:c1:
         9f:4f:d2:32:5f:5c:d8:b9:cb:67:3f:0c:d6:1a:41:da:cd:95:
         d5:d0:31:bf:8c:33:47:ff:0f:16:1c:e6:4a:5a:6e:cd:00:0c:
         1b:c6:00:44:45:dd:ed:7f:63:02:5d:93:95:ac:3b:e4:52:53:
         10:1b:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:06 2024 by rpki-client on console-ams.rpki-client.org