Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa
File:                     3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa (raw, json)
Hash identifier:          tUBQQm6w/UBc6dU4wg4shVdHtMetN/rW4j9c6Cj6ZMc=
Subject key identifier:   EC:A4:71:92:1B:17:2A:B2:B8:A3:8C:77:85:4D:56:DF:2B:B2:98:75
Certificate issuer:       /CN=9954871A58BD1D563C66245B157E43881A74A8D7
Certificate serial:       786B876C31557ABF9B17929671A076EBE798DDFA
Authority key identifier: 99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa
Signing time:             Thu 04 Apr 2024 06:12:19 +0000
ROA not before:           Thu 04 Apr 2024 06:07:19 +0000
ROA not after:            Thu 03 Apr 2025 06:12:19 +0000
asID:                     61856
IP address blocks:        138.117.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.crl
                          rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6b:87:6c:31:55:7a:bf:9b:17:92:96:71:a0:76:eb:e7:98:dd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9954871A58BD1D563C66245B157E43881A74A8D7
        Validity
            Not Before: Apr  4 06:07:19 2024 GMT
            Not After : Apr  3 06:12:19 2025 GMT
        Subject: CN=ECA471921B172AB2B8A38C77854D56DF2BB29875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:6b:fd:d4:16:62:65:31:bb:e7:6c:50:b3:
                    0d:b4:d2:f8:5e:25:8b:09:2b:0b:be:56:76:dd:43:
                    5c:06:75:b6:0f:d2:06:a5:82:33:58:e0:01:dc:f5:
                    b9:11:c7:d5:77:a2:f3:9e:10:fc:ca:75:a0:ec:a6:
                    a6:d6:05:7a:35:ac:52:0c:0f:01:34:dd:16:87:c2:
                    9f:40:d4:66:1c:12:1a:39:c4:65:78:87:fa:ed:a6:
                    74:70:bd:a4:13:90:a1:97:27:83:d7:0a:f4:19:31:
                    6b:0d:d1:42:58:13:c0:aa:0c:c2:23:ff:0c:d1:20:
                    9b:fd:c3:69:0e:b3:46:e4:8c:65:82:0c:cf:29:8d:
                    3a:78:5e:0e:ef:f3:e4:03:75:7e:c5:21:5a:e2:6a:
                    f0:62:38:71:4d:d6:51:0b:0c:1b:9a:bd:3f:c7:67:
                    62:55:4f:58:cd:ee:4d:4e:9d:2d:dc:a5:73:14:b0:
                    a4:44:09:94:b4:ee:db:5a:2f:c9:9e:02:6b:03:d1:
                    9d:ca:06:c5:36:d3:b1:ee:7d:8a:93:0c:27:d4:04:
                    2d:22:aa:09:f9:91:18:ac:38:cc:fe:c4:2d:09:86:
                    57:b3:50:aa:c0:57:6b:79:cb:46:b3:03:20:12:6e:
                    f3:08:b6:b0:4f:22:7d:d8:7e:f7:26:b3:5d:a1:01:
                    9d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A4:71:92:1B:17:2A:B2:B8:A3:8C:77:85:4D:56:DF:2B:B2:98:75
            X509v3 Authority Key Identifier:
                keyid:99:54:87:1A:58:BD:1D:56:3C:66:24:5B:15:7E:43:88:1A:74:A8:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/9954871A58BD1D563C66245B157E43881A74A8D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9954871A58BD1D563C66245B157E43881A74A8D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/1/3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:30:15:0d:84:ee:70:80:34:d4:3f:45:01:f6:b2:b7:b0:8c:
         46:3f:59:32:a8:95:97:ff:38:10:a5:37:d1:83:28:d1:4a:27:
         80:72:58:52:95:46:4c:4c:d0:d1:8c:c4:b8:18:23:5b:e8:b2:
         61:7d:94:39:29:f8:df:9d:f7:6e:48:ff:49:07:66:6e:24:0d:
         1e:81:56:c6:60:fd:53:9d:37:9e:ee:37:e3:dc:42:17:7a:6c:
         bd:1f:a0:ba:47:17:82:68:a0:0e:08:e0:81:6f:a6:a4:f8:a7:
         b4:00:42:57:01:ee:c7:57:ed:39:bf:c3:80:e7:91:c5:f8:d8:
         3c:2b:fe:fa:59:10:fd:4d:70:5e:f2:6b:50:2d:aa:4f:24:b7:
         16:66:1e:f4:cc:b4:3e:25:6e:c1:02:8b:94:39:2b:5c:28:20:
         75:a3:4e:35:e6:bb:8d:10:4d:42:b3:4d:96:df:fa:e7:27:4b:
         b4:a2:e5:6c:dc:38:8d:95:b8:7e:9e:5f:18:65:09:68:72:0a:
         ee:cc:5d:e4:c3:59:8c:dd:16:d6:32:fc:de:19:29:74:0f:92:
         41:08:18:4b:9e:e8:68:8d:81:84:cb:08:ce:a6:73:14:3c:ac:
         c1:7d:d1:15:ce:17:ef:8e:79:9c:a3:c0:6d:c1:2e:de:50:2c:
         03:f5:d9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:50 2024 by rpki-client on console-fra.rpki-client.org