Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa
File:                     3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa (raw, json)
Hash identifier:          UqBRKBbWPNgEflDkbk9JuFKX/RcxrlWa9EIXuQelNuk=
Subject key identifier:   C3:9D:B9:FB:78:AB:56:DF:B8:A3:DB:AA:B6:B4:27:45:2C:DE:A1:52
Certificate issuer:       /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial:       3CE3D323BB544DD78A3F95C1A64A5A566AE726EE
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa
Signing time:             Wed 03 Apr 2024 18:32:14 +0000
ROA not before:           Wed 03 Apr 2024 18:27:14 +0000
ROA not after:            Wed 02 Apr 2025 18:32:14 +0000
asID:                     264342
IP address blocks:        138.185.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
                          rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e3:d3:23:bb:54:4d:d7:8a:3f:95:c1:a6:4a:5a:56:6a:e7:26:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
        Validity
            Not Before: Apr  3 18:27:14 2024 GMT
            Not After : Apr  2 18:32:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:03:f7:21:d0:b4:d2:d9:d5:53:ce:17:6b:
                    28:17:9a:88:25:71:7b:74:2b:f2:11:bb:da:29:88:
                    af:7d:34:56:48:8d:89:b2:d5:03:75:28:a4:76:ed:
                    0a:46:05:ef:ce:dc:23:05:d9:81:73:90:e1:e0:90:
                    cc:13:e4:21:88:4a:ca:dd:f2:e5:63:45:6c:64:c5:
                    14:2c:20:92:77:9f:7f:1f:05:5d:63:a5:d7:53:cf:
                    52:51:38:ec:ff:23:75:36:d6:77:0b:09:60:a2:39:
                    30:58:11:cf:10:f0:71:85:9b:52:7a:74:71:6a:5e:
                    ca:cd:d4:7d:1c:bf:50:32:a9:b6:f4:0e:c5:a0:79:
                    97:84:0e:20:d9:ab:16:93:a8:58:64:6a:bb:22:d8:
                    4d:7a:90:1c:39:2b:c0:21:a4:93:67:1e:78:d0:ab:
                    a7:b3:3f:b2:73:98:43:1b:5d:11:70:81:c4:f3:0e:
                    d1:9e:09:14:6c:cd:52:28:1d:1c:7e:56:7d:13:c6:
                    38:6e:91:cf:7d:00:a6:f0:b9:c1:4b:39:84:f4:1b:
                    eb:df:42:7a:29:87:bd:40:a3:22:b0:77:cd:2f:74:
                    42:a6:c5:c3:67:56:06:dc:ca:fd:eb:f7:00:ab:06:
                    3e:7c:2b:8e:a6:e4:1f:a3:47:a7:fa:3a:d1:39:60:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9D:B9:FB:78:AB:56:DF:B8:A3:DB:AA:B6:B4:27:45:2C:DE:A1:52
            X509v3 Authority Key Identifier:
                keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/3133382e3138352e3135362e302f32322d3234203d3e20323634333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:b1:62:83:3c:4b:c3:03:3a:e2:b6:05:72:16:ab:26:c1:59:
         fb:d9:f3:46:b5:df:78:7f:22:f6:40:44:cc:1c:dd:fb:59:ef:
         47:c6:d8:bc:40:d8:33:24:6f:c1:15:31:43:c9:cc:d4:fd:ed:
         a4:65:c6:ae:50:ae:ac:d9:5c:1c:c5:76:c7:53:70:da:ad:ca:
         43:33:79:2a:b2:15:a0:cc:85:fa:00:a9:10:5a:86:2a:e0:6e:
         de:e2:9f:09:22:5c:31:93:60:ee:36:f2:fc:f3:87:ce:ab:ff:
         03:7c:49:9f:91:53:95:86:2a:e8:e2:37:0f:d0:45:b4:17:49:
         15:c4:1d:c5:7e:65:ce:f7:51:e1:56:42:d2:fd:54:7f:5a:95:
         97:9a:b8:a7:a4:8d:90:2d:4c:86:98:26:6e:f5:ef:6b:56:f1:
         62:85:ba:85:92:5b:37:11:ec:79:cf:86:ee:8d:30:a9:a2:aa:
         56:a0:79:ae:f3:fc:4f:f9:81:24:6d:1d:72:55:1f:27:7a:fe:
         ca:4d:86:1d:14:79:96:e2:8e:cf:05:67:20:ff:72:f6:2e:a9:
         39:79:d8:72:86:03:b9:95:a7:5c:b8:e1:7a:b5:8d:2d:98:c7:
         6c:79:b4:45:2a:6c:84:58:ff:3d:7f:5c:02:93:96:ee:87:42:
         35:99:de:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org