Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3232203d3e20323634353339.roa
File:                     3133382e302e32342e302f32322d3232203d3e20323634353339.roa (raw, json)
Hash identifier:          WTCV+j7MPk6RKYKf40eiyNsExTffZrjg9ScJgTqiAf4=
Subject key identifier:   4B:68:67:BC:FC:70:A7:05:E3:E2:9C:40:A2:03:81:35:75:E8:CD:44
Certificate issuer:       /CN=D56F5D5D003FE373DB99F5814A096011E33A10BF
Certificate serial:       34BCE1568DA1EFEF5D5EFBA81215D18101A41650
Authority key identifier: D5:6F:5D:5D:00:3F:E3:73:DB:99:F5:81:4A:09:60:11:E3:3A:10:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56F5D5D003FE373DB99F5814A096011E33A10BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3232203d3e20323634353339.roa
Signing time:             Wed 19 Jun 2024 21:20:45 +0000
ROA not before:           Wed 19 Jun 2024 21:15:45 +0000
ROA not after:            Wed 18 Jun 2025 21:20:45 +0000
asID:                     264539
IP address blocks:        138.0.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/D56F5D5D003FE373DB99F5814A096011E33A10BF.crl
                          rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/D56F5D5D003FE373DB99F5814A096011E33A10BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56F5D5D003FE373DB99F5814A096011E33A10BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bc:e1:56:8d:a1:ef:ef:5d:5e:fb:a8:12:15:d1:81:01:a4:16:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D56F5D5D003FE373DB99F5814A096011E33A10BF
        Validity
            Not Before: Jun 19 21:15:45 2024 GMT
            Not After : Jun 18 21:20:45 2025 GMT
        Subject: CN=4B6867BCFC70A705E3E29C40A203813575E8CD44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:f7:14:da:e2:0e:e8:52:0c:35:cf:93:5f:
                    5e:90:6b:1b:17:b5:56:c8:40:c0:12:37:cf:3e:c7:
                    d7:6a:71:a7:f7:6e:c2:6a:36:13:f7:37:dc:10:e3:
                    42:72:dd:a9:2a:73:9f:25:aa:23:79:40:ef:7d:b4:
                    75:56:22:35:c6:a4:bf:5f:c1:3e:25:ed:d1:a0:4f:
                    56:ee:8d:ab:a6:07:16:98:4f:9c:35:b9:78:08:b1:
                    bc:d5:ff:f2:61:2f:41:90:e9:01:5f:3a:54:e8:51:
                    17:df:9c:11:49:96:b4:ba:b3:c6:21:23:b7:24:e4:
                    c1:28:04:ca:7c:03:24:31:ef:35:c2:70:80:09:51:
                    4e:bb:a1:ec:50:3e:d3:1b:d6:b3:f1:1d:62:46:27:
                    99:1f:c2:1a:2e:96:55:68:7c:1b:6e:9b:68:0b:82:
                    5e:76:99:88:54:fd:56:d9:e4:1e:ab:1f:dd:32:af:
                    d2:8e:4a:f4:f9:46:9d:b8:43:8c:6f:cb:b2:87:d6:
                    c4:18:50:b4:fd:df:75:b7:5a:e2:5e:9a:cc:d9:3d:
                    7e:c8:c4:01:b4:31:69:d0:2b:e3:21:77:72:48:ff:
                    4b:22:8b:b3:e8:42:4b:ae:a9:74:29:c7:cc:b2:b6:
                    46:02:2f:00:fb:64:dd:50:ea:e4:ed:7c:ed:5b:0c:
                    13:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:68:67:BC:FC:70:A7:05:E3:E2:9C:40:A2:03:81:35:75:E8:CD:44
            X509v3 Authority Key Identifier:
                keyid:D5:6F:5D:5D:00:3F:E3:73:DB:99:F5:81:4A:09:60:11:E3:3A:10:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/D56F5D5D003FE373DB99F5814A096011E33A10BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56F5D5D003FE373DB99F5814A096011E33A10BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/3133382e302e32342e302f32322d3232203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:25:c9:a2:65:64:b3:f5:14:5d:ce:c5:9b:4d:80:48:86:02:
         d6:27:0c:cb:df:7c:46:69:11:83:d7:25:08:bc:42:0f:8f:56:
         63:35:6c:6c:97:96:26:e1:9b:93:bd:16:d0:e2:27:f1:92:52:
         ce:f3:f3:76:93:da:c6:cc:96:1e:21:c4:a0:1b:b1:6d:e0:94:
         69:d4:df:d4:66:74:b0:1a:0d:4d:7a:76:b9:b4:ab:a9:2e:c7:
         af:a2:75:cc:a5:a9:7a:a3:88:8e:41:06:ed:cd:b0:3c:27:f0:
         06:1a:f8:aa:9c:0a:cc:f7:4f:bb:02:ae:96:ce:07:bf:2f:80:
         ba:9f:7a:29:c4:0e:9a:57:4b:0d:f4:b6:14:bf:e0:55:dd:7d:
         2c:35:45:cd:b0:cb:e1:04:4a:1a:c0:1c:4a:c0:25:2c:d1:0f:
         18:18:de:62:fc:a9:5e:d8:e6:2a:f7:75:63:55:79:6b:03:ab:
         54:58:7a:1f:44:b4:54:21:14:7d:2c:65:d5:88:e9:91:af:6b:
         93:63:f3:ce:7f:81:1e:9a:e9:c7:ff:1c:36:72:d9:e6:e0:79:
         fe:ed:da:d6:29:9d:34:01:11:61:fd:b2:c4:2a:fa:af:27:e6:
         01:22:2d:6d:95:8b:43:19:dc:2c:f1:63:ab:ec:88:8b:70:1a:
         98:c6:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:07 2024 by rpki-client on console-fra.rpki-client.org