Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/3133382e3138352e3132382e302f32322d3232203d3e20323633393134.roa
File:                     3133382e3138352e3132382e302f32322d3232203d3e20323633393134.roa (raw, json)
Hash identifier:          XTO5hd+Hb/W1anw37ARx6OP1DUr997y1DOfCdjNBM8M=
Subject key identifier:   AA:71:74:78:2A:01:6F:BC:EF:6A:36:18:B4:5B:7E:56:64:2E:62:11
Certificate issuer:       /CN=32F59A098BBE3BAFB45736B5DA4B6211B4E55561
Certificate serial:       26BE8FE41734AF6EF9CE23B8D0B71E32A5160184
Authority key identifier: 32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/3133382e3138352e3132382e302f32322d3232203d3e20323633393134.roa
Signing time:             Fri 05 Apr 2024 00:53:25 +0000
ROA not before:           Fri 05 Apr 2024 00:48:25 +0000
ROA not after:            Fri 04 Apr 2025 00:53:25 +0000
asID:                     263914
IP address blocks:        138.185.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.crl
                          rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:be:8f:e4:17:34:af:6e:f9:ce:23:b8:d0:b7:1e:32:a5:16:01:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F59A098BBE3BAFB45736B5DA4B6211B4E55561
        Validity
            Not Before: Apr  5 00:48:25 2024 GMT
            Not After : Apr  4 00:53:25 2025 GMT
        Subject: CN=AA7174782A016FBCEF6A3618B45B7E56642E6211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:ba:34:b5:25:7b:e3:47:5c:1b:c5:6f:00:
                    54:5a:f4:84:7e:e4:e8:6e:78:06:48:e2:62:66:2e:
                    6c:a4:ca:32:e8:0e:f4:a5:ca:d9:3b:56:c5:e2:9c:
                    5f:7b:12:fe:fe:f1:11:99:ff:88:fe:95:7b:53:2c:
                    6c:be:fe:d1:bc:33:77:20:c6:ef:c9:b1:f8:4c:77:
                    1b:c6:bf:5b:7a:15:9a:70:14:46:68:5d:16:62:07:
                    de:1d:ae:0e:4a:8f:54:74:8b:f1:15:08:49:18:ab:
                    01:04:4c:74:a2:74:99:56:f9:1f:5a:63:94:28:a4:
                    34:dc:aa:a7:53:9b:ba:75:77:7e:11:a9:f8:d2:86:
                    1f:e1:84:f9:d3:c2:4c:5b:0f:91:1c:44:9a:07:27:
                    82:2d:72:f5:79:ab:a3:54:1e:0e:64:32:a1:5e:fb:
                    da:bb:86:34:38:80:88:e0:5c:53:26:41:94:9c:c7:
                    70:ab:06:36:75:b3:76:0d:42:36:07:17:c5:76:f7:
                    f4:b3:94:ac:ff:c7:d0:2b:e3:2f:b1:dc:c7:41:ba:
                    ef:3e:a7:dc:0c:f5:aa:a3:02:da:59:83:37:66:b0:
                    7d:b4:3c:ae:85:ca:bd:82:ba:29:41:0f:3b:dc:de:
                    39:0c:6a:6b:bc:b1:1b:0f:7b:06:84:ca:a1:8d:f0:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:71:74:78:2A:01:6F:BC:EF:6A:36:18:B4:5B:7E:56:64:2E:62:11
            X509v3 Authority Key Identifier:
                keyid:32:F5:9A:09:8B:BE:3B:AF:B4:57:36:B5:DA:4B:62:11:B4:E5:55:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F59A098BBE3BAFB45736B5DA4B6211B4E55561.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/1/3133382e3138352e3132382e302f32322d3232203d3e20323633393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:08:0f:b2:17:91:87:78:27:e3:98:51:dc:4f:1b:ba:32:8f:
         29:04:ae:45:fa:a0:78:06:ba:79:f2:30:7b:4a:33:28:4b:90:
         31:b4:56:99:68:b1:6a:4f:6a:e3:40:ca:37:4e:71:fc:50:0e:
         a4:d5:0e:83:b1:02:4f:90:57:af:49:f4:15:7b:04:8a:12:cc:
         db:cf:fd:55:eb:a0:d6:d8:68:88:50:56:41:0a:a4:3c:de:6a:
         96:2a:e3:22:34:71:33:bb:1a:b1:0b:6b:e9:b7:04:cb:fc:7e:
         6e:ee:c9:d6:61:bf:bf:31:12:75:1e:06:a9:48:6c:62:3a:db:
         c5:ca:b4:39:20:6a:a4:0d:a5:6d:bc:76:c2:b8:cf:8e:e8:aa:
         9e:b2:58:cb:48:19:e2:0d:b2:44:74:34:f3:d4:0a:eb:9e:1f:
         a6:bc:c1:b3:46:c3:dc:af:24:10:d3:66:a8:e8:b1:1d:23:57:
         59:78:74:08:93:ce:bc:91:1e:aa:09:0d:cc:18:9e:2f:5d:d8:
         91:e7:70:c3:40:b1:45:a3:28:93:18:80:3d:7e:06:40:ba:2e:
         dd:21:ee:ec:b5:f8:1a:ff:f7:d7:a7:f2:2b:59:e1:04:3a:65:
         eb:b3:41:ff:9d:04:28:26:30:9e:54:6d:9b:21:c3:3a:7b:09:
         c0:b4:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org