Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa
File:                     3133382e39372e32342e302f32322d3234203d3e20323634313138.roa (raw, json)
Hash identifier:          Cl5+d6DisGJXMVUEXBm4XXeVfUbKu9OI8jMZn7DaS8Q=
Subject key identifier:   F4:12:F7:B7:23:D8:68:00:F1:9C:C5:F3:54:0C:25:2E:DE:77:BC:CD
Certificate issuer:       /CN=0B31CCC1E89F4389597737BE4B57373331925A2F
Certificate serial:       6472338AC3C28435F3DC124633D72A13CD2C2F79
Authority key identifier: 0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa
Signing time:             Thu 04 Apr 2024 21:37:42 +0000
ROA not before:           Thu 04 Apr 2024 21:32:42 +0000
ROA not after:            Thu 03 Apr 2025 21:37:42 +0000
asID:                     264118
IP address blocks:        138.97.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl
                          rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:72:33:8a:c3:c2:84:35:f3:dc:12:46:33:d7:2a:13:cd:2c:2f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B31CCC1E89F4389597737BE4B57373331925A2F
        Validity
            Not Before: Apr  4 21:32:42 2024 GMT
            Not After : Apr  3 21:37:42 2025 GMT
        Subject: CN=F412F7B723D86800F19CC5F3540C252EDE77BCCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8b:8e:b7:44:2c:5a:4a:59:cd:a3:ef:d2:45:
                    4c:2a:6f:24:3b:ae:34:f0:c6:73:d6:85:31:70:33:
                    9f:40:4a:c2:57:90:9a:69:5b:9b:ca:45:44:de:24:
                    10:c0:d1:ce:cb:7f:3f:bb:ca:58:21:1f:1a:8a:16:
                    01:f0:94:db:3a:0a:72:fb:2f:52:eb:a6:f6:b4:f0:
                    17:65:1c:72:98:13:2e:3f:b0:0b:b4:a3:e3:76:0c:
                    89:90:4b:43:29:72:49:c6:b5:dc:db:11:d5:33:d4:
                    ba:ae:29:f1:ab:0c:66:60:bb:e5:e6:8f:9c:cc:01:
                    68:85:84:cc:02:a0:28:a0:89:47:24:f7:36:62:18:
                    0f:ee:5f:81:04:db:96:48:f5:4a:d9:38:99:30:52:
                    0d:85:f6:95:7b:03:57:5c:47:89:10:b9:93:98:6d:
                    14:c7:57:c1:75:24:f6:a4:9c:f4:ac:45:14:0f:94:
                    d5:ee:b0:33:9d:4a:13:2e:9e:f2:aa:dd:70:1b:29:
                    c3:f6:cf:e4:1c:72:70:75:a7:3d:0f:e7:be:a2:eb:
                    f1:5d:bf:d5:4c:5d:92:c4:ad:0f:33:8f:6f:98:33:
                    20:8b:09:e8:10:a3:72:04:35:e7:ab:8b:01:40:47:
                    11:70:29:29:c2:d9:89:58:2d:b3:da:5a:c6:55:0f:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:12:F7:B7:23:D8:68:00:F1:9C:C5:F3:54:0C:25:2E:DE:77:BC:CD
            X509v3 Authority Key Identifier:
                keyid:0B:31:CC:C1:E8:9F:43:89:59:77:37:BE:4B:57:37:33:31:92:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/0B31CCC1E89F4389597737BE4B57373331925A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B31CCC1E89F4389597737BE4B57373331925A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHKkGzYwWdtTr7njz1B6sFccsAKJtZZ3kDKptXM3ASqx/1/3133382e39372e32342e302f32322d3234203d3e20323634313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:cb:3f:86:4d:40:94:56:74:d5:c0:e1:c5:38:33:f1:c5:6f:
         29:ad:a6:6f:65:4a:57:81:f1:f8:b7:f3:b3:8f:4c:e7:9d:11:
         c3:1d:78:80:e5:9f:c0:5f:37:a2:90:9d:01:78:ea:ac:16:f7:
         d5:90:41:6b:20:b2:3c:bb:ce:75:0e:3d:59:60:36:e4:73:c2:
         fb:8a:f2:62:d8:16:c9:8a:c3:00:e4:fe:cc:2e:b3:7e:be:c1:
         cd:2e:35:02:2c:03:c0:24:40:5d:d5:3f:2a:84:67:99:34:24:
         88:bd:26:fc:fa:85:0a:88:3d:f6:d4:93:6a:97:76:54:7e:87:
         51:f8:4a:a2:52:3b:13:5c:2c:1f:0b:72:fa:54:21:cb:40:56:
         06:a7:e9:91:24:ab:b2:aa:41:a0:2c:2c:b7:83:b2:59:ba:c6:
         81:68:28:90:49:ba:e9:6c:2a:31:04:36:3b:7b:f4:05:3b:c7:
         6a:59:73:64:be:dc:4a:01:8f:52:c9:eb:b8:8f:4f:df:d0:eb:
         37:94:b3:12:6e:87:d9:6c:15:49:77:a5:8c:59:bc:9e:21:1a:
         11:eb:b1:a6:bc:17:44:99:8f:9c:cd:4c:9d:2f:c6:51:ce:d5:
         56:2e:2c:31:1c:20:f6:ea:61:da:81:7d:02:d3:42:7b:62:48:
         96:03:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:04 2024 by rpki-client on console-ams.rpki-client.org