Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3133382e3138362e3233322e302f32322d3234203d3e20323632393739.roa
File:                     3133382e3138362e3233322e302f32322d3234203d3e20323632393739.roa (raw, json)
Hash identifier:          +Rr4mBH4jvO+7QEBQyYiEwrhoxlMViBotmZVQFhHU/I=
Subject key identifier:   C5:D7:21:89:F6:85:05:9A:53:B1:68:70:6A:3B:51:BE:9A:8B:06:32
Certificate issuer:       /CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
Certificate serial:       32C6503FCECC0F4FE279C67701A1BC507FE0A9B4
Authority key identifier: 99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3133382e3138362e3233322e302f32322d3234203d3e20323632393739.roa
Signing time:             Thu 04 Apr 2024 05:47:52 +0000
ROA not before:           Thu 04 Apr 2024 05:42:52 +0000
ROA not after:            Thu 03 Apr 2025 05:47:52 +0000
asID:                     262979
IP address blocks:        138.186.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c6:50:3f:ce:cc:0f:4f:e2:79:c6:77:01:a1:bc:50:7f:e0:a9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D
        Validity
            Not Before: Apr  4 05:42:52 2024 GMT
            Not After : Apr  3 05:47:52 2025 GMT
        Subject: CN=C5D72189F685059A53B168706A3B51BE9A8B0632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:c1:64:2c:b5:30:e7:47:4a:2a:fc:48:4f:
                    2c:12:91:8e:e8:e6:89:cb:ad:dd:f6:42:02:57:73:
                    70:ee:1e:b0:ac:62:b1:eb:09:05:97:6e:50:de:93:
                    a6:41:92:39:5e:6a:e2:01:7c:5b:26:c2:7a:7d:dc:
                    cb:80:a3:1e:07:ef:7c:13:31:eb:30:aa:f8:d5:46:
                    44:b5:cf:14:ed:bf:d5:b9:fc:e4:0e:e6:99:ef:c0:
                    ad:89:b2:67:35:b9:b2:ec:7e:47:60:43:dd:9a:fd:
                    3d:8d:13:00:f1:7b:dd:e5:fc:6c:de:ff:c9:2f:ba:
                    8f:e3:c0:f7:46:c7:b7:22:80:a6:ad:f2:1f:24:8f:
                    8f:e0:99:5d:1d:e0:b4:90:30:64:8e:fa:c3:2f:20:
                    b7:35:cc:36:e5:f6:8b:76:21:17:f2:85:aa:52:0e:
                    02:a0:98:b7:16:08:e5:99:25:e6:3e:55:4c:dc:e1:
                    0f:12:58:09:36:33:39:f4:c2:74:04:b5:ff:3b:6c:
                    30:43:f3:08:d5:c1:3c:23:c6:69:f2:e8:15:03:a5:
                    83:b0:ec:ba:71:fa:0e:3c:50:20:0d:32:cc:e5:fa:
                    f3:12:7e:42:de:4a:09:60:eb:4c:61:d4:82:77:50:
                    9c:2e:02:b7:76:6c:03:82:02:ea:23:de:c1:0f:b6:
                    4a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D7:21:89:F6:85:05:9A:53:B1:68:70:6A:3B:51:BE:9A:8B:06:32
            X509v3 Authority Key Identifier:
                keyid:99:E9:DF:48:0C:5E:7F:AC:EE:AD:7E:77:59:E5:EE:F3:C4:73:0E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99E9DF480C5E7FACEEAD7E7759E5EEF3C4730E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/1/3133382e3138362e3233322e302f32322d3234203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:b9:3d:a5:52:67:44:6a:b5:e6:0d:13:25:e6:75:ff:03:28:
         fa:79:a0:a5:db:f2:a8:f6:35:9c:b5:bf:3e:b2:01:f9:04:1a:
         9b:e4:6a:f0:17:91:f5:68:9b:04:17:60:e5:49:94:41:01:ac:
         16:c8:ff:3e:0e:c9:f2:64:0d:fa:d7:61:65:3e:0d:7e:a2:20:
         c6:39:f0:42:30:81:1a:7c:41:84:b0:38:e1:79:ef:3e:f7:52:
         c3:3a:92:a2:c6:3a:8e:bd:dd:66:b3:d4:cc:37:2a:99:33:6e:
         4a:be:7e:d0:70:f3:ad:d7:f5:75:4d:98:4b:a9:f6:3c:37:a1:
         e7:72:df:a3:cf:34:bd:15:96:7a:43:de:d6:c0:26:55:40:65:
         99:96:0a:e0:14:1c:39:59:ae:37:9f:dc:92:cd:73:ff:20:eb:
         07:44:eb:44:04:43:68:75:e7:43:86:a9:04:3d:f6:6b:73:69:
         e8:c3:d2:2f:4e:19:a6:30:fe:a8:3f:f5:78:96:2a:df:2d:8f:
         a0:e6:1d:b3:48:90:eb:5c:69:be:36:63:e5:a6:c3:a0:b6:8e:
         dd:7f:34:da:d4:87:48:19:84:d9:3e:6a:db:69:7c:1a:1e:95:
         37:5e:bb:79:f3:01:f7:e7:8e:5d:48:5b:85:b7:d4:4f:0d:ad:
         c0:bf:86:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:48 2024 by rpki-client on console-fra.rpki-client.org