Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/3133382e3132322e3133362e302f32342d3234203d3e20323634333239.roa
File:                     3133382e3132322e3133362e302f32342d3234203d3e20323634333239.roa (raw, json)
Hash identifier:          czqtUybm0QVFUdVBGAtsGUEfBuTJ2W7lvSuTZMdGwK4=
Subject key identifier:   91:9E:2A:7D:3E:38:7C:10:94:74:B0:15:25:59:8C:74:BF:B2:92:76
Certificate issuer:       /CN=2E940954738793728401E2B3BA1BF1AE600FF21A
Certificate serial:       1AC33069CB3458BA3E4957BDC2321533CCBD0673
Authority key identifier: 2E:94:09:54:73:87:93:72:84:01:E2:B3:BA:1B:F1:AE:60:0F:F2:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/3133382e3132322e3133362e302f32342d3234203d3e20323634333239.roa
Signing time:             Mon 30 Sep 2024 14:44:33 +0000
ROA not before:           Mon 30 Sep 2024 14:39:33 +0000
ROA not after:            Mon 29 Sep 2025 14:44:33 +0000
asID:                     264329
IP address blocks:        138.122.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.crl
                          rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 03:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c3:30:69:cb:34:58:ba:3e:49:57:bd:c2:32:15:33:cc:bd:06:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E940954738793728401E2B3BA1BF1AE600FF21A
        Validity
            Not Before: Sep 30 14:39:33 2024 GMT
            Not After : Sep 29 14:44:33 2025 GMT
        Subject: CN=919E2A7D3E387C109474B01525598C74BFB29276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:99:14:2d:02:bd:33:8d:92:9b:66:1f:cd:aa:
                    95:c2:2b:6e:33:6b:ac:1b:6e:06:03:59:af:8d:22:
                    21:6a:09:50:cf:49:be:a0:c7:48:63:b1:93:09:4c:
                    42:a2:b3:1f:70:b0:f4:c8:83:d5:4a:97:9f:e1:46:
                    d6:25:dd:87:35:68:f2:a2:ce:83:c5:62:e8:3d:48:
                    88:2a:51:c7:10:7d:45:6e:6f:b9:92:eb:94:6e:a5:
                    1d:6d:ca:fa:45:c3:c7:16:c1:ba:77:44:1c:ad:09:
                    ec:af:2e:b2:5f:bb:9f:14:a6:36:c0:96:09:b4:95:
                    3c:04:67:b3:13:56:b1:2c:65:a6:aa:47:a8:c4:9f:
                    e5:7b:02:44:4c:42:7a:ae:4c:98:95:a9:65:3b:02:
                    da:95:97:4d:86:15:9e:3f:b3:4d:c8:bb:30:c6:87:
                    d9:1e:dc:a9:aa:83:17:03:f2:82:d3:b0:77:16:23:
                    0d:7a:4d:ed:02:8d:d8:63:ea:ed:a6:b2:e6:f1:c1:
                    ee:81:96:00:3a:7b:ac:4b:37:ab:c9:3f:42:1e:4b:
                    b0:a6:da:66:dd:66:d8:9e:85:6c:f0:16:84:d3:c8:
                    c1:26:e7:53:77:4c:b1:22:2e:23:ff:2b:e9:94:33:
                    84:fe:d8:28:2e:be:a4:43:13:65:33:27:dc:ba:f7:
                    97:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9E:2A:7D:3E:38:7C:10:94:74:B0:15:25:59:8C:74:BF:B2:92:76
            X509v3 Authority Key Identifier:
                keyid:2E:94:09:54:73:87:93:72:84:01:E2:B3:BA:1B:F1:AE:60:0F:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/2E940954738793728401E2B3BA1BF1AE600FF21A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E940954738793728401E2B3BA1BF1AE600FF21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYdxeBDCKvqxU5gjqoqXi62on7CK9Ht26qgKKRPrZk8G/0/3133382e3132322e3133362e302f32342d3234203d3e20323634333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:ad:47:b5:d2:09:d9:43:62:7c:5a:65:51:73:5b:b6:0e:82:
         7f:34:67:52:84:fd:af:b0:1e:d2:9d:17:92:fb:1e:70:ec:0b:
         ff:10:fe:f5:c0:1a:94:ea:5d:3d:8d:2b:5f:f5:3f:71:61:c9:
         9f:1a:a4:28:e0:31:c6:9e:56:f0:57:5a:5c:b8:a4:66:09:8e:
         4c:52:8e:42:4b:4a:27:9e:5e:fa:a8:9b:5c:f3:fe:eb:f3:09:
         c5:45:e4:9c:a5:06:56:c8:0f:53:fa:e9:c2:1a:11:21:ef:8c:
         d5:b4:b6:2d:52:ff:6d:a9:fe:b2:a5:37:f3:81:c2:a9:4a:c0:
         11:8d:a7:e3:22:27:93:67:2d:12:a1:40:6b:1d:d8:2f:3b:a9:
         d2:03:5e:70:46:b7:a8:bf:2a:c4:21:80:e8:b4:5b:05:ba:6d:
         fe:55:41:c3:92:89:a9:c9:7d:ec:53:27:3f:b0:50:a0:88:28:
         f3:65:d1:40:25:5e:c6:a2:a4:44:9a:54:a5:39:66:94:3d:f9:
         05:55:a4:32:3b:34:e7:8d:5a:7d:a1:75:7b:6d:10:29:ea:b4:
         4a:c4:c1:89:06:45:2b:84:63:1e:b4:99:5e:90:b5:60:20:b5:
         f2:9a:50:c4:14:0f:41:05:ba:25:0f:d4:ce:1e:b3:30:b1:dc:
         01:0e:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:02:21 2025 by rpki-client