Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa
File:                     3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa (raw, json)
Hash identifier:          pPaxHJ+a/VrbAXT6XyA1zmxmh8FrfTP3VLN2WjxYpys=
Subject key identifier:   E7:0E:C8:81:EF:D0:EB:EC:EC:B6:D7:55:EB:64:35:EA:53:3D:6D:52
Certificate issuer:       /CN=9BAD7480D68EE59406D3FBBE7F30557285587474
Certificate serial:       07E0BE7F1396158E56D880E10894F1E088484ED0
Authority key identifier: 9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa
Signing time:             Thu 04 Apr 2024 05:22:21 +0000
ROA not before:           Thu 04 Apr 2024 05:17:21 +0000
ROA not after:            Thu 03 Apr 2025 05:22:21 +0000
asID:                     264300
IP address blocks:        138.121.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl
                          rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e0:be:7f:13:96:15:8e:56:d8:80:e1:08:94:f1:e0:88:48:4e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BAD7480D68EE59406D3FBBE7F30557285587474
        Validity
            Not Before: Apr  4 05:17:21 2024 GMT
            Not After : Apr  3 05:22:21 2025 GMT
        Subject: CN=E70EC881EFD0EBECECB6D755EB6435EA533D6D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:ee:44:da:30:27:89:e5:02:e6:d3:16:ad:
                    7a:38:a3:b3:8d:41:0d:cd:a8:11:9d:e3:c6:a8:2a:
                    59:38:29:53:ce:d5:52:f4:96:83:4f:45:41:a9:d4:
                    f5:97:cb:fa:76:22:b5:a8:8f:fb:b5:cb:f9:48:2d:
                    68:69:3e:c4:32:ee:70:96:ba:18:00:89:14:02:4e:
                    33:ae:dd:97:c2:82:44:35:75:19:a2:fd:06:ba:80:
                    ff:44:3d:1c:7c:5a:e2:91:b3:12:9b:a0:9f:bf:d1:
                    52:0d:4e:20:fd:07:ff:e2:31:5d:c6:e4:7c:3c:4c:
                    dd:72:62:d8:7f:e4:2d:c1:c5:68:c3:21:26:be:53:
                    b1:93:03:06:9b:d5:d2:1c:f6:f6:7e:b8:d8:83:73:
                    21:7a:01:73:7d:09:4f:c5:67:44:6f:11:9c:b5:26:
                    ab:1e:a1:58:78:9a:a2:42:c6:b9:bd:15:26:3b:38:
                    04:ec:1f:6d:c4:10:4d:84:e6:0c:5e:0e:a6:ef:09:
                    d7:ce:5c:cd:11:a8:0f:05:6c:43:0c:fe:3c:70:c5:
                    1f:16:1e:04:bb:52:77:11:d7:0f:4b:56:d9:77:7a:
                    c6:68:0d:c5:94:70:c6:0d:a6:f6:44:6a:ca:1d:50:
                    e8:f3:0b:ec:e8:38:3f:f9:60:9c:75:5e:ee:40:23:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0E:C8:81:EF:D0:EB:EC:EC:B6:D7:55:EB:64:35:EA:53:3D:6D:52
            X509v3 Authority Key Identifier:
                keyid:9B:AD:74:80:D6:8E:E5:94:06:D3:FB:BE:7F:30:55:72:85:58:74:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/9BAD7480D68EE59406D3FBBE7F30557285587474.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BAD7480D68EE59406D3FBBE7F30557285587474.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/1/3133382e3132312e3133322e302f32322d3232203d3e20323634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:cb:e5:e9:0f:28:ab:2c:67:33:49:75:96:91:c3:43:e2:b3:
         39:88:be:b8:98:5c:22:5f:c9:1c:1a:93:8c:ad:34:02:ba:2f:
         09:3b:9f:cb:b7:1c:be:d5:88:5c:5d:00:99:fc:08:cd:8b:f3:
         eb:91:97:ca:0a:e3:2e:5b:58:24:b6:17:b0:50:25:78:5b:9c:
         91:c3:9a:d1:e4:e9:f5:26:a8:d6:b4:4f:48:64:a2:2d:ef:8a:
         61:44:76:c5:75:6f:fa:ab:b2:2a:02:bb:64:87:6c:8a:6c:df:
         58:a5:09:36:68:47:27:d0:a9:8b:39:69:18:0c:f4:a5:94:af:
         73:c4:64:9f:45:4e:33:62:c2:40:e2:1f:19:23:59:a2:67:5e:
         00:32:e2:f1:6b:35:d7:5b:02:03:98:a3:d7:8d:40:0a:83:2f:
         ae:f6:18:ca:76:55:ff:5f:1c:4c:9b:10:12:14:b4:71:73:65:
         9b:61:a3:a8:21:18:b3:0b:cb:5b:f7:3f:fa:40:0a:e6:4b:5e:
         1d:46:ee:3d:ad:f0:82:d4:47:d7:51:cf:cc:a9:25:0d:49:29:
         11:b6:54:f8:30:59:b7:25:44:93:07:61:c6:ac:d7:7a:98:93:
         b6:02:6d:ba:00:c7:b9:e9:32:f4:62:07:4f:80:65:10:24:30:
         c1:9b:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:17 2024 by rpki-client on console-ams.rpki-client.org