Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39372e3132302e302f32322d3234203d3e20323639303733.roa
File:                     3133382e39372e3132302e302f32322d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          /xIRmO9MG5TZVh5RfEfrI419HQCvdv/3NAbuqxl+aeQ=
Subject key identifier:   5E:A8:47:CF:31:6E:2D:BE:ED:B4:00:91:DA:AE:69:2E:F7:DE:AB:BF
Certificate issuer:       /CN=7C85DCA145843B801E0DE7F701B0084B2991189D
Certificate serial:       338D0F590358E771C3F5C50C33146777FB6E32E5
Authority key identifier: 7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39372e3132302e302f32322d3234203d3e20323639303733.roa
Signing time:             Fri 19 Apr 2024 20:19:00 +0000
ROA not before:           Fri 19 Apr 2024 20:14:00 +0000
ROA not after:            Fri 18 Apr 2025 20:19:00 +0000
asID:                     269073
IP address blocks:        138.97.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8d:0f:59:03:58:e7:71:c3:f5:c5:0c:33:14:67:77:fb:6e:32:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C85DCA145843B801E0DE7F701B0084B2991189D
        Validity
            Not Before: Apr 19 20:14:00 2024 GMT
            Not After : Apr 18 20:19:00 2025 GMT
        Subject: CN=5EA847CF316E2DBEEDB40091DAAE692EF7DEABBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:3f:60:95:86:8d:52:b5:7d:0d:d8:31:55:
                    f3:51:a8:7e:64:a1:f1:eb:30:44:06:3f:7b:e8:d1:
                    8e:5d:02:6b:ca:b3:cd:35:f4:15:f2:41:b9:69:0f:
                    e4:89:c5:38:c2:7c:35:3c:d9:c5:64:46:c0:61:3d:
                    3e:2f:2b:5f:f1:ec:66:c2:85:94:11:af:9e:c7:14:
                    84:ef:99:55:04:4a:42:6a:8c:40:b5:08:85:fd:57:
                    44:83:84:86:b3:7b:33:2d:e5:3d:73:53:bf:da:a2:
                    3e:70:60:1f:fd:25:ea:70:84:55:14:98:85:2f:8f:
                    3e:a6:60:85:d1:c7:0e:01:4b:3b:d9:ee:fb:dd:7a:
                    50:5e:34:64:13:04:21:e0:e1:26:8b:f3:f5:46:0a:
                    f9:aa:8c:26:a0:f5:7a:c7:ef:90:9a:42:f1:ec:b4:
                    f5:50:f8:d9:da:01:a6:ac:a9:d4:60:fa:c3:be:7a:
                    b3:1f:3c:b4:db:fd:0c:59:fd:6b:ae:f0:f2:fd:d6:
                    34:de:eb:af:bb:99:8b:d5:30:01:33:5a:c9:ba:e1:
                    8e:a0:7f:cd:7f:3d:64:7e:7b:88:1b:d1:2f:3a:4d:
                    c9:7a:f9:ef:48:c4:13:fe:22:2d:62:51:b3:d5:b8:
                    d3:b4:f9:b6:8f:b2:63:80:eb:5f:e9:8b:21:f1:da:
                    b6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A8:47:CF:31:6E:2D:BE:ED:B4:00:91:DA:AE:69:2E:F7:DE:AB:BF
            X509v3 Authority Key Identifier:
                keyid:7C:85:DC:A1:45:84:3B:80:1E:0D:E7:F7:01:B0:08:4B:29:91:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/7C85DCA145843B801E0DE7F701B0084B2991189D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C85DCA145843B801E0DE7F701B0084B2991189D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39372e3132302e302f32322d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:87:ba:f9:d7:d3:1b:c5:93:c0:fa:63:63:6e:b0:52:45:be:
         3c:76:35:aa:0d:a3:c0:f3:33:11:a8:97:f8:63:86:b9:a9:db:
         fe:18:3c:1a:2a:dc:d7:6b:90:2a:b1:77:31:f1:53:eb:d3:5b:
         2d:41:a4:98:a2:c7:e5:59:7c:2e:67:bb:d0:68:1a:0d:3e:0e:
         17:8b:dd:03:80:25:b7:f7:6f:9a:b9:34:9e:fc:37:a3:fe:c7:
         8c:b7:85:d0:39:e4:69:8b:14:fa:3f:f9:25:84:e8:d6:5a:62:
         01:1c:4a:3c:36:5a:e5:bb:e2:95:49:80:a9:b4:61:df:82:98:
         6d:22:67:d1:99:57:e4:f5:9b:67:70:87:a4:54:d7:4d:5e:07:
         44:9c:3f:23:1f:ee:ff:3c:bd:20:76:e9:42:4c:25:6e:9c:74:
         cc:e6:ff:d5:b0:81:6c:f8:62:4d:1f:d9:d8:ae:b2:96:24:ce:
         7a:86:cd:3c:64:43:9f:ad:ee:a0:8a:f5:e3:45:9a:47:5b:e9:
         47:28:5b:ec:23:d3:16:c3:f7:8a:e8:ef:36:8b:54:ac:dc:84:
         90:48:68:ab:5b:39:f9:b8:06:74:27:d5:74:8a:2e:b1:d4:42:
         81:20:eb:31:36:60:80:21:6e:0e:e3:27:ea:47:2d:c5:d5:dd:
         43:7e:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:26:07 2024 by rpki-client on console-ams.rpki-client.org