Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e39392e38382e302f32322d3234203d3e20323730383134.roa
File:                     3133382e39392e38382e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          ccpauLG8AEKWhLSM5cv3o8tnGk2ESIThvmhV0iSUJOY=
Subject key identifier:   5E:3B:88:DC:F3:D6:6F:0B:F7:31:36:EB:36:E5:1D:0A:E9:D1:C3:87
Certificate issuer:       /CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
Certificate serial:       3824D68FA7554ED7637015167FD36A9D18BDB0A2
Authority key identifier: BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e39392e38382e302f32322d3234203d3e20323730383134.roa
Signing time:             Tue 30 Apr 2024 19:59:51 +0000
ROA not before:           Tue 30 Apr 2024 19:54:51 +0000
ROA not after:            Tue 29 Apr 2025 19:59:51 +0000
asID:                     270814
IP address blocks:        138.99.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:24:d6:8f:a7:55:4e:d7:63:70:15:16:7f:d3:6a:9d:18:bd:b0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
        Validity
            Not Before: Apr 30 19:54:51 2024 GMT
            Not After : Apr 29 19:59:51 2025 GMT
        Subject: CN=5E3B88DCF3D66F0BF73136EB36E51D0AE9D1C387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:f4:4f:be:fd:59:0f:ee:28:e9:71:4e:70:
                    be:7b:9b:4a:d5:70:4f:8d:4a:94:7b:21:fe:ab:96:
                    81:a1:b2:70:08:4a:3c:05:53:10:46:5e:b7:ae:96:
                    37:44:6f:5f:03:20:83:00:51:05:9d:7b:76:f2:6d:
                    97:a9:7d:f7:e7:5c:a1:7e:15:6f:da:81:47:a7:d5:
                    7a:04:3a:2f:47:f7:53:84:1a:b1:16:32:c4:9d:ab:
                    e2:fa:fc:e9:b3:10:ff:de:d2:72:64:38:ca:2b:fb:
                    1c:4e:e9:57:cb:31:1c:aa:62:9f:bb:fd:4f:fc:cd:
                    5b:0b:7d:ff:4b:ae:4e:b4:ae:df:b7:1b:a7:d0:86:
                    9d:eb:b5:69:ca:a9:70:13:5f:82:7c:13:fe:30:cf:
                    bc:bf:cb:f8:d3:d6:ae:36:c9:06:6a:d8:28:57:17:
                    91:47:c1:04:f1:f7:29:23:ac:81:7f:34:f8:0f:c2:
                    ee:ef:00:6d:9d:b1:38:76:d9:10:72:a8:7c:db:0e:
                    38:da:8e:d9:7c:fd:4a:fe:dd:48:fb:9a:92:7c:f9:
                    87:55:a1:e7:fe:37:20:b5:55:27:b6:0c:ac:c9:8b:
                    bb:cd:2c:ce:95:67:7b:32:bd:20:a8:e0:ad:7d:eb:
                    4a:31:64:ae:47:a8:e0:17:16:8b:6e:36:33:33:0d:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3B:88:DC:F3:D6:6F:0B:F7:31:36:EB:36:E5:1D:0A:E9:D1:C3:87
            X509v3 Authority Key Identifier:
                keyid:BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e39392e38382e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:30:2a:bb:d9:1f:90:ce:6d:8a:1c:0a:2d:65:6b:c1:13:2a:
         d3:67:fe:1d:a4:9a:fc:62:5d:da:8f:62:11:95:cc:97:4b:35:
         8c:eb:ca:47:a2:51:c6:98:0c:7b:62:fe:2f:a4:b0:00:85:86:
         35:07:16:fd:31:33:cd:76:28:0c:a1:67:75:90:7e:b9:dd:17:
         97:fe:1e:21:78:12:26:6a:88:c9:8b:5e:53:54:df:4a:d1:07:
         94:a5:63:13:37:fb:f0:65:4a:ee:c1:c8:14:73:f4:fa:98:08:
         bd:ee:b3:d8:47:bf:13:90:8a:b6:0b:95:2c:b9:60:c3:f9:eb:
         c6:28:b5:ed:0f:29:35:6f:1a:a6:3b:57:49:70:3e:21:02:7c:
         3d:45:78:d5:2a:0f:23:9b:d9:24:66:12:a3:21:90:80:26:26:
         e9:fa:ee:89:aa:3a:fb:67:23:a2:44:c2:43:f4:c2:a8:cf:18:
         98:70:fe:e4:4b:3b:95:aa:88:bf:27:d2:34:bb:42:ab:17:7c:
         56:0a:16:48:dc:5c:6a:a9:62:c6:71:28:02:bf:73:16:f8:9b:
         74:21:33:dd:2b:a9:eb:93:5d:0a:3f:21:50:90:12:03:8a:56:
         24:96:7a:96:67:ba:74:9c:f5:65:b4:29:4a:69:88:a9:ad:33:
         bb:1d:19:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:21 2024 by rpki-client on console-ams.rpki-client.org