Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133382e3138352e342e302f32322d3234203d3e20323636343333.roa
File:                     3133382e3138352e342e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          PmkLHk0HnQJR6r/7JHOZJ7IcO4BbKhZv2hdaZ80CSi0=
Subject key identifier:   96:82:32:9A:57:17:A8:4D:07:01:AE:25:01:2E:E6:8E:A6:32:9E:E4
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       49768D255B797C06A9E34D28495C61EEFF6CF757
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133382e3138352e342e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 08 Jul 2024 18:44:14 +0000
ROA not before:           Mon 08 Jul 2024 18:39:14 +0000
ROA not after:            Mon 07 Jul 2025 18:44:14 +0000
asID:                     266433
IP address blocks:        138.185.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 01:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:76:8d:25:5b:79:7c:06:a9:e3:4d:28:49:5c:61:ee:ff:6c:f7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Jul  8 18:39:14 2024 GMT
            Not After : Jul  7 18:44:14 2025 GMT
        Subject: CN=9682329A5717A84D0701AE25012EE68EA6329EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:67:5d:f7:69:61:78:62:e3:8a:cf:52:53:
                    2b:03:5a:97:85:4e:f4:8c:e2:b8:98:4c:a4:56:42:
                    05:35:8e:27:5a:61:e5:e9:e0:31:4b:0e:6d:c5:4c:
                    8d:78:b7:00:d0:db:4d:bc:89:00:b1:35:0c:f5:9e:
                    0e:55:41:23:ee:f2:4c:35:50:c9:1e:1f:3f:3b:ce:
                    30:6e:ff:82:ed:1b:c8:e4:33:7d:e9:30:f6:a8:9d:
                    c4:27:df:ff:8c:45:47:b4:30:55:90:42:24:eb:9d:
                    27:82:8c:49:3d:ae:04:5a:cd:f0:72:49:45:69:22:
                    cb:9c:39:6a:2d:0c:5f:08:28:5b:e8:e3:5d:28:17:
                    8f:34:2a:0e:da:f6:a3:58:b9:91:9d:b3:8d:56:4f:
                    de:e7:d6:2c:39:a3:fc:7e:bf:fc:c6:ba:c2:8c:fb:
                    f5:e4:23:0e:a3:3e:bf:9d:63:dc:68:69:1c:4c:b0:
                    1c:0b:73:08:d5:bc:4e:78:13:42:1f:cc:6c:5b:04:
                    54:15:1e:e2:02:0f:69:c7:58:e9:01:24:12:d1:24:
                    71:28:e0:7b:bc:63:a3:03:22:4a:de:13:b3:18:3d:
                    fe:8d:cc:8b:fc:ae:2b:fe:12:cf:79:4b:43:8e:06:
                    84:88:84:9d:80:58:4f:83:17:18:70:4c:9f:c5:2b:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:82:32:9A:57:17:A8:4D:07:01:AE:25:01:2E:E6:8E:A6:32:9E:E4
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133382e3138352e342e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:e5:70:46:41:8b:0f:19:69:18:e6:ac:48:6a:21:fd:a7:7a:
         09:f1:0e:9d:eb:a7:27:66:72:fe:b0:28:7e:17:df:4e:31:51:
         ab:85:db:92:8b:01:5d:73:5e:de:5b:ec:26:e0:53:71:ff:2a:
         1e:b3:b4:55:5f:75:db:4e:11:4e:c4:c6:9c:a3:64:c4:25:10:
         ea:38:b5:e9:f6:7b:99:0f:b7:40:e0:92:63:7b:3a:43:65:01:
         bd:de:39:db:70:ac:36:df:b1:3f:3f:62:7b:55:b5:22:19:59:
         b3:c0:5f:68:5f:86:ad:18:4b:c7:b1:b2:44:99:28:35:3b:d6:
         90:90:9b:cb:e9:2a:3b:39:f3:6c:be:df:71:df:14:97:9d:80:
         42:f2:de:94:87:8a:f5:29:c1:de:59:62:47:4c:53:64:80:b5:
         de:0e:53:d5:9d:c1:e5:17:fd:a0:07:9e:46:1f:98:6d:ee:aa:
         93:81:46:7c:97:09:ef:41:a2:27:81:74:a7:d3:39:a5:40:54:
         a7:76:4d:6a:cf:7e:63:4c:6d:b9:57:e8:b4:32:d2:48:d5:b8:
         22:2b:bb:8e:ea:d0:08:a2:9b:c2:43:c1:8c:24:2a:54:d7:0f:
         6e:8e:04:84:c6:60:2b:a0:03:bc:60:7a:84:32:a2:1b:2b:15:
         43:b2:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:43 2024 by rpki-client on console-ams.rpki-client.org