Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32342d3234203d3e20323634333131.roa
File:                     3133382e3132322e3130322e302f32342d3234203d3e20323634333131.roa (raw, json)
Hash identifier:          n8r6djqqG3vaiE7i1Alc1mznO628H4K1QtRCP7PXPFg=
Subject key identifier:   6D:62:A7:81:81:47:78:AF:09:A9:93:B7:40:27:FF:80:34:4E:E3:DB
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       64F2919AC557F7FADB8D743DE875F3F43B319307
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32342d3234203d3e20323634333131.roa
Signing time:             Wed 03 Apr 2024 18:30:33 +0000
ROA not before:           Wed 03 Apr 2024 18:25:33 +0000
ROA not after:            Wed 02 Apr 2025 18:30:33 +0000
asID:                     264311
IP address blocks:        138.122.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f2:91:9a:c5:57:f7:fa:db:8d:74:3d:e8:75:f3:f4:3b:31:93:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Apr  3 18:25:33 2024 GMT
            Not After : Apr  2 18:30:33 2025 GMT
        Subject: CN=3082010A0282010100CA30A48D7245409D9C9DBB0C22EDFB11C2967F66D6EA6AEF8C1A282A673518E89C8DE2661057F5C4C89EB227D5BB3D84C1125DB88CE3F83EC88F862168A9F9AC110684CF7962D7F7C1966C543B7B43C23045A96D7B695DDA41C3B1860015B84824CC9D65D733515DB93C86E71D4BB26D5E10EE9272BD92458A06B400A1C0D6843E79F58AA419486729F9CBF8964E32560EACC70816AAAFF1AD943ECC61B56C92CEE6C732014139BB47534BF7F97455EF368C19D9F49BAD8B0D7965052BA540E16F78AAD90C7B2BB023BC74AB6906A32F580413B28FA88B804F2C28022AAB3E921827C2B4C4F4964BA7D58E72A680FF281132545C89495FAB48194FCE84DC1F710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:a4:8d:72:45:40:9d:9c:9d:bb:0c:22:ed:
                    fb:11:c2:96:7f:66:d6:ea:6a:ef:8c:1a:28:2a:67:
                    35:18:e8:9c:8d:e2:66:10:57:f5:c4:c8:9e:b2:27:
                    d5:bb:3d:84:c1:12:5d:b8:8c:e3:f8:3e:c8:8f:86:
                    21:68:a9:f9:ac:11:06:84:cf:79:62:d7:f7:c1:96:
                    6c:54:3b:7b:43:c2:30:45:a9:6d:7b:69:5d:da:41:
                    c3:b1:86:00:15:b8:48:24:cc:9d:65:d7:33:51:5d:
                    b9:3c:86:e7:1d:4b:b2:6d:5e:10:ee:92:72:bd:92:
                    45:8a:06:b4:00:a1:c0:d6:84:3e:79:f5:8a:a4:19:
                    48:67:29:f9:cb:f8:96:4e:32:56:0e:ac:c7:08:16:
                    aa:af:f1:ad:94:3e:cc:61:b5:6c:92:ce:e6:c7:32:
                    01:41:39:bb:47:53:4b:f7:f9:74:55:ef:36:8c:19:
                    d9:f4:9b:ad:8b:0d:79:65:05:2b:a5:40:e1:6f:78:
                    aa:d9:0c:7b:2b:b0:23:bc:74:ab:69:06:a3:2f:58:
                    04:13:b2:8f:a8:8b:80:4f:2c:28:02:2a:ab:3e:92:
                    18:27:c2:b4:c4:f4:96:4b:a7:d5:8e:72:a6:80:ff:
                    28:11:32:54:5c:89:49:5f:ab:48:19:4f:ce:84:dc:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:62:A7:81:81:47:78:AF:09:A9:93:B7:40:27:FF:80:34:4E:E3:DB
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32342d3234203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:79:9a:e7:32:c1:c2:c4:f5:5b:0f:22:21:79:18:ea:2d:c6:
         d3:00:8b:b7:98:4c:39:7f:43:04:c6:be:e8:d9:1e:cf:d8:a0:
         ea:24:22:16:94:d1:09:8c:2a:50:6a:9d:b5:9e:cf:9b:f3:82:
         29:c8:b5:f1:74:f6:a5:b4:11:60:eb:45:ec:2e:59:ae:4b:a9:
         87:39:90:a6:e8:6b:8e:53:5b:51:af:82:23:f0:cc:b1:7e:ac:
         d7:02:d6:f0:a5:fc:a9:f6:b5:5b:44:51:9d:51:cd:b6:9a:43:
         76:c7:00:13:19:c2:78:61:ec:b6:ac:6f:aa:c6:72:c2:52:c1:
         66:b0:ed:4e:8e:44:0d:91:26:63:24:ce:15:c9:fa:72:aa:d9:
         12:7e:20:22:cb:b6:ac:59:25:39:ac:ad:0e:f3:ee:dc:80:3b:
         7b:34:f7:78:31:5c:c1:fe:5d:20:53:41:71:76:15:67:07:da:
         bc:47:3e:af:cb:0a:a5:e2:60:68:88:4d:3f:77:8e:d8:d7:1e:
         ef:b8:38:c9:89:c8:04:8b:5d:84:f4:68:89:47:88:d6:7e:b0:
         c1:e2:61:7f:e8:52:ea:9d:fc:62:3e:ab:27:63:ad:ff:b5:d3:
         db:c4:83:40:75:7b:c7:f9:67:39:0a:53:b7:4b:2f:c9:1f:37:
         42:10:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org