Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa
File:                     3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa (raw, json)
Hash identifier:          ZGTlj7K3KTFyDqq2XhzHgflcrzyYfMEhmxCqdiwmdxs=
Subject key identifier:   86:99:39:E0:50:32:D9:85:53:B0:D8:DF:91:CC:F8:01:B3:AE:1A:C1
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       2B65F83BF2985F9F906BC652A0785FE35A90224E
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa
Signing time:             Wed 03 Apr 2024 18:30:32 +0000
ROA not before:           Wed 03 Apr 2024 18:25:32 +0000
ROA not after:            Wed 02 Apr 2025 18:30:32 +0000
asID:                     264311
IP address blocks:        138.122.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:65:f8:3b:f2:98:5f:9f:90:6b:c6:52:a0:78:5f:e3:5a:90:22:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Apr  3 18:25:32 2024 GMT
            Not After : Apr  2 18:30:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:5e:13:b1:9c:0c:9f:37:b9:28:04:d3:11:f4:
                    14:5d:bc:7c:56:8a:1e:ac:29:8b:dc:94:c4:2f:ca:
                    b4:76:75:6a:a5:bc:f2:c1:be:91:66:24:dc:47:4a:
                    43:c9:f3:66:12:3e:b5:88:b4:79:e7:74:88:32:b4:
                    fa:2c:f3:4f:c3:6e:ff:96:90:20:aa:8a:3f:ec:45:
                    65:56:07:0d:69:37:2a:aa:f4:d8:48:db:06:d0:d0:
                    3f:cb:a6:e2:09:a2:dd:76:30:93:8d:78:91:7d:63:
                    74:76:2b:79:bd:5a:88:37:c8:e2:94:93:c8:01:24:
                    49:40:70:3a:08:32:60:1b:6b:1c:cb:cc:ae:79:0e:
                    cf:bf:dc:a8:31:05:53:ce:50:21:ac:5c:e1:d9:7d:
                    76:07:e6:07:ba:91:0c:7c:bc:8b:6b:40:f1:5e:92:
                    ca:8e:ad:e3:64:d5:5c:42:22:c0:1c:70:e0:2b:47:
                    3f:0f:13:07:5c:51:b3:92:aa:95:43:cf:fd:75:4a:
                    90:02:89:05:12:07:47:a1:15:9a:0b:22:62:24:b6:
                    91:de:a3:ae:5f:de:f9:15:3c:cb:c5:57:83:00:56:
                    4c:02:78:7d:e9:7f:b2:24:25:a7:2f:2f:8c:be:8e:
                    b9:02:36:04:c4:1b:05:24:27:dd:77:97:b1:55:55:
                    e8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:99:39:E0:50:32:D9:85:53:B0:D8:DF:91:CC:F8:01:B3:AE:1A:C1
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130332e302f32342d3234203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:5e:00:8a:75:80:5b:0b:e7:40:de:81:11:2f:ed:9c:e1:0f:
         7d:5a:a7:e3:21:5d:83:a3:be:23:ee:80:6e:bf:ed:76:a2:17:
         12:f5:e7:b9:aa:b8:a5:3d:ec:ae:bd:ae:ac:4e:47:e8:ee:39:
         e4:7d:3e:3a:ed:6b:b8:26:03:4b:21:d6:cd:be:ea:89:c9:f8:
         e2:85:a5:a2:88:e2:9a:28:34:d8:1f:52:21:98:ba:49:69:b5:
         62:3b:c7:5f:98:68:26:92:c9:82:a5:ca:4a:dd:63:f4:69:72:
         12:5d:f0:69:18:59:92:1d:60:83:48:09:98:df:a7:0e:6d:d8:
         48:26:bc:9f:b0:e2:46:f4:11:dd:39:78:f6:56:53:c1:c5:32:
         ad:f3:4d:d4:3b:e8:51:71:38:60:be:c5:12:0d:79:be:61:e3:
         2c:0b:be:3d:9b:a2:d9:6b:f5:2a:8b:24:29:83:bd:3e:c8:8e:
         f3:64:34:5a:8a:b7:5d:7b:31:61:e2:2e:3e:fc:75:38:e0:9c:
         d2:c7:dd:cf:80:a7:a9:42:52:55:c8:1a:b3:24:05:86:31:22:
         70:a7:e1:52:b0:a7:e6:b4:37:02:69:82:f0:d4:55:13:41:6c:
         76:81:41:75:e4:d5:c9:2f:99:0e:3c:e6:71:0d:e2:fc:af:91:
         57:5f:ba:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org