Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/3133382e39342e3139362e302f32322d3234203d3e203631353831.roa
File:                     3133382e39342e3139362e302f32322d3234203d3e203631353831.roa (raw, json)
Hash identifier:          ruw516/60qBVHLLnT4uFaODdhMfrIIVYvecjVlrxrJY=
Subject key identifier:   23:34:6D:B0:96:8E:CF:88:19:E3:4F:32:EE:B5:A1:B8:C9:33:47:28
Certificate issuer:       /CN=7F47009C8F403A7156B677A0E7EF30D662978434
Certificate serial:       5DB7319D599A1DC8F8E1CC8EC6EAC9566FF6B6D7
Authority key identifier: 7F:47:00:9C:8F:40:3A:71:56:B6:77:A0:E7:EF:30:D6:62:97:84:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F47009C8F403A7156B677A0E7EF30D662978434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/3133382e39342e3139362e302f32322d3234203d3e203631353831.roa
Signing time:             Thu 11 Jul 2024 19:25:22 +0000
ROA not before:           Thu 11 Jul 2024 19:20:22 +0000
ROA not after:            Thu 10 Jul 2025 19:25:22 +0000
asID:                     61581
IP address blocks:        138.94.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/7F47009C8F403A7156B677A0E7EF30D662978434.crl
                          rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/7F47009C8F403A7156B677A0E7EF30D662978434.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F47009C8F403A7156B677A0E7EF30D662978434.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b7:31:9d:59:9a:1d:c8:f8:e1:cc:8e:c6:ea:c9:56:6f:f6:b6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F47009C8F403A7156B677A0E7EF30D662978434
        Validity
            Not Before: Jul 11 19:20:22 2024 GMT
            Not After : Jul 10 19:25:22 2025 GMT
        Subject: CN=23346DB0968ECF8819E34F32EEB5A1B8C9334728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:c3:bf:34:d9:8b:1e:ed:33:82:7a:6b:1f:
                    ff:00:51:64:03:0f:c4:ec:12:44:cf:25:16:4e:72:
                    34:62:a0:a4:a5:23:44:95:3a:26:fe:f0:91:12:80:
                    de:1e:3d:7e:d2:18:48:cf:ab:41:a8:fb:7b:63:b0:
                    8a:5c:60:1d:dc:63:1d:a0:5f:67:a5:5a:4f:07:97:
                    84:47:8e:00:3e:ac:90:b4:52:b7:ef:69:6b:0a:eb:
                    b5:6e:13:43:5e:32:23:27:3e:dc:63:3d:0c:f1:21:
                    5c:fb:cf:d8:ad:10:57:6e:b1:25:32:b5:c7:7e:02:
                    62:5e:ba:a9:20:b7:4c:dc:ec:3e:0e:a6:20:23:53:
                    81:0c:f4:f3:06:3c:80:77:18:29:a2:02:aa:12:8c:
                    9d:4c:2e:f1:53:42:9e:f5:5a:de:64:d4:35:0d:95:
                    4e:7a:c8:4d:34:f4:95:2d:86:39:79:ff:e4:31:f2:
                    75:7b:23:31:f0:65:40:2f:e1:60:3f:5d:61:8c:86:
                    73:3b:e1:7a:64:26:6f:de:aa:d7:2e:e7:56:0c:11:
                    77:67:7e:0e:d0:30:22:17:f8:04:c1:8d:80:ac:e1:
                    ff:c0:14:4f:ac:24:1f:23:f1:2a:fb:b0:06:fb:8e:
                    5c:5c:56:95:55:f9:bb:ea:43:2d:12:90:32:06:f0:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:34:6D:B0:96:8E:CF:88:19:E3:4F:32:EE:B5:A1:B8:C9:33:47:28
            X509v3 Authority Key Identifier:
                keyid:7F:47:00:9C:8F:40:3A:71:56:B6:77:A0:E7:EF:30:D6:62:97:84:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/7F47009C8F403A7156B677A0E7EF30D662978434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F47009C8F403A7156B677A0E7EF30D662978434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/3133382e39342e3139362e302f32322d3234203d3e203631353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:16:d6:d1:9b:08:77:59:19:e0:a7:98:c9:e6:d6:c2:8e:72:
         ea:fb:23:11:45:8d:20:f3:fa:19:27:0d:d7:67:23:19:65:85:
         8e:75:82:3c:48:7b:2c:ad:4b:ed:05:3d:b8:34:53:55:4d:84:
         0a:15:51:74:18:3f:87:1e:a7:94:15:7a:e1:38:c5:73:8b:e7:
         8e:6e:8b:4b:d1:86:be:4b:54:3d:5a:57:ce:fa:d4:23:5a:4e:
         a5:4e:42:ce:b2:b7:77:56:d9:66:0b:f5:03:a8:ee:93:b6:f4:
         b8:8a:a9:4d:3a:08:18:6b:68:8d:5e:35:aa:d8:ed:34:be:48:
         2c:6b:1d:29:d1:5e:5c:ff:da:27:57:20:71:2e:2b:fc:eb:8c:
         5a:d5:9d:17:86:a0:2c:8f:6b:41:f8:42:8a:ae:d6:6c:30:0f:
         cf:d6:bb:a7:72:15:af:ae:13:94:e3:b4:9d:e6:45:2d:ab:dd:
         58:90:e9:5e:64:fa:c8:aa:e9:db:c8:0b:9b:8d:2f:14:df:31:
         58:95:3f:4b:88:7b:a4:0a:fc:64:83:1f:0d:db:d9:f4:6b:b8:
         0b:b7:16:f0:e9:d2:79:e0:e0:a6:b4:81:6c:a0:d5:d4:83:d0:
         9b:16:e4:f2:df:dd:51:5e:62:80:fc:db:35:41:9d:9c:a6:86:
         50:ac:0a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:16 2024 by rpki-client on console-ams.rpki-client.org