Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38332e302f32342d3234203d3e20323634353731.roa
File:                     3133382e33362e38332e302f32342d3234203d3e20323634353731.roa (raw, json)
Hash identifier:          3qzbepm8NQ5AcAf2MShPjQhExz5T5ox+9cQgqWzdxTM=
Subject key identifier:   26:6C:CD:9E:AF:88:AD:08:12:16:5E:2F:C7:40:7C:AD:CE:EA:54:24
Certificate issuer:       /CN=84210C699884A23E38D45F40B27833D84A440F91
Certificate serial:       324FA85C0D54B9D82CD8FE03F2794D1CBE4C3652
Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38332e302f32342d3234203d3e20323634353731.roa
Signing time:             Wed 03 Apr 2024 18:32:11 +0000
ROA not before:           Wed 03 Apr 2024 18:27:11 +0000
ROA not after:            Wed 02 Apr 2025 18:32:11 +0000
asID:                     264571
IP address blocks:        138.36.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl
                          rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4f:a8:5c:0d:54:b9:d8:2c:d8:fe:03:f2:79:4d:1c:be:4c:36:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91
        Validity
            Not Before: Apr  3 18:27:11 2024 GMT
            Not After : Apr  2 18:32:11 2025 GMT
        Subject: CN=266CCD9EAF88AD0812165E2FC7407CADCEEA5424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:4b:4c:64:69:8a:63:ad:89:05:26:b7:a7:
                    13:b3:36:6e:71:0a:d5:ec:7e:59:68:99:ad:3c:11:
                    89:ab:35:b9:f6:35:62:51:cc:ab:ef:20:4b:f6:5d:
                    04:d4:75:3d:ad:65:06:5b:b7:4b:56:22:bb:e1:2d:
                    b7:05:de:9e:6e:b9:eb:87:33:3b:20:35:a2:32:12:
                    2b:61:a6:56:77:57:5b:c1:f6:a0:c7:04:54:c0:4d:
                    7c:23:99:70:a9:69:d7:f1:48:47:e3:83:e4:7a:35:
                    6a:b8:62:d2:f3:91:d2:d0:cd:0e:0e:4e:ef:69:96:
                    2e:58:74:1e:75:92:f4:b4:a0:6f:d7:ba:fc:e3:e9:
                    11:11:c5:4d:ce:26:57:21:84:86:d9:08:e2:e1:76:
                    1d:2f:90:be:5b:e4:08:3d:22:c1:7e:3c:43:3f:4c:
                    52:9f:47:02:bf:d8:53:e5:f2:7e:f0:e1:a7:9c:47:
                    4b:77:f5:ef:f5:5f:05:94:0f:5c:8c:a3:4c:26:9f:
                    72:e9:54:ee:2b:da:47:7a:ab:20:32:e1:48:c1:ec:
                    ab:f6:33:5f:54:e3:8d:44:61:7b:cb:a4:16:04:04:
                    bf:c5:32:3a:68:c1:e2:f8:72:1b:2e:a9:cf:83:c9:
                    22:8a:7f:0f:a2:d8:4c:e3:be:cd:01:bd:3a:4b:cc:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6C:CD:9E:AF:88:AD:08:12:16:5E:2F:C7:40:7C:AD:CE:EA:54:24
            X509v3 Authority Key Identifier:
                keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38332e302f32342d3234203d3e20323634353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:99:b6:b9:38:1f:e6:27:a1:b3:ce:95:be:e2:d5:30:e3:
         03:a9:5c:c8:3a:52:6c:ec:e0:73:51:8a:00:6c:be:33:3b:d1:
         80:8c:cd:d9:7d:92:46:4b:c3:b1:77:2f:38:4c:02:0b:0d:bb:
         be:93:fe:09:59:f0:c9:73:f3:da:46:b0:6b:97:15:29:d0:92:
         0e:ce:f7:07:1e:22:b8:17:a6:31:2c:52:cc:28:fd:86:f4:53:
         95:42:4f:d1:ca:6d:a1:e1:73:9b:fb:a1:a4:cb:ef:93:09:e2:
         34:6c:c7:e2:a9:70:3d:8f:b6:f3:1c:32:bd:64:51:bd:3d:18:
         5f:c6:d9:b0:a0:2d:8e:ea:8a:31:28:cc:69:a6:ce:5a:60:69:
         84:40:dc:f1:a2:30:c7:3d:23:93:5c:8b:e0:14:35:6a:09:ee:
         c7:3f:66:85:e2:1b:0b:7d:30:9c:85:f9:23:38:be:10:c2:d2:
         bd:14:87:db:76:3d:26:32:e1:43:91:fc:30:89:09:bd:31:a2:
         5f:74:b3:b4:3f:e3:be:d6:a2:2f:78:1c:73:14:6a:2e:46:4c:
         ed:c7:a9:3e:dd:c2:1e:47:f4:9c:9e:a2:63:5f:17:61:36:87:
         84:ca:50:04:7f:01:c2:2f:cf:e4:f3:e1:14:e4:9f:81:83:d8:
         d3:38:8f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:54 2024 by rpki-client on console-ams.rpki-client.org