Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/1/3133382e35392e33382e302f32332d3234203d3e20323730393332.roa
File:                     3133382e35392e33382e302f32332d3234203d3e20323730393332.roa (raw, json)
Hash identifier:          Bqh31hjdUj3WdDau3YUmuElAAu/jPAa+68oZ8rVPBAE=
Subject key identifier:   A9:FE:B7:15:85:D6:B1:5C:DC:CF:93:CC:22:F1:A4:E8:27:AC:CB:18
Certificate issuer:       /CN=2114671409937E8AC7FE751CB57FECC986B196C5
Certificate serial:       13CE7CCE1CD7645949A323F4071EF55B2C40C97C
Authority key identifier: 21:14:67:14:09:93:7E:8A:C7:FE:75:1C:B5:7F:EC:C9:86:B1:96:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114671409937E8AC7FE751CB57FECC986B196C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/1/3133382e35392e33382e302f32332d3234203d3e20323730393332.roa
Signing time:             Thu 04 Apr 2024 16:17:54 +0000
ROA not before:           Thu 04 Apr 2024 16:12:54 +0000
ROA not after:            Thu 03 Apr 2025 16:17:54 +0000
asID:                     270932
IP address blocks:        138.59.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/1/2114671409937E8AC7FE751CB57FECC986B196C5.crl
                          rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/1/2114671409937E8AC7FE751CB57FECC986B196C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114671409937E8AC7FE751CB57FECC986B196C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ce:7c:ce:1c:d7:64:59:49:a3:23:f4:07:1e:f5:5b:2c:40:c9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2114671409937E8AC7FE751CB57FECC986B196C5
        Validity
            Not Before: Apr  4 16:12:54 2024 GMT
            Not After : Apr  3 16:17:54 2025 GMT
        Subject: CN=A9FEB71585D6B15CDCCF93CC22F1A4E827ACCB18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:1f:b7:07:7e:eb:7e:6e:5f:f2:f3:39:20:
                    12:a1:8c:1d:02:15:ed:0d:14:f9:39:f4:10:b3:d5:
                    fb:ea:ec:97:09:3a:75:d2:8f:3e:0b:b5:70:5e:26:
                    27:ff:0e:49:4b:e2:ec:d6:fe:29:a5:d8:e7:ca:94:
                    11:a2:1b:47:7c:ee:c0:8e:f0:93:33:0d:ab:c6:a0:
                    4c:42:ff:df:bb:2f:36:4e:b4:67:6e:dd:f2:fd:39:
                    db:31:33:63:5b:2a:b2:6a:53:95:47:af:6d:7c:fa:
                    db:b6:7e:a2:99:e0:c7:b7:fd:43:b4:26:5e:c1:df:
                    2e:d8:4d:2b:a6:31:ed:c1:6b:29:6a:18:29:de:74:
                    9d:25:cd:86:ea:58:ee:1f:6d:c5:7e:43:63:1d:12:
                    de:45:f4:2c:66:00:5d:fb:56:fc:69:90:e5:b3:ea:
                    25:aa:23:38:fd:cc:ff:45:c4:c9:0c:51:ce:de:26:
                    62:b3:4c:9b:4d:02:f9:ba:77:06:a1:79:7f:cb:9f:
                    21:df:ea:48:1b:a5:5e:18:ea:f1:5a:66:16:32:cb:
                    51:d1:ce:37:bb:23:b8:ed:a0:3c:f6:dd:45:c9:ca:
                    3f:0a:30:71:a2:63:1e:de:f5:c9:0e:ba:18:29:55:
                    27:75:00:f7:7c:7a:8a:fa:36:17:37:2d:c5:e8:18:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FE:B7:15:85:D6:B1:5C:DC:CF:93:CC:22:F1:A4:E8:27:AC:CB:18
            X509v3 Authority Key Identifier:
                keyid:21:14:67:14:09:93:7E:8A:C7:FE:75:1C:B5:7F:EC:C9:86:B1:96:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/1/2114671409937E8AC7FE751CB57FECC986B196C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2114671409937E8AC7FE751CB57FECC986B196C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/1/3133382e35392e33382e302f32332d3234203d3e20323730393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:b9:52:94:f7:ce:4a:32:b6:cd:3a:ce:9f:4a:eb:c8:0d:21:
         ae:9b:08:a3:b4:99:0d:4c:50:f0:c3:22:d5:93:7f:49:a7:62:
         a3:9c:2c:21:4b:16:14:ea:3e:80:46:07:21:f5:2c:7f:1f:f1:
         16:db:43:6c:a0:3a:e3:67:14:a7:74:c6:41:53:5b:f4:23:fc:
         ff:a7:bb:f2:99:6c:66:8d:f4:e2:42:82:82:cb:ea:d2:02:d5:
         4b:8f:55:d6:a7:4a:26:a7:cf:e5:d3:6c:7a:87:bd:77:7c:e1:
         78:15:b6:a0:fa:6c:d5:9f:58:42:9e:72:5d:ef:56:6b:fd:ec:
         ff:ea:73:d9:06:8b:ba:a0:cd:38:c0:7d:c3:39:13:72:01:f4:
         90:15:b6:32:75:6c:fe:3b:6e:9e:c9:e4:3d:ec:9c:90:69:cd:
         22:20:68:42:71:fa:ce:73:98:96:8f:7b:92:9a:be:25:3d:73:
         f9:f4:e0:8a:fa:88:26:2f:20:97:16:0c:83:a7:4f:7d:28:3c:
         3a:17:52:c2:80:bb:04:e1:31:c7:4a:b3:38:b5:91:2d:75:41:
         e1:a6:4e:ba:aa:db:6e:ef:70:7a:63:68:a3:fc:4a:8b:46:18:
         89:ad:7e:98:da:be:af:54:34:ac:a4:6e:a1:33:f9:af:4b:fe:
         d3:36:0a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:20 2024 by rpki-client on console-fra.rpki-client.org