Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa
File:                     3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa (raw, json)
Hash identifier:          Le+nVHVvBSsGAkWTQbGisFXAdKNlsS/H148SClaSBaE=
Subject key identifier:   D5:E7:BE:F2:67:1F:31:B0:BB:38:D2:2A:DE:E4:17:93:A6:3D:C8:6F
Certificate issuer:       /CN=A1C473D437CEBD170F723D345D2967666A7D2C89
Certificate serial:       140D2B91332B71A168EBA83DD32AF15F9EA148CC
Authority key identifier: A1:C4:73:D4:37:CE:BD:17:0F:72:3D:34:5D:29:67:66:6A:7D:2C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C473D437CEBD170F723D345D2967666A7D2C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa
Signing time:             Thu 07 Nov 2024 18:34:09 +0000
ROA not before:           Thu 07 Nov 2024 18:29:09 +0000
ROA not after:            Thu 06 Nov 2025 18:34:09 +0000
asID:                     263913
IP address blocks:        138.204.240.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/A1C473D437CEBD170F723D345D2967666A7D2C89.crl
                          rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/A1C473D437CEBD170F723D345D2967666A7D2C89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C473D437CEBD170F723D345D2967666A7D2C89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0d:2b:91:33:2b:71:a1:68:eb:a8:3d:d3:2a:f1:5f:9e:a1:48:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C473D437CEBD170F723D345D2967666A7D2C89
        Validity
            Not Before: Nov  7 18:29:09 2024 GMT
            Not After : Nov  6 18:34:09 2025 GMT
        Subject: CN=D5E7BEF2671F31B0BB38D22ADEE41793A63DC86F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:1e:85:0c:5a:9f:9c:2d:fa:13:38:fe:c6:
                    5d:39:83:e5:ec:ed:87:3b:2f:40:a8:62:0c:8a:d0:
                    45:db:ab:8d:a0:ec:a8:50:d5:41:41:3b:ce:de:2b:
                    6d:c5:6a:59:74:da:bb:71:11:8f:a0:3b:ab:44:d9:
                    ac:d0:2a:93:b4:bc:5f:1b:68:37:66:1b:6d:37:c2:
                    33:17:51:c1:12:93:07:cc:a2:e6:95:4f:68:a6:47:
                    1d:d9:2a:c0:74:e1:f5:33:c5:fd:f1:39:0a:ca:3d:
                    7f:6f:10:9e:25:52:74:fe:dd:d7:3b:05:d4:4d:ee:
                    5d:2b:31:73:20:79:44:da:49:89:38:16:d9:4e:e7:
                    97:63:a5:29:67:27:9e:2b:9b:6f:60:c1:3c:b6:39:
                    06:69:d2:30:74:d2:62:25:0a:fb:68:20:b2:a3:09:
                    8d:32:65:6c:70:40:ef:35:b5:c7:9b:ba:d6:68:cc:
                    60:09:1c:28:d6:49:37:a9:7f:ef:92:60:bf:e2:5d:
                    51:d6:12:95:4a:8c:86:dc:c7:85:4c:00:2c:06:2b:
                    9f:34:00:84:8c:4a:90:c2:37:c3:64:a1:79:9d:b1:
                    28:bd:e2:18:67:cb:fd:1e:af:1a:4b:4a:95:89:62:
                    e3:69:e6:3b:aa:e6:0b:af:c6:8c:47:d8:b7:3d:dd:
                    64:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E7:BE:F2:67:1F:31:B0:BB:38:D2:2A:DE:E4:17:93:A6:3D:C8:6F
            X509v3 Authority Key Identifier:
                keyid:A1:C4:73:D4:37:CE:BD:17:0F:72:3D:34:5D:29:67:66:6A:7D:2C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/A1C473D437CEBD170F723D345D2967666A7D2C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C473D437CEBD170F723D345D2967666A7D2C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CWT9io3rmMPNMeUuDSuodh4zQc6Wo6rKWx6x8qsHhwhW/0/3133382e3230342e3234302e302f32322d3332203d3e20323633393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:7f:1e:e7:7a:ea:3e:f5:cb:02:d2:54:53:da:c9:fb:c4:f6:
         b8:32:d7:f6:8b:28:45:99:c1:bb:5c:38:9e:ce:a7:a9:5f:56:
         13:e9:28:9f:b6:bb:0b:a5:94:ed:48:0f:e3:2d:ff:86:0a:c0:
         98:0b:5d:0f:2e:fe:b9:50:37:4a:c3:86:bf:4d:56:39:a2:55:
         b3:2c:4e:e0:d0:6c:55:a2:03:cb:8b:84:1a:6a:d5:39:0f:e9:
         eb:97:1e:3d:ba:e3:fb:b3:b7:50:9f:88:6a:ec:7e:bb:9c:37:
         6e:ac:c9:f2:e1:b4:46:b4:52:49:d0:b2:48:88:6b:0d:ab:fc:
         59:4f:56:81:5d:80:4d:f1:93:6d:64:0f:71:a5:8c:c8:e0:24:
         4d:2a:10:89:e8:d2:30:a1:84:c7:23:c4:54:1a:73:97:57:52:
         1b:0c:ee:e5:5f:59:bc:ff:90:f9:38:e5:97:e2:aa:ad:45:08:
         9b:18:f7:d8:fc:cc:60:28:8d:94:61:b2:9f:16:9c:79:98:ef:
         71:dc:30:a1:c2:f5:dd:b9:c8:c0:a4:54:55:3a:e5:0b:d7:be:
         33:8b:55:30:e8:8b:b0:40:84:cd:a1:c8:81:47:be:7c:12:a6:
         e3:58:f5:a6:a8:78:f1:70:2c:5b:5e:d9:8d:7a:85:f1:8d:ef:
         d9:58:84:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:12 2024 by rpki-client on console-ams.rpki-client.org