Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa
File:                     3133382e302e3131322e302f32322d3233203d3e20323634353434.roa (raw, json)
Hash identifier:          t0HlX2PxrzIfkYvkgk3DqFDq9MqwfjNIT0gSyEmkw1A=
Subject key identifier:   0B:50:3C:C4:0B:59:87:AE:85:31:90:4E:AC:20:8D:FD:21:E9:74:CD
Certificate issuer:       /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial:       422C4590774E5C45D15F847E62BBDA95A67AB732
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa
Signing time:             Thu 04 Apr 2024 07:50:19 +0000
ROA not before:           Thu 04 Apr 2024 07:45:19 +0000
ROA not after:            Thu 03 Apr 2025 07:50:19 +0000
asID:                     264544
IP address blocks:        138.0.112.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl
                          rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2c:45:90:77:4e:5c:45:d1:5f:84:7e:62:bb:da:95:a6:7a:b7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
        Validity
            Not Before: Apr  4 07:45:19 2024 GMT
            Not After : Apr  3 07:50:19 2025 GMT
        Subject: CN=0B503CC40B5987AE8531904EAC208DFD21E974CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:8e:34:29:c9:d6:5f:e5:8b:8c:c9:b9:3c:
                    da:2c:62:bb:d4:fe:16:f2:02:c9:ab:f7:af:30:ad:
                    ab:9a:d9:50:41:a2:4a:d9:e6:c6:62:19:27:cf:af:
                    0e:fb:d3:4d:03:cf:0a:11:30:e3:99:5a:b7:3a:2a:
                    2e:82:b9:44:9b:c5:5b:64:0e:ef:d4:aa:81:e9:36:
                    ab:b5:9a:60:2f:9a:82:13:2b:c1:9c:14:8c:5a:ca:
                    5b:61:5e:70:a0:01:fb:9e:74:e1:cd:05:5e:f1:14:
                    1c:09:a7:37:f5:c3:8a:cd:66:34:a2:1f:a1:57:21:
                    c3:d2:71:0d:96:6f:74:f7:28:ca:54:5e:d3:d6:17:
                    0b:78:88:c1:2b:71:ff:1a:59:7d:39:cd:39:b5:72:
                    d0:b1:58:3f:38:39:40:0b:a2:37:37:81:b4:88:16:
                    28:01:fd:fa:96:17:81:b1:5a:bd:d5:be:8e:43:a0:
                    df:87:1c:0e:bd:af:ee:ac:59:e7:be:12:a5:8d:f8:
                    10:3d:f6:cb:f9:1d:2b:e7:27:7c:a8:3d:24:fb:c3:
                    d0:da:b6:0f:af:e4:f7:4f:a1:2c:bd:68:04:6d:45:
                    45:ea:d4:4e:80:7d:ae:50:1e:06:36:d7:2d:d3:97:
                    b7:07:f7:f3:3b:20:21:77:45:9b:8c:52:bd:8b:c7:
                    90:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:50:3C:C4:0B:59:87:AE:85:31:90:4E:AC:20:8D:FD:21:E9:74:CD
            X509v3 Authority Key Identifier:
                keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:3b:70:44:f5:4d:dd:b8:15:53:c8:bf:42:70:6c:d4:8c:90:
         a3:21:a1:da:5a:4d:5a:88:e8:e6:da:91:c7:39:bc:46:a1:49:
         73:e2:32:3e:a8:f4:d3:84:0c:e3:89:8b:68:a8:a8:d3:c4:a7:
         9a:1c:36:be:ee:74:69:b1:d3:04:e6:7c:0f:6f:14:2b:71:21:
         af:e2:1c:bc:d5:b9:cf:fe:00:8b:11:c5:84:50:1d:b2:ba:83:
         66:06:92:71:a8:86:0c:2e:eb:85:87:b0:9f:5f:78:b4:2b:4a:
         e1:19:60:e3:b4:ee:d9:26:a0:75:33:85:79:e1:ad:48:2e:90:
         c6:05:d4:7b:64:8e:42:95:40:a7:b1:15:d6:bc:37:17:d0:d2:
         78:e6:9c:55:fb:fd:94:c2:f7:b1:0b:a1:fd:59:aa:bb:8c:38:
         3a:b6:da:4b:a0:c6:32:a2:ef:95:3a:21:11:79:70:b9:73:78:
         bf:d1:8e:41:ea:c2:ce:d6:27:09:d8:25:38:6d:07:e2:7f:72:
         5b:fd:24:a6:0f:80:12:cb:e4:c3:d3:7b:cd:79:83:79:0b:49:
         38:fa:65:5c:a4:a9:f2:18:c8:2a:a6:33:28:e9:e5:ff:37:b2:
         f1:1e:f2:01:a8:2e:fc:78:45:66:de:87:5a:e0:66:c2:38:3b:
         99:8b:57:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:29 2024 by rpki-client on console-fra.rpki-client.org