Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa
File:                     3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa (raw, json)
Hash identifier:          NCRVbGNEfQ2JjT4QIcDBTHpjWoKaM0Z+ASohy5GKlao=
Subject key identifier:   DF:C9:0B:CE:C3:84:09:89:95:4E:FD:C9:82:DB:00:68:60:66:E5:D9
Certificate issuer:       /CN=82849DD2443C1465238F4BD65D50B28F03615F5C
Certificate serial:       4225DB37F05149D5E97A6C17C2391F482E9609BC
Authority key identifier: 82:84:9D:D2:44:3C:14:65:23:8F:4B:D6:5D:50:B2:8F:03:61:5F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82849DD2443C1465238F4BD65D50B28F03615F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa
Signing time:             Thu 04 Apr 2024 03:56:11 +0000
ROA not before:           Thu 04 Apr 2024 03:51:11 +0000
ROA not after:            Thu 03 Apr 2025 03:56:11 +0000
asID:                     263557
IP address blocks:        138.204.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/82849DD2443C1465238F4BD65D50B28F03615F5C.crl
                          rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/82849DD2443C1465238F4BD65D50B28F03615F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82849DD2443C1465238F4BD65D50B28F03615F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:25:db:37:f0:51:49:d5:e9:7a:6c:17:c2:39:1f:48:2e:96:09:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82849DD2443C1465238F4BD65D50B28F03615F5C
        Validity
            Not Before: Apr  4 03:51:11 2024 GMT
            Not After : Apr  3 03:56:11 2025 GMT
        Subject: CN=DFC90BCEC3840989954EFDC982DB00686066E5D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:45:22:97:bc:f1:47:0f:ae:9e:59:31:18:f2:
                    9a:35:86:0d:be:b0:1f:50:49:2c:73:48:89:2a:e8:
                    89:5b:c3:45:0c:36:3e:d6:83:2c:ac:a9:61:95:f0:
                    85:31:98:26:df:f7:55:0d:3f:bc:01:30:af:66:a1:
                    04:66:be:1d:96:b3:c7:b1:a6:e8:e4:e2:4e:51:ba:
                    a8:67:7d:1c:d7:f3:b4:a5:ee:7f:38:51:ae:a8:b0:
                    e5:d9:fa:4a:be:1c:5a:0e:8b:21:b9:97:1b:17:85:
                    a7:44:6f:df:1a:7f:ae:a2:3b:b2:56:25:52:63:03:
                    76:0d:c8:08:47:42:75:51:bf:d1:b4:68:8c:34:62:
                    d4:d0:19:d9:90:d4:34:f7:9e:72:a2:e4:f4:58:fa:
                    8d:a7:d5:fd:f8:de:ae:27:98:e8:49:19:ac:f3:33:
                    db:48:d1:cf:e6:fe:4a:79:5f:af:46:7e:d6:f0:f0:
                    9a:d6:6d:20:ed:3b:b9:26:b8:a3:63:19:c9:02:95:
                    91:74:43:c2:00:17:17:52:64:c5:99:69:96:b2:6e:
                    fa:81:42:c3:7c:8d:cf:94:e5:97:8c:72:22:8d:12:
                    d7:ef:87:5f:e2:43:f2:7b:5c:fe:06:08:12:9b:04:
                    2e:59:b3:cc:74:d5:53:93:99:2d:39:90:ca:7a:98:
                    22:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C9:0B:CE:C3:84:09:89:95:4E:FD:C9:82:DB:00:68:60:66:E5:D9
            X509v3 Authority Key Identifier:
                keyid:82:84:9D:D2:44:3C:14:65:23:8F:4B:D6:5D:50:B2:8F:03:61:5F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/82849DD2443C1465238F4BD65D50B28F03615F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82849DD2443C1465238F4BD65D50B28F03615F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/1/3133382e3230342e33322e302f32322d3234203d3e20323633353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:61:f8:2e:18:81:c2:85:55:4b:fc:af:f3:c2:2e:2c:22:6e:
         05:c5:73:a5:08:b7:d7:e4:6b:97:0a:6c:a8:f3:ab:8b:1b:78:
         f4:14:40:81:54:76:00:11:c5:74:14:a5:09:1e:04:f0:6e:f2:
         52:46:bd:9f:bf:c7:98:3a:40:a4:ac:41:8d:6b:2c:a3:c5:92:
         f5:c6:1d:23:21:dd:04:33:df:93:af:bf:97:18:84:78:55:1c:
         23:cd:ce:fa:2f:1a:c0:e3:75:c0:1b:1e:b0:56:89:ed:ed:cf:
         e4:88:bc:4d:5f:33:55:57:ba:6f:0d:8b:b1:17:10:e2:c4:86:
         0d:2e:b0:23:6f:7a:e3:7a:d9:69:f8:9e:e5:64:e1:50:14:06:
         33:49:be:a5:62:8f:fa:19:e1:2c:d2:16:e0:49:b6:c9:44:99:
         52:a0:f3:c6:da:9a:e6:9b:ae:2f:91:2a:e8:b4:51:e8:df:ed:
         68:ba:58:70:24:50:f4:1f:aa:81:cf:db:8e:92:68:bb:f6:9c:
         75:31:80:2e:0a:b9:ed:f9:5d:d3:e0:c8:18:b5:29:3f:7a:ae:
         b4:32:c1:53:89:fb:05:81:19:7d:08:b8:ba:8c:f4:d1:75:d4:
         16:ae:a4:70:8b:9d:de:08:61:5a:f1:43:62:71:67:66:28:19:
         38:bb:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:11 2024 by rpki-client on console-ams.rpki-client.org