Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3234203d3e203631373834.roa
File:                     3133382e3138362e3138342e302f32322d3234203d3e203631373834.roa (raw, json)
Hash identifier:          dwpa6+afyPaINGirSuk1tWluRf/Po+nBvSz8Hd/LJdQ=
Subject key identifier:   6B:CF:F7:4E:5A:D7:62:7A:6B:26:45:FE:53:0A:94:71:0A:CF:6B:4D
Certificate issuer:       /CN=D7F2FAC1B5025CADC06EADA362B65D3C990ED062
Certificate serial:       07978BB4D908DEEF10A8B95EA1FC9843ACA7F6B0
Authority key identifier: D7:F2:FA:C1:B5:02:5C:AD:C0:6E:AD:A3:62:B6:5D:3C:99:0E:D0:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3234203d3e203631373834.roa
Signing time:             Fri 17 May 2024 14:06:48 +0000
ROA not before:           Fri 17 May 2024 14:01:48 +0000
ROA not after:            Fri 16 May 2025 14:06:48 +0000
asID:                     61784
IP address blocks:        138.186.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.crl
                          rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 21:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:97:8b:b4:d9:08:de:ef:10:a8:b9:5e:a1:fc:98:43:ac:a7:f6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F2FAC1B5025CADC06EADA362B65D3C990ED062
        Validity
            Not Before: May 17 14:01:48 2024 GMT
            Not After : May 16 14:06:48 2025 GMT
        Subject: CN=6BCFF74E5AD7627A6B2645FE530A94710ACF6B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:bb:d6:44:f8:40:14:09:32:3f:aa:ff:df:02:
                    97:58:37:75:0c:54:91:02:4a:e6:40:a9:3b:36:5c:
                    63:ab:c7:55:65:8a:c2:cc:4a:33:63:93:5e:77:ea:
                    66:5d:d7:b0:7d:79:5e:23:ca:96:dc:e4:c5:9d:52:
                    f6:79:8d:0a:33:d6:20:eb:92:55:cf:16:d2:e0:1b:
                    cc:e8:71:73:23:48:a3:28:c8:d9:65:de:5e:c0:8b:
                    77:40:9d:9a:2d:4a:24:e2:e8:12:34:61:9b:f8:10:
                    30:09:8a:2f:ae:a6:8e:75:d3:46:ef:29:f3:7b:e6:
                    1e:3c:d5:9a:56:ad:75:47:24:fc:74:8e:50:37:7d:
                    97:f8:7e:1c:bf:1f:7c:31:b3:3b:f1:c4:2a:ac:ff:
                    6e:af:e7:72:13:e7:f4:a8:db:9a:c6:3f:1a:51:da:
                    f4:5b:82:29:de:b9:0a:aa:09:d7:4d:e3:77:83:db:
                    07:7a:8d:23:2e:c0:59:0c:74:1a:94:72:dd:fc:01:
                    8a:fc:45:c8:0d:be:20:11:08:fc:14:a8:3e:31:0c:
                    c7:69:9b:70:e0:55:0c:7e:8c:a1:9f:80:9b:e5:b9:
                    d7:bc:d7:89:97:25:26:75:c3:7e:ca:ca:e4:84:22:
                    d1:5a:94:83:5c:ff:29:c8:ca:c3:3f:e6:d7:00:85:
                    89:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CF:F7:4E:5A:D7:62:7A:6B:26:45:FE:53:0A:94:71:0A:CF:6B:4D
            X509v3 Authority Key Identifier:
                keyid:D7:F2:FA:C1:B5:02:5C:AD:C0:6E:AD:A3:62:B6:5D:3C:99:0E:D0:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F2FAC1B5025CADC06EADA362B65D3C990ED062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:69:a2:12:32:23:79:7c:82:6c:09:bf:b7:1b:a7:4d:97:
         d8:cd:5e:38:26:c2:b1:d5:87:28:70:9f:d6:a6:ae:ee:56:85:
         25:12:7c:18:23:41:db:d4:3c:ca:5b:22:44:69:26:c1:0d:14:
         d0:9b:c6:01:49:86:d2:e3:9a:37:b1:9f:75:00:df:27:32:a9:
         ee:c6:d3:ce:a5:09:4e:50:31:81:6a:ee:65:8a:02:6a:77:2c:
         76:a6:67:ce:a4:6b:e1:13:c4:40:8d:79:ac:70:90:4f:31:fa:
         7a:a8:27:e4:c3:23:c8:86:49:4f:4b:a6:6e:9f:77:5c:a2:d2:
         9f:c3:5d:bc:8d:e8:ce:2d:57:a8:21:5b:e4:74:41:39:18:25:
         a9:dd:ca:b7:00:af:7a:3d:9b:a5:62:98:83:8a:77:f2:03:87:
         74:00:a8:2f:73:92:14:d3:23:5d:22:8c:df:b6:36:47:04:c8:
         cf:c0:fd:56:b5:8f:dd:b6:ee:c9:a4:12:5f:40:2b:5c:c8:74:
         50:26:83:52:c2:f5:04:10:51:5b:5c:61:4c:de:77:18:29:ac:
         1a:3b:bc:42:ff:ac:62:39:73:be:db:b8:e5:f4:87:15:5f:af:
         84:8a:33:f6:f2:3a:3d:32:f2:d5:86:96:03:3d:4b:2f:34:0d:
         f5:0e:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:08:29 2024 by rpki-client on console-fra.rpki-client.org