Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3133382e35392e3132342e302f32322d3332203d3e203631353838.roa
File:                     3133382e35392e3132342e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          T3H67LAw0P9SWzsE5RaDC5PUkU5f1c9UKBLjP8h9xHg=
Subject key identifier:   90:4B:88:AD:9B:38:83:C8:1D:16:E6:39:7B:6F:81:FD:BC:0B:4B:6E
Certificate issuer:       /CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
Certificate serial:       552D4C3363C02496F7E31621569AAD2736209AED
Authority key identifier: 9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3133382e35392e3132342e302f32322d3332203d3e203631353838.roa
Signing time:             Thu 04 Apr 2024 09:00:23 +0000
ROA not before:           Thu 04 Apr 2024 08:55:23 +0000
ROA not after:            Thu 03 Apr 2025 09:00:23 +0000
asID:                     61588
IP address blocks:        138.59.124.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl
                          rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 12:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2d:4c:33:63:c0:24:96:f7:e3:16:21:56:9a:ad:27:36:20:9a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815
        Validity
            Not Before: Apr  4 08:55:23 2024 GMT
            Not After : Apr  3 09:00:23 2025 GMT
        Subject: CN=904B88AD9B3883C81D16E6397B6F81FDBC0B4B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:7a:6f:97:dd:10:18:9c:08:69:11:3d:2d:
                    e4:17:97:c6:df:88:43:9d:c4:cf:07:8a:5e:b1:07:
                    c6:53:49:32:dd:03:0a:42:0c:96:82:bc:37:7b:5d:
                    12:45:36:a0:0f:c7:33:33:c3:6d:9b:e2:55:5b:09:
                    2b:c3:60:4d:60:77:43:7b:93:cb:18:34:93:c1:fc:
                    c1:2c:0d:04:6d:a2:3d:69:55:88:b5:b9:6a:42:c9:
                    d6:2b:61:25:36:4f:c4:ee:f1:30:21:c9:76:5e:aa:
                    78:9f:be:db:d8:66:fc:60:0e:fd:3c:54:ea:5a:ed:
                    9c:af:80:f0:33:a0:54:9a:e8:37:7a:6c:f9:fc:4f:
                    a4:bf:51:7c:e6:70:1a:3e:c7:5b:c2:ba:f6:ac:0a:
                    ae:e7:ad:3b:88:df:13:88:a1:7a:d9:8d:c3:e9:56:
                    e2:21:4b:14:5d:06:a0:45:a9:cc:b9:07:62:7a:ff:
                    9b:d5:98:8d:0b:3b:ae:e8:a5:78:06:81:6c:fd:c7:
                    a4:62:ec:47:d0:d0:0e:46:9b:46:a8:52:ba:de:89:
                    eb:b8:8e:84:a8:f0:3e:12:20:a8:dc:67:1b:2c:01:
                    40:d3:5e:2d:82:fa:b5:ab:71:f3:21:2d:05:bc:3b:
                    a7:c2:08:6a:09:89:4b:55:a5:1f:0d:09:a0:83:d1:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4B:88:AD:9B:38:83:C8:1D:16:E6:39:7B:6F:81:FD:BC:0B:4B:6E
            X509v3 Authority Key Identifier:
                keyid:9A:EA:4D:C1:41:FC:20:D7:BA:2A:53:81:C5:2B:C3:4A:29:AB:68:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AEA4DC141FC20D7BA2A5381C52BC34A29AB6815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/1/3133382e35392e3132342e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:83:21:0f:b3:49:ae:8c:ea:8c:a3:da:f9:ed:ed:40:7a:73:
         10:88:ee:43:c3:a0:bf:93:89:f7:0f:b1:60:54:d8:99:83:27:
         a6:84:b7:bd:d0:fe:0e:5f:a3:bc:0a:e2:ec:ee:ea:ab:11:f2:
         20:77:64:7f:89:c9:12:26:b4:ee:e4:0a:c7:03:d8:28:58:7f:
         1d:d4:1b:bf:32:16:8f:02:54:df:14:5a:b5:24:77:b8:ee:72:
         45:e2:0b:fd:71:81:5b:4c:79:ac:f1:32:27:e4:05:17:be:d7:
         39:94:95:66:39:45:f3:78:b9:21:2b:e1:82:a5:f4:92:4c:bb:
         c5:6a:3e:ab:39:c5:63:0a:7a:78:e0:77:fc:39:65:6a:b5:7c:
         01:e4:01:95:8b:3c:6c:3e:b0:06:d6:ae:06:0e:82:2a:62:a5:
         81:8a:91:58:eb:9b:2f:2d:eb:86:b5:e3:61:73:97:20:f4:a6:
         99:87:af:b7:be:d0:03:b4:96:76:af:dd:89:b1:2f:c8:1d:8f:
         22:93:c6:28:0c:b7:b7:1f:b5:77:e7:48:a3:63:36:a7:68:e0:
         32:1c:61:83:65:4a:50:34:b6:43:a1:c0:08:d7:4a:f5:ae:46:
         a2:eb:8e:79:a9:96:c8:65:0b:5b:dc:95:2a:1d:d1:44:ef:56:
         f4:50:c7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:54 2024 by rpki-client on console-fra.rpki-client.org