Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa
File:                     3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa (raw, json)
Hash identifier:          RQ9N/SGV5ghbIzxsoq9I9tj8uh+8rPZgeMAtjxlAM04=
Subject key identifier:   56:1A:2C:31:FD:B0:C5:09:9A:EF:A0:61:55:39:92:A1:3C:3D:0F:1E
Certificate issuer:       /CN=A800BDA00AA4C8C4388F18F8E8C53579D345D208
Certificate serial:       081EE55E62D48394EF50663EAAAC45EA5E77FA59
Authority key identifier: A8:00:BD:A0:0A:A4:C8:C4:38:8F:18:F8:E8:C5:35:79:D3:45:D2:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa
Signing time:             Thu 04 Apr 2024 19:18:34 +0000
ROA not before:           Thu 04 Apr 2024 19:13:34 +0000
ROA not after:            Thu 03 Apr 2025 19:18:34 +0000
asID:                     28187
IP address blocks:        138.185.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.crl
                          rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1e:e5:5e:62:d4:83:94:ef:50:66:3e:aa:ac:45:ea:5e:77:fa:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A800BDA00AA4C8C4388F18F8E8C53579D345D208
        Validity
            Not Before: Apr  4 19:13:34 2024 GMT
            Not After : Apr  3 19:18:34 2025 GMT
        Subject: CN=561A2C31FDB0C5099AEFA061553992A13C3D0F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:aa:2f:2e:95:1b:0e:7b:d9:c5:f7:ba:43:
                    1e:8d:e8:9e:9c:53:28:94:f6:b3:90:ae:d3:32:62:
                    18:ae:d6:7d:49:65:a0:4d:76:dc:1d:75:bd:d7:ff:
                    86:13:64:d8:d0:e4:06:f7:21:24:da:1a:21:ee:90:
                    f5:80:14:67:fe:26:4d:52:e5:07:4d:eb:54:86:81:
                    47:ef:a3:66:d5:fb:a5:6d:43:b9:86:39:7a:be:ed:
                    35:20:76:18:14:ca:77:d6:87:bb:de:58:f7:7e:b9:
                    a4:2e:67:80:d3:ab:ac:b3:7f:4b:ee:04:e3:23:73:
                    3b:da:a9:46:40:21:8b:d1:46:e8:d6:95:e2:fb:eb:
                    b8:7c:72:24:02:26:6d:90:db:2b:0d:b8:35:0a:41:
                    8c:1d:61:f5:ef:c7:a3:f8:27:5e:2d:69:d9:8f:be:
                    9f:f6:e6:0e:e3:83:7b:1d:fe:1d:05:f8:09:f3:36:
                    6c:98:22:ab:f2:80:1a:15:8b:2a:87:66:57:1f:ec:
                    d5:f3:86:4c:fc:03:39:7a:4b:1f:53:87:e2:7d:03:
                    7a:84:d8:71:11:fa:93:86:64:95:1a:b3:18:e8:a7:
                    dd:37:ed:4d:2c:fe:91:35:f0:34:77:77:4f:42:05:
                    1a:c4:2f:b7:de:07:a8:79:d3:96:10:68:9d:5c:99:
                    36:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1A:2C:31:FD:B0:C5:09:9A:EF:A0:61:55:39:92:A1:3C:3D:0F:1E
            X509v3 Authority Key Identifier:
                keyid:A8:00:BD:A0:0A:A4:C8:C4:38:8F:18:F8:E8:C5:35:79:D3:45:D2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A800BDA00AA4C8C4388F18F8E8C53579D345D208.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCNvej1a8r2RQ3kZ5pWWCsob2Rn4MqYuBHKd7AP98bD6/1/3133382e3138352e3136382e302f32322d3234203d3e203238313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:03:df:0c:ad:c3:96:b5:b7:79:6f:b7:e4:85:db:a4:8c:
         81:d9:66:f5:f2:1b:9f:ed:e7:3b:64:ba:2c:78:ff:18:d0:ff:
         13:f3:38:4e:29:02:08:6a:05:40:10:93:74:c5:05:37:3e:ca:
         fa:9f:97:75:f0:06:18:a2:7d:b7:fd:b0:44:51:84:f2:41:e2:
         05:cc:b8:47:c4:e1:e8:b0:35:b3:2b:31:f6:a3:19:b5:48:99:
         2f:1f:89:5c:48:11:ee:08:1a:e1:cc:01:b5:c2:1f:06:e1:68:
         e2:ac:4e:be:ca:b0:41:aa:aa:4a:68:70:07:d7:9d:0f:1c:12:
         8b:f3:77:5a:a5:66:41:20:51:83:eb:45:c1:18:42:2e:a4:83:
         e6:28:48:ca:8d:57:d0:50:1c:46:bc:8c:44:db:5c:0d:c7:0b:
         da:84:cc:29:bf:ac:c2:27:0f:1b:fd:81:70:0a:19:d9:50:d0:
         e7:e8:98:d0:aa:38:61:29:e1:56:d9:63:ef:86:4d:8c:2d:ca:
         f3:6a:15:d5:1a:15:52:2a:a4:0b:77:05:d6:45:8c:99:33:da:
         40:5b:2a:96:87:f0:79:05:e4:19:65:0e:69:da:5e:36:d0:58:
         b3:ce:8e:b7:c3:bd:a1:eb:63:5a:bc:31:a4:48:f9:34:56:0f:
         86:24:cc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:03 2024 by rpki-client on console-ams.rpki-client.org