Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32342d3234203d3e20323634313933.roa
File:                     3133382e33362e38342e302f32342d3234203d3e20323634313933.roa (raw, json)
Hash identifier:          AZ63wAT+tZcUcXu07OBPt2rrCwBvjxFuPVH6yOq1iAg=
Subject key identifier:   85:0D:07:65:20:10:E8:AD:A7:FA:54:35:26:54:98:2D:B7:65:DD:DD
Certificate issuer:       /CN=2440DBC75A5488453C448BFED7D6C1E9C975F2EF
Certificate serial:       15E058F403D33E56F5027D87C7EC7001771CD8CE
Authority key identifier: 24:40:DB:C7:5A:54:88:45:3C:44:8B:FE:D7:D6:C1:E9:C9:75:F2:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32342d3234203d3e20323634313933.roa
Signing time:             Fri 23 Aug 2024 19:41:00 +0000
ROA not before:           Fri 23 Aug 2024 19:36:00 +0000
ROA not after:            Fri 22 Aug 2025 19:41:00 +0000
asID:                     264193
IP address blocks:        138.36.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.crl
                          rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e0:58:f4:03:d3:3e:56:f5:02:7d:87:c7:ec:70:01:77:1c:d8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2440DBC75A5488453C448BFED7D6C1E9C975F2EF
        Validity
            Not Before: Aug 23 19:36:00 2024 GMT
            Not After : Aug 22 19:41:00 2025 GMT
        Subject: CN=850D07652010E8ADA7FA54352654982DB765DDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:2f:02:d3:c0:aa:b0:c9:b8:b7:83:f3:42:
                    62:49:86:02:30:81:cd:ce:fc:61:74:21:6b:b2:3e:
                    b6:cb:92:02:1e:74:07:6f:47:ba:20:57:8b:7f:fd:
                    f2:32:27:30:d5:48:69:a3:25:89:50:38:7f:b7:08:
                    b7:fa:5f:7a:87:b1:20:c7:1b:5a:f4:5a:7a:6a:f3:
                    7a:ba:5d:2a:41:10:3e:7d:8a:98:6f:3e:cd:ca:7c:
                    66:e0:5b:37:2d:be:5c:1f:44:44:85:bc:5b:8b:f4:
                    40:6f:4d:e3:d5:d5:01:22:de:00:2d:bb:75:83:3f:
                    3b:21:fa:07:d4:7a:94:8d:93:7d:31:6d:df:4d:1b:
                    59:8f:f3:f7:43:65:71:3d:00:84:71:8c:de:80:60:
                    3e:96:36:2a:4b:dc:72:1e:cf:46:70:88:83:52:1a:
                    15:18:e6:29:0d:bc:81:78:7a:9d:16:e2:20:9f:4d:
                    66:11:c4:1d:83:23:e9:1d:c5:42:78:e7:70:a7:b4:
                    0b:40:44:0e:73:5b:69:1c:56:8a:e9:22:88:3a:f4:
                    a2:d4:fe:e2:c9:97:62:b2:11:4b:47:f3:6f:51:b7:
                    e1:01:ce:ca:18:93:d4:46:64:e0:fd:4d:34:02:c2:
                    84:bd:8b:ae:13:88:35:b7:17:1c:17:3f:c0:d5:81:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0D:07:65:20:10:E8:AD:A7:FA:54:35:26:54:98:2D:B7:65:DD:DD
            X509v3 Authority Key Identifier:
                keyid:24:40:DB:C7:5A:54:88:45:3C:44:8B:FE:D7:D6:C1:E9:C9:75:F2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32342d3234203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:f1:42:56:6f:e3:b8:c0:26:19:7c:fe:39:c5:17:c6:04:
         46:00:b1:7a:6c:a7:09:4e:28:87:3a:fd:7c:5d:c5:fb:fe:70:
         73:83:39:e8:66:f9:28:bb:3e:6a:cc:61:d0:81:62:ee:7c:85:
         02:a3:b3:e3:36:a9:17:c9:d2:06:37:47:ef:12:0c:d0:65:a9:
         3a:6a:0e:01:8d:b5:0d:7b:86:68:a3:d3:61:de:1a:4a:3f:bf:
         ab:0e:ee:c5:fc:8e:b6:25:03:1d:b4:8b:29:7c:09:82:12:bd:
         f0:cc:19:e1:28:21:a8:31:c4:97:a7:0f:df:b6:7c:12:f6:0d:
         79:ea:b7:a6:24:e2:c5:8d:60:25:c9:95:4d:7a:e8:7f:84:fe:
         bd:f4:e2:39:22:4d:c4:9d:7f:c1:36:6a:86:66:36:70:74:29:
         3a:0f:5d:fb:d6:37:de:21:62:64:c7:48:90:07:11:16:d8:2e:
         32:27:29:7e:58:1b:a0:f4:73:bd:03:b9:a2:c5:45:9a:f8:dc:
         db:13:f7:d2:bf:e6:91:0a:d9:40:ee:eb:e1:03:97:d6:96:b1:
         f7:6b:83:63:c3:8c:37:67:9a:83:2f:dc:95:0d:53:c0:69:25:
         2b:0d:5e:b7:67:d9:d1:37:49:fa:20:f4:8b:18:66:fa:05:15:
         11:97:12:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:06 2024 by rpki-client on console-ams.rpki-client.org