Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38362e302f32342d3234203d3e20323634313933.roa
File:                     3133382e33362e38362e302f32342d3234203d3e20323634313933.roa (raw, json)
Hash identifier:          iH7+BYHIrSWAJCNerRAyaLDIioEbwnFZKjaKhPFSLrI=
Subject key identifier:   81:A5:59:BB:9D:0A:DB:88:6B:12:7C:43:B4:72:E9:6C:C3:13:BF:BC
Certificate issuer:       /CN=2440DBC75A5488453C448BFED7D6C1E9C975F2EF
Certificate serial:       1CBB926E3707CD9E7D83AC37147AE0D275E76924
Authority key identifier: 24:40:DB:C7:5A:54:88:45:3C:44:8B:FE:D7:D6:C1:E9:C9:75:F2:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38362e302f32342d3234203d3e20323634313933.roa
Signing time:             Fri 23 Aug 2024 19:40:59 +0000
ROA not before:           Fri 23 Aug 2024 19:35:59 +0000
ROA not after:            Fri 22 Aug 2025 19:40:59 +0000
asID:                     264193
IP address blocks:        138.36.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.crl
                          rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:bb:92:6e:37:07:cd:9e:7d:83:ac:37:14:7a:e0:d2:75:e7:69:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2440DBC75A5488453C448BFED7D6C1E9C975F2EF
        Validity
            Not Before: Aug 23 19:35:59 2024 GMT
            Not After : Aug 22 19:40:59 2025 GMT
        Subject: CN=81A559BB9D0ADB886B127C43B472E96CC313BFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ca:8b:a5:b5:b3:b3:14:34:9a:de:7a:e0:f0:
                    42:78:8d:b3:84:64:ff:09:63:76:6c:19:0f:f0:86:
                    9c:da:7e:36:f8:8b:4b:64:48:9a:59:46:3a:66:b8:
                    0d:03:e6:6a:db:92:53:19:82:7b:e3:d4:47:a6:7d:
                    1e:69:85:e3:90:62:30:b8:95:a2:0e:02:fd:2b:ba:
                    5c:74:36:fb:d1:9b:3d:81:ea:65:55:48:98:ff:b9:
                    c2:2e:57:a4:45:70:d3:19:56:fa:4d:ef:06:6c:ab:
                    1f:af:c9:81:e3:d4:ea:58:3d:5d:8b:c0:4a:8e:74:
                    7f:8c:e8:98:82:40:dd:29:e6:c7:5e:9c:94:0b:23:
                    cd:1b:a5:64:d9:06:d2:8e:28:14:af:6d:21:d5:b6:
                    dd:cf:36:0f:38:78:2b:c0:cc:0c:0c:81:5a:cb:66:
                    f1:e7:4c:c2:50:28:dd:cf:52:72:0e:5d:7c:38:73:
                    7d:41:39:52:18:a1:ae:85:8b:d3:85:30:45:d2:31:
                    9f:41:41:f8:67:45:c1:72:59:a8:bc:07:f9:1e:c5:
                    8a:bc:83:21:48:49:9b:0e:14:1e:97:5b:f4:34:dd:
                    30:4a:30:58:cf:e2:14:42:2f:b3:5a:ae:12:86:15:
                    fb:9f:eb:bb:dd:4e:2e:a3:c6:ab:65:eb:1a:e5:f1:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A5:59:BB:9D:0A:DB:88:6B:12:7C:43:B4:72:E9:6C:C3:13:BF:BC
            X509v3 Authority Key Identifier:
                keyid:24:40:DB:C7:5A:54:88:45:3C:44:8B:FE:D7:D6:C1:E9:C9:75:F2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38362e302f32342d3234203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:c6:b7:1f:17:96:66:d1:8f:3b:cc:c1:77:23:ac:fd:a8:4e:
         08:87:c7:84:2c:e4:af:9c:26:e0:ce:2b:6e:1d:69:be:06:4c:
         95:c0:8e:62:aa:fb:ce:26:56:79:09:93:1a:f2:98:c3:11:71:
         b2:41:e6:08:fa:b3:2a:49:7a:e9:c8:c5:c9:25:9a:b0:75:5e:
         cd:1a:a8:85:f2:c7:84:6b:39:ee:af:d9:8b:f9:dc:05:7c:e5:
         de:aa:72:74:80:b9:11:43:a7:92:53:18:94:0e:bf:8a:7f:d1:
         44:ee:ea:3f:3f:1b:0b:41:4c:91:b3:3b:f8:ce:37:8d:4c:35:
         79:4c:e8:5c:a9:d3:33:42:c5:68:0f:0a:3f:53:42:74:fb:da:
         1c:4b:36:8c:af:2d:6f:7d:ca:af:a8:1a:dc:82:97:7f:97:fc:
         bd:f2:2b:1e:c2:62:dd:2d:c9:6f:af:3d:96:b6:73:bb:6b:2a:
         aa:dc:95:dd:db:49:d3:69:f9:5f:1c:2e:f4:53:34:f7:9f:ba:
         0d:ab:7a:69:69:9f:ce:48:fb:d2:5b:81:b9:5c:42:33:9b:44:
         6c:6a:32:15:1b:38:ff:9b:e5:fb:4c:bc:ce:b5:0d:73:7d:9f:
         7e:a0:82:dc:56:c1:de:5c:df:44:b8:6f:69:a0:2d:00:1f:c3:
         ba:52:e7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:30 2024 by rpki-client on console-fra.rpki-client.org