Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138342e302f32342d3234203d3e20323634313933.roa
File:                     3133382e39372e3138342e302f32342d3234203d3e20323634313933.roa (raw, json)
Hash identifier:          pQMgpUz/JnCYX2tBqAielYXYhovzp1y4LzTq+inSEu4=
Subject key identifier:   DD:E3:E9:94:AD:65:03:5C:41:56:15:CA:4B:4A:40:09:55:70:94:B9
Certificate issuer:       /CN=2440DBC75A5488453C448BFED7D6C1E9C975F2EF
Certificate serial:       585F639836A8CBACA4C82CC60BBCA0CAD5424D4C
Authority key identifier: 24:40:DB:C7:5A:54:88:45:3C:44:8B:FE:D7:D6:C1:E9:C9:75:F2:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138342e302f32342d3234203d3e20323634313933.roa
Signing time:             Fri 23 Aug 2024 19:41:02 +0000
ROA not before:           Fri 23 Aug 2024 19:36:02 +0000
ROA not after:            Fri 22 Aug 2025 19:41:02 +0000
asID:                     264193
IP address blocks:        138.97.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.crl
                          rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5f:63:98:36:a8:cb:ac:a4:c8:2c:c6:0b:bc:a0:ca:d5:42:4d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2440DBC75A5488453C448BFED7D6C1E9C975F2EF
        Validity
            Not Before: Aug 23 19:36:02 2024 GMT
            Not After : Aug 22 19:41:02 2025 GMT
        Subject: CN=DDE3E994AD65035C415615CA4B4A4009557094B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:9b:ee:04:3c:6f:34:a3:50:e1:51:56:5c:
                    11:bb:3f:ad:60:1d:72:6e:67:48:60:b8:a7:15:ba:
                    74:84:e2:73:07:67:7a:6f:0a:f5:fe:62:02:8a:45:
                    fa:5d:e8:f9:a5:28:3d:6a:22:ef:3c:1c:3b:a6:0d:
                    2c:0b:79:7b:5d:43:26:1d:a6:de:28:98:46:18:3d:
                    84:b3:33:dd:33:3d:ac:12:49:23:5a:49:1b:3f:82:
                    b1:02:86:d6:9b:28:fa:55:8a:fc:73:b5:83:3f:84:
                    2b:74:5f:4b:90:53:d2:4f:65:57:e6:d4:43:94:c4:
                    ca:fe:b4:e6:54:2d:0e:be:0d:d0:41:c7:af:06:ed:
                    c7:ae:6f:d0:34:be:d9:30:7d:0a:8d:7e:69:43:d5:
                    22:ac:52:10:1c:4f:57:78:be:e7:47:7c:fc:fc:ca:
                    ae:b6:a5:f5:22:01:6e:9c:67:19:71:35:da:02:92:
                    2d:95:8f:a5:0c:34:9c:e0:59:88:5a:be:9b:07:f9:
                    ee:2f:07:0f:47:67:18:c2:a3:b2:01:39:51:13:4c:
                    1c:5b:dc:18:b8:f6:bc:cb:b2:e9:86:95:ff:bf:9f:
                    b5:39:8c:fe:a6:da:87:51:3c:98:9a:ec:d9:36:5c:
                    eb:66:a7:9a:e2:e8:59:9a:2e:cb:5f:60:59:88:06:
                    35:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E3:E9:94:AD:65:03:5C:41:56:15:CA:4B:4A:40:09:55:70:94:B9
            X509v3 Authority Key Identifier:
                keyid:24:40:DB:C7:5A:54:88:45:3C:44:8B:FE:D7:D6:C1:E9:C9:75:F2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2440DBC75A5488453C448BFED7D6C1E9C975F2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138342e302f32342d3234203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b3:ed:a2:c4:07:7a:80:1c:a7:9d:72:e6:cd:ca:2a:d9:0e:
         84:94:54:51:34:d2:94:aa:0b:cb:a3:2e:26:0c:b8:be:e9:77:
         ae:83:35:56:a8:87:8c:31:29:d1:00:1f:a1:28:6a:9a:6c:bc:
         e4:9e:9c:fa:4e:d2:36:e4:28:49:bc:fa:c4:ef:ca:06:ab:a6:
         ac:2e:d6:9e:53:77:db:b9:c6:90:a3:32:a6:f6:89:23:94:f7:
         30:ab:28:6e:32:72:04:d3:f0:27:80:91:66:8c:c1:f6:2d:d7:
         3a:fe:6e:0b:62:5e:6f:f2:59:45:cc:27:d9:4d:b8:c8:6e:c6:
         3f:f3:dc:26:19:a3:df:7d:3d:a4:27:79:13:03:8f:7c:f5:58:
         9b:10:11:24:69:6e:17:4d:a9:24:ba:8b:f6:88:27:1f:4d:73:
         f5:11:39:24:6f:3b:f7:54:2e:d2:f6:89:ba:00:46:8e:0f:96:
         ae:1d:a8:0c:5d:01:82:32:c1:94:e6:14:6e:a2:ed:22:56:64:
         e1:6e:10:9b:39:e8:99:45:72:ce:fb:20:aa:37:3c:b5:5d:08:
         fd:3e:6b:26:21:8c:42:d3:c9:05:3c:95:4c:9c:c3:c3:e7:15:
         04:bb:2c:d6:ef:71:a4:e1:93:5d:d8:d4:44:9e:a2:58:98:71:
         d9:d9:ca:d1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWF9jmDaoy6ykyCzGC7ygytVCTUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ0MERCQzc1QTU0ODg0NTNDNDQ4QkZFRDdENkMxRTlD
OTc1RjJFRjAeFw0yNDA4MjMxOTM2MDJaFw0yNTA4MjIxOTQxMDJaMDMxMTAvBgNV
BAMTKERERTNFOTk0QUQ2NTAzNUM0MTU2MTVDQTRCNEE0MDA5NTU3MDk0QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg6JvuBDxvNKNQ4VFWXBG7P61g
HXJuZ0hguKcVunSE4nMHZ3pvCvX+YgKKRfpd6PmlKD1qIu88HDumDSwLeXtdQyYd
pt4omEYYPYSzM90zPawSSSNaSRs/grEChtabKPpVivxztYM/hCt0X0uQU9JPZVfm
1EOUxMr+tOZULQ6+DdBBx68G7ceub9A0vtkwfQqNfmlD1SKsUhAcT1d4vudHfPz8
yq62pfUiAW6cZxlxNdoCki2Vj6UMNJzgWYhavpsH+e4vBw9HZxjCo7IBOVETTBxb
3Bi49rzLsumGlf+/n7U5jP6m2odRPJia7Nk2XOtmp5ri6FmaLstfYFmIBjVtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3ePplK1lA1xBVhXKS0pACVVwlLkwHwYDVR0j
BBgwFoAUJEDbx1pUiEU8RIv+19bB6cl18u8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZTZ3FycUN3Snp2b0VSelYxdHlMWWJ1ZFhWRVNFNDFyTXVYUkVRWDJK
RlEvMC8yNDQwREJDNzVBNTQ4ODQ1M0M0NDhCRkVEN0Q2QzFFOUM5NzVGMkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0NDBEQkM3NUE1NDg4NDUz
QzQ0OEJGRUQ3RDZDMUU5Qzk3NUYyRUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGU2dxcnFDd0p6dm9FUnpWMXR5TFlidWRYVkVTRTQxck11WFJFUVgySkZRLzAv
MzEzMzM4MmUzOTM3MmUzMTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKYbgwDQYJKoZIhvcNAQELBQADggEBAISz7aLE
B3qAHKedcubNyirZDoSUVFE00pSqC8ujLiYMuL7pd66DNVaoh4wxKdEAH6Eoapps
vOSenPpO0jbkKEm8+sTvygarpqwu1p5Td9u5xpCjMqb2iSOU9zCrKG4ycgTT8CeA
kWaMwfYt1zr+bgtiXm/yWUXMJ9lNuMhuxj/z3CYZo999PaQneRMDj3z1WJsQESRp
bhdNqSS6i/aIJx9Nc/UROSRvO/dULtL2iboARo4Plq4dqAxdAYIywZTmFG6i7SJW
ZOFuEJs56JlFcs77IKo3PLVdCP0+ayYhjELTyQU8lUycw8PnFQS7LNbvcaThk13Y
1ESeoliYcdnZytE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:55 2024 by rpki-client on console-fra.rpki-client.org