Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/3133382e33362e38342e302f32322d3234203d3e20323634313933.roa
File:                     3133382e33362e38342e302f32322d3234203d3e20323634313933.roa (raw, json)
Hash identifier:          w2TnkANL5MuP26ebPCuUKGf0l6BtMwtiS9thzIjlDM8=
Subject key identifier:   D9:70:9F:36:CF:67:D8:8C:AB:86:9E:6F:8C:0F:98:3B:EC:70:F8:8C
Certificate issuer:       /CN=746AC2B5044A56E55A7067FE4877098554974FB8
Certificate serial:       636884E749B31C4C05C54D1F02F6CDED5B3990D6
Authority key identifier: 74:6A:C2:B5:04:4A:56:E5:5A:70:67:FE:48:77:09:85:54:97:4F:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746AC2B5044A56E55A7067FE4877098554974FB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/3133382e33362e38342e302f32322d3234203d3e20323634313933.roa
Signing time:             Thu 04 Apr 2024 10:40:55 +0000
ROA not before:           Thu 04 Apr 2024 10:35:55 +0000
ROA not after:            Thu 03 Apr 2025 10:40:55 +0000
asID:                     264193
IP address blocks:        138.36.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/746AC2B5044A56E55A7067FE4877098554974FB8.crl
                          rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/746AC2B5044A56E55A7067FE4877098554974FB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746AC2B5044A56E55A7067FE4877098554974FB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:68:84:e7:49:b3:1c:4c:05:c5:4d:1f:02:f6:cd:ed:5b:39:90:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746AC2B5044A56E55A7067FE4877098554974FB8
        Validity
            Not Before: Apr  4 10:35:55 2024 GMT
            Not After : Apr  3 10:40:55 2025 GMT
        Subject: CN=D9709F36CF67D88CAB869E6F8C0F983BEC70F88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:93:ee:32:5c:8d:73:20:5d:3f:10:33:1f:
                    70:34:ff:3b:1a:94:6e:bc:53:81:87:0b:4e:46:4b:
                    18:1d:aa:c0:ae:52:e9:58:02:a2:77:a6:10:3f:0b:
                    63:c2:22:d9:2a:8e:3a:42:73:81:f1:f7:a5:96:26:
                    8b:70:40:1f:1c:e5:7d:0d:f7:3f:ef:9e:31:91:f7:
                    ea:e5:11:c6:64:78:1f:10:bf:d8:98:fd:4a:51:c4:
                    b6:59:27:9e:1f:8f:9f:24:b8:67:5c:7e:e5:0f:6e:
                    bd:63:00:ee:19:a8:41:fe:25:4e:23:c4:97:c3:66:
                    b8:2e:43:8c:ee:8e:05:71:2b:6c:a0:9d:99:a2:39:
                    3b:dc:1e:00:e1:61:09:ed:72:63:e7:18:0a:50:0e:
                    95:ad:15:46:f3:09:ed:fa:a5:b7:ba:05:ba:19:2e:
                    77:a4:83:bd:ae:1c:08:c1:81:03:87:6d:1c:eb:dd:
                    42:98:e9:02:36:d2:b6:bf:60:88:83:54:f9:1c:aa:
                    3c:5c:63:d0:e8:c5:c1:a3:5a:8a:98:f5:19:00:01:
                    6e:e4:7d:a5:4d:7d:2b:65:cb:47:26:43:e5:1f:e5:
                    76:ae:74:e1:8b:77:91:7a:8f:0b:71:03:91:e0:bc:
                    86:89:90:df:02:e4:c7:cd:45:e0:cb:b9:b9:41:47:
                    04:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:70:9F:36:CF:67:D8:8C:AB:86:9E:6F:8C:0F:98:3B:EC:70:F8:8C
            X509v3 Authority Key Identifier:
                keyid:74:6A:C2:B5:04:4A:56:E5:5A:70:67:FE:48:77:09:85:54:97:4F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/746AC2B5044A56E55A7067FE4877098554974FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746AC2B5044A56E55A7067FE4877098554974FB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/3133382e33362e38342e302f32322d3234203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:c9:79:50:d8:59:cd:45:9e:b1:5d:cc:0e:3e:1a:12:fb:f0:
         1a:72:46:47:67:a6:d4:fd:1c:58:7b:f3:0b:38:6f:6d:4a:39:
         2e:a3:c5:98:e9:b5:bc:4a:86:11:bf:b3:ea:bd:c7:45:4f:27:
         8d:27:03:0a:25:c8:e2:c0:87:f8:a1:e3:75:ad:87:39:39:d4:
         31:4f:50:8d:7e:a2:36:f2:8f:6b:0d:45:5f:5a:8d:fb:c9:88:
         79:8a:33:64:24:73:f6:a1:62:e2:f0:75:28:89:91:a4:19:6a:
         00:78:c0:c5:0c:51:60:e9:0d:9a:41:bf:97:c7:b4:eb:fe:c0:
         a4:68:9f:ee:c1:90:e0:96:b5:f4:6d:e7:ad:96:b2:6d:dd:5a:
         6c:3b:16:61:c0:5b:0f:b1:43:a3:37:77:fb:9c:3a:26:8d:aa:
         1a:c1:b4:15:58:15:11:e8:9d:82:0e:1a:27:6e:e5:fd:d5:be:
         9d:21:d0:30:55:8f:9f:8a:5d:e9:eb:53:72:20:23:d3:24:03:
         6c:df:ce:6d:88:dd:bf:26:79:5c:99:95:2a:07:c8:1c:5b:c6:
         22:61:89:bc:05:46:df:47:f4:02:2b:2e:4b:27:8c:f5:4f:c6:
         db:7a:23:9c:0d:4f:20:79:65:8e:35:4a:59:26:67:b6:df:4f:
         ac:fb:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:22 2024 by rpki-client on console-ams.rpki-client.org