Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa
File:                     3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa (raw, json)
Hash identifier:          p3wy7of9W9Xep+TA2zl4LLEV1FdvT3gkvVZZcTmSntw=
Subject key identifier:   9A:05:3E:D3:1C:CA:F8:4D:D7:79:26:E4:85:F4:0E:FB:B3:2B:20:24
Certificate issuer:       /CN=746AC2B5044A56E55A7067FE4877098554974FB8
Certificate serial:       274A92A2EC9250B4C4B4A91151368661FAF00771
Authority key identifier: 74:6A:C2:B5:04:4A:56:E5:5A:70:67:FE:48:77:09:85:54:97:4F:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746AC2B5044A56E55A7067FE4877098554974FB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa
Signing time:             Thu 04 Apr 2024 10:40:55 +0000
ROA not before:           Thu 04 Apr 2024 10:35:55 +0000
ROA not after:            Thu 03 Apr 2025 10:40:55 +0000
asID:                     264193
IP address blocks:        138.97.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/746AC2B5044A56E55A7067FE4877098554974FB8.crl
                          rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/746AC2B5044A56E55A7067FE4877098554974FB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746AC2B5044A56E55A7067FE4877098554974FB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4a:92:a2:ec:92:50:b4:c4:b4:a9:11:51:36:86:61:fa:f0:07:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746AC2B5044A56E55A7067FE4877098554974FB8
        Validity
            Not Before: Apr  4 10:35:55 2024 GMT
            Not After : Apr  3 10:40:55 2025 GMT
        Subject: CN=9A053ED31CCAF84DD77926E485F40EFBB32B2024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:3a:a3:cb:24:fb:eb:ed:64:6b:70:09:ab:
                    5b:32:4f:b6:1c:f8:9c:ae:bf:11:13:4f:ec:db:ad:
                    5e:11:07:91:14:1e:d1:49:08:bb:75:33:80:d2:ec:
                    67:b8:6e:c2:82:d6:06:2e:d0:f7:9a:d7:36:22:6f:
                    68:ea:f4:1c:ae:ae:3a:9a:7e:c1:ed:38:dc:b3:a9:
                    03:62:53:3d:f3:a5:40:3c:2d:74:04:d1:ad:6b:8c:
                    b2:5c:ab:64:66:04:c0:75:6e:cc:22:56:d5:c3:48:
                    87:b2:70:b0:8c:0b:e3:12:1a:a0:6d:0b:64:63:93:
                    4f:8b:c8:df:64:be:48:b9:14:c5:f8:af:05:80:16:
                    eb:79:51:1c:32:c8:74:7e:fe:7c:f7:04:12:71:ea:
                    12:70:85:24:08:96:76:d8:de:58:bf:6c:1a:23:5f:
                    91:c6:af:6d:71:6d:86:4a:63:6d:4e:eb:31:93:41:
                    1d:cb:3b:17:94:6c:68:d4:7e:54:42:6a:32:e9:5b:
                    74:a4:5e:a9:30:55:6e:16:99:34:2d:7a:5c:a4:bf:
                    46:fc:67:e9:8b:2e:0d:d5:f6:e9:09:d7:9c:cd:37:
                    99:1b:f7:94:7d:6e:00:f2:ae:fe:99:ae:a6:06:e6:
                    a6:ad:8f:fd:9c:ae:81:47:56:ca:5c:10:f3:ad:57:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:05:3E:D3:1C:CA:F8:4D:D7:79:26:E4:85:F4:0E:FB:B3:2B:20:24
            X509v3 Authority Key Identifier:
                keyid:74:6A:C2:B5:04:4A:56:E5:5A:70:67:FE:48:77:09:85:54:97:4F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/746AC2B5044A56E55A7067FE4877098554974FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746AC2B5044A56E55A7067FE4877098554974FB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/1/3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:f7:fd:b7:58:a8:fd:14:b8:c4:36:5d:2f:09:2a:77:79:1f:
         fb:38:88:fb:ee:6c:59:53:7b:11:ba:15:72:59:d2:f1:4e:03:
         41:52:2e:bb:d3:c5:e7:3a:a6:d0:40:dc:a1:9e:cf:65:b4:0b:
         6e:b2:f2:4d:fb:12:90:0e:d2:05:f5:c1:d8:d2:d5:a0:30:52:
         bb:fe:f3:9d:ee:d1:bd:c4:3a:ba:23:a0:1c:dc:60:b1:6e:ea:
         11:bd:4a:e7:c9:7b:ac:68:e2:4a:0d:d2:85:57:3f:92:08:cd:
         9a:75:2c:f1:b6:33:61:a4:94:47:e5:87:23:ae:17:36:f0:28:
         4c:dd:d6:e8:14:b4:24:db:ca:c2:79:0c:b2:e5:a0:6b:c3:e5:
         f0:35:bf:d8:71:b4:d4:a7:3a:84:a7:58:33:94:44:0a:00:bf:
         32:a7:f3:3e:9a:b0:f1:4d:af:1e:76:7c:2c:5c:3c:eb:e7:dd:
         69:27:5e:bf:81:94:e5:64:f2:72:37:61:a4:c6:a0:c9:1a:6f:
         fb:32:fe:f0:60:c3:b8:67:4a:d3:e4:9f:03:35:c0:dc:9d:56:
         77:5d:eb:08:e0:9e:16:d2:33:06:64:b1:5e:2c:9b:2d:5a:f1:
         b7:7d:77:1a:aa:0b:6b:65:4e:b9:b0:f7:9a:22:a4:27:38:f2:
         b5:75:ea:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:23 2024 by rpki-client on console-fra.rpki-client.org