Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa
File:                     3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa (raw, json)
Hash identifier:          9vUvMSAFYKng7Eg/DXBxiGz3Hg/sIZ/VzWz2DjZqw3s=
Subject key identifier:   DD:46:79:0B:F7:0F:8E:2D:5B:F9:03:A1:35:38:09:1D:8C:DE:56:9B
Certificate issuer:       /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Certificate serial:       4BC4755340F6F4EC28368827EF74B75D5281E6
Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa
Signing time:             Fri 05 Apr 2024 01:04:59 +0000
ROA not before:           Fri 05 Apr 2024 00:59:59 +0000
ROA not after:            Fri 04 Apr 2025 01:04:59 +0000
asID:                     264411
IP address blocks:        138.204.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
                          rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c4:75:53:40:f6:f4:ec:28:36:88:27:ef:74:b7:5d:52:81:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
        Validity
            Not Before: Apr  5 00:59:59 2024 GMT
            Not After : Apr  4 01:04:59 2025 GMT
        Subject: CN=DD46790BF70F8E2D5BF903A13538091D8CDE569B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:dd:34:5a:be:24:33:2e:36:29:f3:43:26:
                    6e:4a:06:23:24:84:83:6b:7c:ca:a2:98:7a:9a:87:
                    80:ed:79:a1:95:35:88:97:c0:19:61:65:37:c9:8f:
                    a2:ca:29:eb:d5:85:d4:24:db:fd:1e:4c:b9:79:21:
                    ef:b1:95:80:f9:81:dd:60:7d:ba:dd:3c:8c:a3:ac:
                    b9:df:96:ee:d2:2a:8d:df:68:5c:45:a0:9a:59:6e:
                    62:b2:31:32:1b:4b:61:3e:65:34:3d:16:d3:bb:18:
                    2c:dd:b3:c0:99:90:d5:ea:1e:5b:a1:8f:39:a2:75:
                    64:7a:48:b7:ad:f2:45:0c:e9:96:43:a6:06:5f:08:
                    8a:20:d7:69:7b:b8:36:35:96:83:5b:dd:d8:ed:09:
                    f8:89:12:4b:2b:fa:2c:d8:26:94:98:15:02:2b:d3:
                    bc:0f:2e:39:e6:24:22:df:29:5c:55:62:61:13:05:
                    48:6a:6f:52:1f:fd:44:f1:42:92:2a:e9:44:54:a5:
                    91:d5:84:4c:59:bf:8b:27:eb:7a:2d:73:19:bb:c5:
                    26:71:b5:df:8c:a7:98:1b:1e:6e:8c:a5:ec:34:62:
                    7f:3c:c3:7c:2b:01:c9:11:33:c9:cc:6a:df:85:dd:
                    87:c8:45:c0:76:45:ac:a4:19:1f:57:96:2e:b5:47:
                    ec:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:46:79:0B:F7:0F:8E:2D:5B:F9:03:A1:35:38:09:1D:8C:DE:56:9B
            X509v3 Authority Key Identifier:
                keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133382e3230342e3132342e302f32322d3234203d3e20323634343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:dd:dd:9a:01:e6:7a:2b:2f:ec:4d:40:2d:1a:2c:66:00:
         6a:6d:59:7a:20:f8:36:e1:8e:19:35:71:5e:f0:63:0f:11:da:
         34:26:05:c5:53:b2:1f:5c:a5:26:e4:78:2a:b3:24:c6:24:a7:
         61:b8:95:0c:32:75:39:02:c3:8c:45:2b:a1:43:ac:fc:1d:5f:
         e3:8f:5e:68:23:30:eb:ca:74:04:a7:c5:71:43:61:83:ae:62:
         95:64:99:ac:7e:35:86:58:b4:26:65:0b:79:ac:5b:af:2a:86:
         2a:6d:a6:ae:d6:63:34:22:47:77:1f:79:af:40:ed:11:3c:e3:
         79:77:be:0d:b1:c9:07:24:fc:4f:99:9d:f3:23:db:de:34:d0:
         f9:46:93:ed:52:1c:00:f1:02:04:9a:ff:03:4d:3e:0c:60:8a:
         7d:ff:3e:9b:dc:ad:28:2e:bd:0b:1a:e3:e0:aa:12:16:bc:85:
         26:43:89:dd:66:cb:27:87:17:95:64:9e:8d:91:1b:37:bd:ce:
         01:76:e9:71:6f:4c:c3:a2:f4:a1:8e:58:79:fb:4c:3b:20:0f:
         e2:84:9d:21:80:b9:6c:e9:91:db:15:df:3a:09:d8:c1:d4:7a:
         da:b8:22:a7:32:76:e9:ef:04:67:fa:a4:28:84:53:b3:4d:a0:
         8a:2e:99:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:06 2024 by rpki-client on console-ams.rpki-client.org