Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39362e302f32322d3232203d3e20323634313337.roa
File:                     3133382e39372e39362e302f32322d3232203d3e20323634313337.roa (raw, json)
Hash identifier:          uDsF9p3GEIV2acZBwSbqMXRS2O8AiZ+mpToXEJFh0rA=
Subject key identifier:   8D:BB:07:50:91:C9:F5:96:05:F8:B5:E1:7B:ED:67:25:07:D3:BC:C9
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       6A4EE194C487EA3269725F531D4695961DEDD030
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39362e302f32322d3232203d3e20323634313337.roa
Signing time:             Thu 04 Apr 2024 08:08:36 +0000
ROA not before:           Thu 04 Apr 2024 08:03:36 +0000
ROA not after:            Thu 03 Apr 2025 08:08:36 +0000
asID:                     264137
IP address blocks:        138.97.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4e:e1:94:c4:87:ea:32:69:72:5f:53:1d:46:95:96:1d:ed:d0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Apr  4 08:03:36 2024 GMT
            Not After : Apr  3 08:08:36 2025 GMT
        Subject: CN=8DBB075091C9F59605F8B5E17BED672507D3BCC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:a8:bb:8b:86:8b:3e:4b:bc:6b:ae:32:fa:
                    67:92:7f:22:bd:df:d2:38:e4:99:4d:c8:8d:f4:50:
                    26:ce:4a:71:0c:96:e5:fa:b2:2c:67:b5:40:52:0d:
                    51:eb:ef:4a:2f:67:d1:f5:42:a2:ec:d0:cd:85:50:
                    6c:ce:fb:6f:52:f9:99:17:23:50:c1:2d:e0:d2:80:
                    be:50:5e:01:3d:ae:9a:48:5b:99:1d:63:36:15:aa:
                    1e:7b:dd:cc:0b:9f:2c:2c:a7:c1:53:1d:a4:63:0f:
                    36:4e:5b:11:c4:8a:ef:bf:1d:c3:e0:81:2e:f0:12:
                    a4:06:91:e9:ef:6a:35:6e:3b:24:f9:e9:ac:a9:c7:
                    42:6d:b8:3f:b8:3f:53:26:46:e6:c4:3f:97:f5:1e:
                    a2:6e:d4:b3:09:1d:43:57:af:c7:45:0c:96:8a:1b:
                    4e:55:21:95:1d:84:ae:6f:4c:18:f8:69:e0:2a:40:
                    82:a5:75:52:98:39:8e:5c:2c:b8:38:01:76:a3:76:
                    cd:e3:66:56:64:1a:6a:43:f6:21:f1:50:9b:f8:c9:
                    a3:35:42:41:a4:ae:36:17:0c:4f:25:f0:1f:58:36:
                    49:25:07:43:13:b7:16:d5:82:38:92:6f:53:2a:81:
                    79:84:20:dd:1a:f9:40:f7:89:30:56:27:b9:69:cf:
                    0f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BB:07:50:91:C9:F5:96:05:F8:B5:E1:7B:ED:67:25:07:D3:BC:C9
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39362e302f32322d3232203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:f5:5e:6a:2e:95:30:63:47:51:89:83:84:bc:93:ca:14:05:
         07:e4:ef:bf:e6:65:a8:ba:72:e3:1d:8a:ba:5e:47:6f:4c:a8:
         42:56:f4:b6:d1:f9:9b:3e:b5:b1:bb:d4:0a:6f:d6:35:c7:e8:
         c9:b9:fb:cb:a1:de:3c:d1:dd:aa:c8:ab:77:6f:ae:2b:5a:55:
         e5:68:a6:98:2f:fe:4a:2f:84:23:60:9c:2a:99:83:64:f6:96:
         b7:61:22:81:27:33:10:da:c1:cc:e9:0a:17:ac:f1:af:75:6f:
         a2:bf:ec:6b:17:34:9b:52:01:65:cc:98:a9:4a:58:08:45:5a:
         77:59:1a:f9:ee:d9:f2:ad:69:ff:7f:12:1d:50:b2:10:29:48:
         af:0b:6d:05:73:c1:ea:40:24:ca:5b:cc:1e:cf:03:08:22:74:
         5d:d8:cb:44:d7:08:1a:52:0d:4a:20:87:5a:23:69:dc:83:04:
         52:c1:17:79:e7:c2:a1:51:92:52:fb:0f:67:72:89:46:fe:97:
         d7:21:30:17:85:71:8f:e9:08:7f:20:28:74:fe:92:24:7e:df:
         e0:3e:3d:9a:49:dd:48:c9:52:fa:56:53:bb:54:75:42:79:17:
         6f:b2:df:f4:92:b3:fe:43:83:76:96:4b:78:ed:29:21:0c:b2:
         c3:54:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org