Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39372e302f32342d3234203d3e20323634313337.roa
File:                     3133382e39372e39372e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          +lZQmUPghV+/IBhd62G7YcI0aLGPa209nFmmJNrGP2I=
Subject key identifier:   F8:83:26:AD:64:7E:49:14:8E:41:4A:33:D2:3B:67:EC:22:4F:C6:72
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       42B2BCD2C564474903B6FECF79143BA99F3A6213
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39372e302f32342d3234203d3e20323634313337.roa
Signing time:             Thu 04 Apr 2024 08:08:36 +0000
ROA not before:           Thu 04 Apr 2024 08:03:36 +0000
ROA not after:            Thu 03 Apr 2025 08:08:36 +0000
asID:                     264137
IP address blocks:        138.97.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b2:bc:d2:c5:64:47:49:03:b6:fe:cf:79:14:3b:a9:9f:3a:62:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Apr  4 08:03:36 2024 GMT
            Not After : Apr  3 08:08:36 2025 GMT
        Subject: CN=F88326AD647E49148E414A33D23B67EC224FC672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:0a:bc:34:e0:35:99:c1:d7:c3:1a:de:64:
                    b2:99:dc:9f:1c:65:4a:42:9a:f9:47:c9:cb:38:3e:
                    e3:97:6b:63:63:d2:a2:12:b6:fc:41:65:64:07:5a:
                    16:9e:51:4f:bf:b9:93:19:f1:f5:e1:33:10:95:19:
                    ce:86:d9:e8:bf:48:cb:71:23:47:4d:b1:be:c0:63:
                    0f:57:47:d5:68:a1:3f:47:7a:1d:a0:7a:43:b7:ef:
                    95:c1:04:c5:af:76:8f:b9:1e:6b:6a:72:dd:34:bb:
                    fe:b1:19:9f:16:70:19:bd:9e:8a:78:10:55:b6:a7:
                    ca:4c:9f:7c:ac:38:2d:0f:e5:f7:df:99:58:62:71:
                    58:46:2c:dd:1e:91:6c:1b:7e:31:74:af:16:32:c6:
                    36:f8:a6:04:c4:f8:0a:fd:ad:73:f9:8c:8f:34:42:
                    1a:8b:5a:6f:5d:66:51:42:09:c1:ea:cc:65:40:19:
                    ce:97:94:43:5d:24:95:c0:06:ef:41:d6:19:e4:9e:
                    4f:24:d0:7d:49:7c:3b:a9:ff:dd:05:71:63:76:19:
                    cd:68:9c:7f:3e:86:67:ba:54:95:c3:24:a8:63:fd:
                    a6:27:03:12:4e:05:8b:48:31:e9:8b:af:f2:cc:7c:
                    33:2e:c4:66:a2:95:33:12:01:8b:d8:b2:43:bc:59:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:83:26:AD:64:7E:49:14:8E:41:4A:33:D2:3B:67:EC:22:4F:C6:72
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/3133382e39372e39372e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:49:86:26:a5:76:1a:d5:38:13:83:df:ea:f8:dd:c8:ed:8f:
         59:c1:58:80:5a:f1:06:fd:7c:a3:1f:c7:3a:4c:ed:2b:43:ea:
         2b:67:04:49:c8:49:21:70:7e:8c:a8:32:6b:52:ef:98:53:8f:
         1e:41:82:25:92:62:79:a9:e8:5c:4c:ee:cb:43:20:cc:cb:4f:
         99:db:14:2b:72:3d:1f:c7:f8:55:34:26:fe:6a:b1:8d:71:3f:
         ba:a0:c6:3e:8e:a1:4f:c1:28:a4:f6:92:a3:0f:ef:42:57:8e:
         a8:54:11:ed:da:f5:93:b9:e4:a7:21:9f:67:3b:ca:9f:2e:04:
         46:aa:91:d1:af:05:10:99:5e:bd:7f:e8:e9:bc:dc:9b:ce:2e:
         7a:4b:91:f5:09:33:64:20:28:86:49:06:87:94:4c:3b:49:73:
         ca:4d:0b:9c:65:db:fa:bb:af:33:32:be:cc:fa:e1:72:03:44:
         ef:06:bd:8e:a1:1c:8c:5a:1d:ea:3b:29:19:21:97:a2:02:33:
         78:fa:f9:e6:34:91:b5:1f:42:cb:24:4e:7b:07:7a:a6:ec:a4:
         0b:3f:eb:e0:27:0e:7e:f1:55:a8:5b:e8:07:ee:3b:64:36:7d:
         6b:49:eb:bd:ad:b6:a2:ad:ef:25:c2:27:0c:08:1a:5e:ac:5f:
         93:da:b8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org