Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31382e302f32342d3234203d3e20323733333039.roa
File:                     3133382e3132322e31382e302f32342d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          69AS2GNEAk9x7b7COY09wkCY+KLh8nZiKdOgmA4DvPU=
Subject key identifier:   73:54:4F:D7:D7:CB:40:F1:E8:08:49:0F:85:D1:2B:1E:DA:1E:AD:67
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       7C2DFCD18D0C45B2EACDC32A9A72EF2146AE3A6B
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31382e302f32342d3234203d3e20323733333039.roa
Signing time:             Wed 08 May 2024 15:02:45 +0000
ROA not before:           Wed 08 May 2024 14:57:45 +0000
ROA not after:            Wed 07 May 2025 15:02:45 +0000
asID:                     273309
IP address blocks:        138.122.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2d:fc:d1:8d:0c:45:b2:ea:cd:c3:2a:9a:72:ef:21:46:ae:3a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  8 14:57:45 2024 GMT
            Not After : May  7 15:02:45 2025 GMT
        Subject: CN=73544FD7D7CB40F1E808490F85D12B1EDA1EAD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:fe:9b:d1:c2:85:b6:6b:b3:ed:40:27:fb:
                    de:b2:75:64:4b:4b:79:d8:85:ff:53:3a:20:95:75:
                    0d:c3:2f:29:e5:e2:6e:6a:b0:4e:ba:dd:46:d7:99:
                    c5:3c:d4:67:7e:c3:11:93:a0:89:a8:f0:88:ba:99:
                    dd:38:9e:01:0c:a3:e3:29:ab:c8:e8:13:82:e1:4b:
                    f6:c7:8d:54:68:5b:82:08:f9:1f:49:9c:8d:c7:a2:
                    18:6d:71:3e:4b:14:6e:da:e9:3b:6f:b4:66:36:52:
                    8e:9e:d4:85:fc:6d:51:47:e7:d9:d8:af:18:c9:14:
                    92:35:67:2f:c3:a8:fb:02:74:e5:a2:49:9c:ed:75:
                    d4:69:22:f4:9b:bd:95:49:fa:08:08:78:ae:10:89:
                    49:be:6a:06:fe:4b:ee:f6:32:6a:f6:26:fc:42:75:
                    dd:24:54:bf:02:59:cd:52:3e:43:9b:b5:26:98:d2:
                    c3:c6:48:02:95:25:ec:4b:63:67:18:7b:73:ff:d5:
                    8f:d4:8f:1d:cd:d6:fb:81:34:c3:95:e9:60:d7:ba:
                    06:9f:b0:11:de:a5:ad:67:16:d8:ca:4e:d7:78:de:
                    46:00:b5:6d:9d:20:bf:b8:59:be:3b:6f:d8:ad:a8:
                    f4:e1:fa:df:b5:2f:05:02:b7:ae:65:dd:83:a4:3e:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:54:4F:D7:D7:CB:40:F1:E8:08:49:0F:85:D1:2B:1E:DA:1E:AD:67
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3132322e31382e302f32342d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:82:da:11:65:c4:e2:b6:28:9e:1a:3c:29:1e:cb:3b:39:d0:
         6d:52:40:49:b2:63:f1:fa:03:2a:40:37:e3:60:76:85:e3:10:
         12:61:ae:7b:94:ea:c2:fe:76:90:ea:15:c2:60:6b:ec:2e:75:
         92:7a:fb:84:3a:14:d7:28:9e:dd:80:7c:5c:34:16:84:65:03:
         2c:7c:46:99:e3:cb:cb:99:1e:81:08:c4:c1:0a:9b:c9:9f:5b:
         fd:d5:08:a1:34:da:97:35:ce:77:ae:75:14:05:b7:a3:47:35:
         3e:b8:fe:20:b8:25:45:33:45:c0:0a:60:6d:0d:55:f3:00:00:
         7c:e2:2b:32:0d:ac:ef:de:20:dc:c3:a3:47:95:8a:f2:4c:4d:
         a0:d5:c1:75:58:06:96:cb:99:82:4e:97:73:71:96:63:e3:4a:
         d0:11:2d:03:63:25:93:94:9d:20:aa:9d:e8:1a:16:6f:c3:6f:
         8d:ed:02:87:4d:ae:94:ff:3b:54:db:3a:8c:f4:97:cd:0c:6f:
         d3:ac:fd:9a:8a:09:61:01:17:c7:b3:4f:3a:3a:2c:d5:fe:b6:
         b5:02:f2:69:c3:3e:5b:d6:63:1a:6c:3b:57:55:e7:57:e5:00:
         71:6e:ee:c2:fb:1b:35:b3:5d:b4:17:a1:88:4b:76:86:e1:8e:
         68:4e:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:04 2024 by rpki-client on console-fra.rpki-client.org