Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3234203d3e20323733333039.roa
File:                     3133382e3231392e34382e302f32322d3234203d3e20323733333039.roa (raw, json)
Hash identifier:          7JNJgmfrrewvfq3slQSzPb7UiebYM3vjeY0g1cyXoik=
Subject key identifier:   99:71:95:75:59:F5:CA:5E:C7:22:60:6B:0D:86:12:6D:73:55:6E:21
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       0EF09174547D002D94AA9BC46F92A7487597EE89
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3234203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 14:49:14 +0000
ROA not before:           Thu 09 May 2024 14:44:14 +0000
ROA not after:            Thu 08 May 2025 14:49:14 +0000
asID:                     273309
IP address blocks:        138.219.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f0:91:74:54:7d:00:2d:94:aa:9b:c4:6f:92:a7:48:75:97:ee:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 14:44:14 2024 GMT
            Not After : May  8 14:49:14 2025 GMT
        Subject: CN=9971957559F5CA5EC722606B0D86126D73556E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:e2:6c:78:36:cf:d0:e2:5e:97:fe:9c:0c:
                    59:ea:60:ed:51:30:93:63:cf:23:54:30:c4:ec:2a:
                    e8:e6:72:ec:78:5d:b2:73:8b:30:1c:18:5f:b6:5d:
                    76:b2:a6:91:c2:92:36:f2:2c:cb:90:7f:60:43:6f:
                    00:34:d2:f7:9a:7f:7d:bb:5d:9e:22:2a:93:3a:74:
                    7c:2f:7f:1c:c6:ef:76:ca:b1:c1:c6:a7:cc:22:b2:
                    7e:bf:17:a9:b1:54:5d:ed:a1:d2:33:a2:96:05:79:
                    4f:4b:95:e7:92:19:4a:db:c2:35:dd:34:b3:ee:ec:
                    72:9a:9e:6b:7f:c7:58:a8:61:f5:57:05:de:6e:a5:
                    df:1f:ee:3e:94:5d:d0:9e:8c:41:69:33:62:f0:6c:
                    a3:0a:18:5d:a6:00:5d:c9:b6:12:fc:17:bd:e8:96:
                    18:da:58:b7:ef:14:24:4c:9c:41:de:63:c9:1d:53:
                    88:18:e7:f1:a1:14:77:34:14:ca:2b:45:b0:8b:bc:
                    27:fa:52:ac:a0:ab:0e:09:3b:60:ed:f9:38:c7:d6:
                    29:03:b2:1f:b4:f9:6b:a0:34:47:c3:4e:b0:72:65:
                    11:4c:c6:d2:a4:23:6a:77:29:1e:6c:09:ed:48:f4:
                    c6:89:d7:6d:81:a5:37:82:ef:09:a1:6f:79:e4:9c:
                    8f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:71:95:75:59:F5:CA:5E:C7:22:60:6B:0D:86:12:6D:73:55:6E:21
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3133382e3231392e34382e302f32322d3234203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:18:ce:e8:6e:97:bd:8d:42:c1:68:45:4e:b6:2a:26:a4:de:
         2b:72:5c:cd:d1:99:6b:bd:12:53:dd:1c:54:a6:10:0d:07:00:
         37:b5:7f:1a:37:9c:9f:4f:d4:5e:20:b9:9b:37:e4:af:74:57:
         60:ab:ff:da:8c:47:0e:a5:b3:8a:23:0c:f6:64:53:f9:44:08:
         8a:47:f5:1e:c8:50:e9:80:fd:ae:39:fe:b3:dd:cf:96:b9:86:
         25:45:ac:e7:50:69:15:fd:50:03:ac:6f:07:22:bd:63:1e:10:
         c3:48:d1:ca:67:cc:9e:ca:4e:45:0b:24:72:ec:ca:88:d0:04:
         48:a4:8b:5c:fc:6d:62:27:b9:fa:86:c9:67:93:f0:57:ae:b3:
         41:98:fc:09:3c:f8:5d:c0:ae:fd:aa:b7:d8:34:8a:0c:9b:5b:
         9a:6d:f1:d7:16:c4:77:a8:c9:c1:46:31:a3:e6:52:02:05:cd:
         b4:d5:8f:8a:6a:9f:ea:15:c8:a5:b6:48:86:27:76:3c:ab:dd:
         39:c8:f1:c8:cd:7d:72:51:c8:f1:ee:f0:b8:68:06:ca:0e:6b:
         13:20:99:ff:25:ae:e4:4f:96:c7:c9:17:f3:de:2a:0a:de:1b:
         3c:dd:16:43:04:94:68:28:e0:22:a1:ee:3d:97:1f:3d:c0:8f:
         50:a7:ae:11
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDvCRdFR9AC2UqpvEb5KnSHWX7okwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDBBNTRBRUE4ODYyQzIzRTU4MzhCQTI4RTJFQzYz
MTdEMTExNjAeFw0yNDA1MDkxNDQ0MTRaFw0yNTA1MDgxNDQ5MTRaMDMxMTAvBgNV
BAMTKDk5NzE5NTc1NTlGNUNBNUVDNzIyNjA2QjBEODYxMjZENzM1NTZFMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyOJseDbP0OJel/6cDFnqYO1R
MJNjzyNUMMTsKujmcux4XbJzizAcGF+2XXayppHCkjbyLMuQf2BDbwA00veaf327
XZ4iKpM6dHwvfxzG73bKscHGp8wisn6/F6mxVF3todIzopYFeU9LleeSGUrbwjXd
NLPu7HKanmt/x1ioYfVXBd5upd8f7j6UXdCejEFpM2LwbKMKGF2mAF3JthL8F73o
lhjaWLfvFCRMnEHeY8kdU4gY5/GhFHc0FMorRbCLvCf6Uqygqw4JO2Dt+TjH1ikD
sh+0+WugNEfDTrByZRFMxtKkI2p3KR5sCe1I9MaJ122BpTeC7wmhb3nknI95AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmXGVdVn1yl7HImBrDYYSbXNVbiEwHwYDVR0j
BBgwFoAUEcQKVK6ohiwj5YOLoo4uxjF9ERYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8xMUM0MEE1NEFFQTg4NjJDMjNFNTgzOEJBMjhFMkVDNjMxN0QxMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQzQwQTU0QUVBODg2MkMy
M0U1ODM4QkEyOEUyRUM2MzE3RDExMTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzEzMzM4MmUzMjMxMzkyZTM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzMzMzMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKK2zAwDQYJKoZIhvcNAQELBQADggEBAGEYzuhu
l72NQsFoRU62Kiak3ityXM3RmWu9ElPdHFSmEA0HADe1fxo3nJ9P1F4guZs35K90
V2Cr/9qMRw6ls4ojDPZkU/lECIpH9R7IUOmA/a45/rPdz5a5hiVFrOdQaRX9UAOs
bwcivWMeEMNI0cpnzJ7KTkULJHLsyojQBEiki1z8bWInufqGyWeT8Feus0GY/Ak8
+F3Arv2qt9g0igybW5pt8dcWxHeoycFGMaPmUgIFzbTVj4pqn+oVyKW2SIYndjyr
3TnI8cjNfXJRyPHu8LhoBsoOaxMgmf8lruRPlsfJF/PeKgreGzzdFkMElGgo4CKh
7j2XHz3Aj1CnrhE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:04 2024 by rpki-client on console-fra.rpki-client.org