Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa
File:                     3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (raw, json)
Hash identifier:          3cJZ0tzkyNmMYGGNHtnqwK8rd8v6qOL0heL2UhlNYTQ=
Subject key identifier:   7C:4D:56:A0:22:52:76:49:E0:92:67:1A:5F:DA:C1:34:45:14:5E:57
Certificate issuer:       /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Certificate serial:       6234E7E47F9A720646D644F8FA610A71FB500BF2
Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa
Signing time:             Thu 04 Apr 2024 15:27:02 +0000
ROA not before:           Thu 04 Apr 2024 15:22:02 +0000
ROA not after:            Thu 03 Apr 2025 15:27:02 +0000
asID:                     264233
IP address blocks:        138.117.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
                          rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:34:e7:e4:7f:9a:72:06:46:d6:44:f8:fa:61:0a:71:fb:50:0b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
        Validity
            Not Before: Apr  4 15:22:02 2024 GMT
            Not After : Apr  3 15:27:02 2025 GMT
        Subject: CN=7C4D56A022527649E092671A5FDAC13445145E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:92:b3:59:a6:15:e0:7b:a6:4a:e3:38:c6:
                    6f:e1:71:0e:ef:76:d5:66:24:ed:9d:a2:9a:42:9e:
                    62:1e:55:e4:b3:f7:00:e1:ab:00:40:40:5c:ce:9b:
                    cf:4e:60:d9:de:94:85:f1:4a:7c:ab:52:a2:a0:7d:
                    21:19:95:ca:30:b1:7c:01:72:b6:9b:7b:12:54:24:
                    b9:51:aa:8a:eb:95:e2:e2:16:1d:ca:0c:74:10:fc:
                    b0:ba:ca:a7:b4:03:cb:db:17:9a:e5:81:32:5c:6f:
                    48:23:f1:54:41:1e:c1:63:57:1b:91:ed:8e:75:d6:
                    09:d3:14:17:f7:f6:28:80:84:28:7d:b6:5c:bd:12:
                    95:a6:ec:51:0c:cd:46:71:b5:e0:82:cf:d1:16:d4:
                    da:d5:8b:36:c6:cd:a2:58:3f:24:61:20:0a:f0:12:
                    cf:7a:1f:09:a6:bd:2e:ca:2a:4d:fb:65:12:85:94:
                    6b:7d:1a:c1:a6:43:93:0e:e1:c6:72:e4:d8:c5:63:
                    a9:60:3b:1a:17:bd:09:4d:7a:6e:b0:dd:b1:f4:bb:
                    08:19:64:a4:45:03:e3:5e:89:96:ec:27:c6:d8:c4:
                    c4:cd:fb:ca:18:88:ff:61:d6:e9:8f:2f:de:2a:f1:
                    61:fd:b8:a9:04:53:ca:31:16:dc:ee:f7:65:87:91:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4D:56:A0:22:52:76:49:E0:92:67:1A:5F:DA:C1:34:45:14:5E:57
            X509v3 Authority Key Identifier:
                keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:9b:38:b8:50:5e:f1:da:ab:95:00:89:81:bb:8b:7b:1d:22:
         78:89:68:8d:5a:1b:4b:53:d7:86:04:32:05:e6:a9:3d:24:bd:
         e9:60:e8:ff:ce:ab:02:1f:40:06:e1:dd:b1:fa:fa:17:df:95:
         bf:a9:ff:f1:3b:e2:87:85:bd:4b:da:99:be:c1:52:59:af:a0:
         f5:c8:5e:34:49:0a:b4:5e:24:7c:3c:d0:95:19:80:08:85:30:
         01:d2:b5:bd:6e:71:65:6d:30:cd:5d:b9:e2:e7:3d:b0:bb:64:
         c0:cb:38:79:7e:6b:44:e7:a4:37:6d:c7:2c:e7:bb:60:76:39:
         ff:6f:15:f2:d6:19:e7:01:e5:64:3f:23:b6:3d:38:dc:cd:2b:
         08:32:5f:53:54:85:98:44:f9:2c:9a:46:b6:af:46:5a:66:7a:
         1d:25:00:f7:d5:62:c6:7e:db:ca:b1:63:12:f1:6e:f8:9a:68:
         a7:c6:44:48:5d:4c:41:83:0c:d0:6e:85:73:b6:83:bf:71:4e:
         16:ff:27:82:f1:6e:ff:6c:2a:f0:76:28:55:80:e4:7f:0d:d7:
         8c:9c:0b:8e:f3:db:bb:b0:90:d7:7b:f9:8a:5a:41:f8:e0:d9:
         b4:49:7f:41:77:df:3e:87:d0:f9:97:6e:fa:55:7e:5e:89:b8:
         e8:ca:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:29 2024 by rpki-client on console-fra.rpki-client.org