Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32322d3234203d3e20323633303836.roa
File:                     3133382e39392e34302e302f32322d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          UdkFxQj9p6CyFEon8jZU/HUcokk1So9oR7adqbbUwBs=
Subject key identifier:   CB:E2:ED:A2:A4:3F:72:71:EF:EB:C5:79:B3:70:06:F3:B1:97:AD:7E
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       7DF289A748BCA28C9308812A7CB3483D251BA1F7
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32322d3234203d3e20323633303836.roa
Signing time:             Thu 19 Sep 2024 17:44:35 +0000
ROA not before:           Thu 19 Sep 2024 17:39:35 +0000
ROA not after:            Thu 18 Sep 2025 17:44:35 +0000
asID:                     263086
IP address blocks:        138.99.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl
                          rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f2:89:a7:48:bc:a2:8c:93:08:81:2a:7c:b3:48:3d:25:1b:a1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: Sep 19 17:39:35 2024 GMT
            Not After : Sep 18 17:44:35 2025 GMT
        Subject: CN=CBE2EDA2A43F7271EFEBC579B37006F3B197AD7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:92:b9:9e:88:d3:fe:a1:63:c1:d6:86:16:
                    9c:8a:ce:d3:15:24:26:69:5a:3f:d3:c7:56:a3:f5:
                    b8:34:14:c8:59:fd:ff:a5:7e:2c:85:98:8b:ed:a4:
                    f9:58:11:b9:75:cb:61:61:78:41:e2:18:d8:1c:84:
                    63:66:af:d1:f4:1f:90:fe:9d:3a:29:36:ec:84:72:
                    18:65:b1:98:a5:26:14:ce:7e:4e:d5:8c:23:a9:40:
                    a2:98:9b:52:56:62:b1:58:61:1f:a4:1d:51:fe:ee:
                    ed:6c:1f:2b:73:b3:1a:2c:5e:09:64:72:10:eb:5f:
                    9f:c4:fc:4a:25:68:80:c2:88:8a:c7:04:3a:ed:13:
                    ff:11:32:07:47:e6:ef:cd:4e:4e:f8:fc:7d:10:04:
                    7a:30:e0:e3:e1:1b:59:f0:65:c9:c4:0b:89:7a:d3:
                    0c:ef:74:8a:ce:24:67:2a:2e:83:c5:76:69:b3:63:
                    90:7f:04:52:5c:2a:da:f9:37:85:1d:3f:bc:79:ea:
                    15:0f:0f:4a:5d:fe:4b:07:1a:b9:5e:f9:8a:37:ef:
                    36:c5:89:ba:da:09:73:f4:26:a9:17:a7:d1:16:aa:
                    22:47:35:ae:23:8a:bf:26:a2:7f:ef:95:a4:27:5b:
                    bb:e7:71:9c:c8:fb:9d:14:09:ca:bf:d8:76:20:7d:
                    32:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E2:ED:A2:A4:3F:72:71:EF:EB:C5:79:B3:70:06:F3:B1:97:AD:7E
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3133382e39392e34302e302f32322d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:24:a0:5d:94:52:6e:d0:e6:44:09:5c:ed:ff:d8:61:e9:29:
         56:4f:b5:bb:7d:31:37:36:df:0e:52:c3:78:c0:cf:40:77:96:
         3b:fc:3a:5f:c3:51:55:87:d5:f2:00:1e:cd:57:4c:80:8a:58:
         cc:9f:8b:33:c3:32:33:93:6d:f5:62:68:80:8d:4c:39:93:ab:
         08:4a:5f:ca:cf:b5:b9:2b:42:e1:84:16:2d:97:cc:e4:ec:b4:
         31:1d:be:63:f3:cb:6f:32:83:f0:2f:8c:95:5a:8f:fa:dd:bb:
         a7:99:a4:24:e9:0c:ab:f7:8b:5a:09:43:cd:d6:6c:58:76:e7:
         f4:a3:5c:28:a2:ca:fe:4a:45:83:51:d3:cd:2e:22:87:7e:47:
         78:3e:55:78:5b:97:a7:f6:d1:bb:c8:23:a5:96:14:58:3f:d6:
         2d:ca:30:37:85:ec:ca:fd:17:71:98:ff:d6:f9:64:19:6c:18:
         7f:7e:d3:08:81:23:62:7a:dc:43:81:35:a4:cb:11:a2:b3:1d:
         6d:8b:87:a8:16:45:a0:65:49:ad:04:05:70:ff:29:f1:db:52:
         cb:01:ad:4c:83:6f:73:1c:5e:a4:3b:97:1f:f0:33:ca:e8:1c:
         1f:a1:f9:5a:95:8b:45:86:99:ae:53:41:8f:9c:8e:a5:a5:ed:
         87:3a:62:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:11 2024 by rpki-client on console-ams.rpki-client.org