Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa
File:                     3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa (raw, json)
Hash identifier:          VDgLzWuOkvCGxuLQJu+Oaocm0uNBR7MLzQnf9U+qMBk=
Subject key identifier:   6D:C2:D5:79:5D:7A:0C:FA:63:F0:60:35:DA:08:5C:D8:0F:1E:FA:A5
Certificate issuer:       /CN=3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A
Certificate serial:       5A370ECEC9AD4C6EEE828B82009E52391339F183
Authority key identifier: 3C:DA:75:DF:96:53:EF:9B:B2:72:2B:11:00:D0:D2:76:43:CB:DD:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa
Signing time:             Wed 04 Sep 2024 14:45:15 +0000
ROA not before:           Wed 04 Sep 2024 14:40:15 +0000
ROA not after:            Wed 03 Sep 2025 14:45:15 +0000
asID:                     264278
IP address blocks:        138.121.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.crl
                          rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:37:0e:ce:c9:ad:4c:6e:ee:82:8b:82:00:9e:52:39:13:39:f1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A
        Validity
            Not Before: Sep  4 14:40:15 2024 GMT
            Not After : Sep  3 14:45:15 2025 GMT
        Subject: CN=6DC2D5795D7A0CFA63F06035DA085CD80F1EFAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:4e:e1:17:6d:b0:5a:63:6e:c1:1d:e2:e9:
                    c4:8b:8f:8e:7e:09:d3:4c:dd:92:dd:39:d9:62:ae:
                    70:7a:8d:bf:2e:f2:fa:52:06:5e:fe:1b:5f:4d:6c:
                    62:20:7f:ad:cf:01:ce:81:5c:a1:3c:18:e9:38:03:
                    57:ca:3d:1c:19:88:b1:49:df:f1:01:c0:04:50:4e:
                    89:23:4e:1e:c2:7f:e9:14:7e:65:07:4c:04:4e:69:
                    53:f2:2c:b8:df:6c:84:6c:e1:b1:61:3d:29:19:f8:
                    fc:c6:71:35:c4:55:dc:9a:49:45:2f:96:23:d9:23:
                    f8:06:ac:4c:96:f0:94:8e:9a:e2:d9:76:a9:61:3a:
                    7f:48:cb:c6:e5:ed:64:d8:c2:75:88:1a:ba:0f:3a:
                    ee:19:24:d8:c5:9f:58:30:00:05:29:b5:70:24:e3:
                    71:67:26:30:73:ef:84:e2:30:c1:92:a5:c8:de:56:
                    49:76:c1:fd:e0:cb:d2:34:00:f4:6a:9a:e6:c5:5a:
                    d0:eb:4a:da:1e:6a:2e:57:2c:bc:ee:e8:4f:a0:b0:
                    91:5b:4c:90:80:e7:1f:a5:20:03:79:36:33:40:7e:
                    6d:ee:83:52:25:31:06:96:65:8d:ca:5c:81:32:df:
                    b3:18:17:88:05:3f:3a:60:8f:b7:c6:c7:0d:8f:08:
                    b0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C2:D5:79:5D:7A:0C:FA:63:F0:60:35:DA:08:5C:D8:0F:1E:FA:A5
            X509v3 Authority Key Identifier:
                keyid:3C:DA:75:DF:96:53:EF:9B:B2:72:2B:11:00:D0:D2:76:43:CB:DD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3133382e3132312e34382e302f32322d3234203d3e20323634323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:88:b7:2c:78:db:d7:0d:59:ff:9f:5c:88:2d:e1:dc:38:6a:
         5b:32:30:ab:40:ae:41:84:00:57:cb:04:b7:0d:a4:07:9d:26:
         e4:03:60:f0:c2:fd:92:57:c7:f6:70:8d:ae:74:d7:bd:c1:09:
         21:fe:ab:1d:4c:e6:ec:84:4e:31:cd:76:d7:6f:ec:1d:cb:07:
         43:4f:5a:cf:bc:ca:c2:8b:15:9d:ae:75:77:cd:a6:45:a0:a8:
         f0:d8:a4:87:49:09:15:f9:a4:b2:57:5f:2e:96:f9:80:ee:3a:
         8b:f9:51:0b:65:95:ae:32:31:7d:f3:bf:7f:16:31:2d:3d:b4:
         9d:98:8f:13:e7:65:4f:c6:c0:d3:62:ec:d1:58:e6:95:c5:19:
         b1:98:48:69:a9:8a:37:00:ef:cd:94:61:5d:c0:77:4b:b6:19:
         2d:62:a4:0d:60:64:1b:b2:87:c1:7f:74:9a:d7:4e:e6:28:72:
         4b:5a:11:81:ff:d0:f5:2c:75:f0:f9:66:aa:bc:0c:77:e9:62:
         60:dd:19:97:54:67:5d:f6:0d:40:38:12:7c:91:73:96:0e:cc:
         b3:13:08:c9:c6:82:58:a7:6d:36:a3:8f:07:55:05:b1:1f:06:
         3d:1b:07:6e:4c:6a:ea:9d:8d:88:90:92:9e:72:64:cb:48:fe:
         7a:15:3b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:58 2024 by rpki-client on console-ams.rpki-client.org