Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa
File:                     3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa (raw, json)
Hash identifier:          aXv7I27z4c1WPI9ChmFkZPpeQOOJp44dFQSYy+C4lb4=
Subject key identifier:   BF:A5:6F:8A:7E:9F:97:68:28:DA:00:37:2C:CD:A6:72:85:B6:1D:B3
Certificate issuer:       /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial:       57F226B18B4986E6D17DC173570555E930C9572B
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa
Signing time:             Thu 04 Apr 2024 18:08:17 +0000
ROA not before:           Thu 04 Apr 2024 18:03:17 +0000
ROA not after:            Thu 03 Apr 2025 18:08:17 +0000
asID:                     264197
IP address blocks:        138.97.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl
                          rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 12:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f2:26:b1:8b:49:86:e6:d1:7d:c1:73:57:05:55:e9:30:c9:57:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
        Validity
            Not Before: Apr  4 18:03:17 2024 GMT
            Not After : Apr  3 18:08:17 2025 GMT
        Subject: CN=BFA56F8A7E9F976828DA00372CCDA67285B61DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:96:3f:32:84:e1:3f:75:41:c2:82:73:71:91:
                    05:51:77:02:79:60:db:ba:21:01:3a:39:b9:b5:41:
                    02:f5:88:ad:29:e5:1d:ad:eb:15:a1:d2:36:6d:79:
                    12:75:08:94:1e:2b:7a:2d:bc:93:04:f5:dd:67:94:
                    fa:5a:9a:d6:ac:c4:9b:12:d5:49:34:94:81:e0:33:
                    e9:4d:7d:9c:99:ce:66:b8:1b:d9:54:b6:62:ae:b8:
                    28:52:fe:1c:1a:50:13:21:0c:c8:aa:57:83:b9:fa:
                    15:fb:7a:6e:0f:e4:fa:d6:c9:f1:1a:dd:2c:56:70:
                    77:7a:1a:cc:f2:47:f5:5b:3c:ba:9e:20:81:62:89:
                    ef:3c:1d:d4:26:ff:26:b0:b9:ef:6e:1d:07:12:13:
                    8d:ee:fa:4d:95:52:6f:37:08:d5:a8:ac:99:51:9b:
                    05:ab:18:31:82:aa:b6:b2:e6:21:f1:59:60:65:1e:
                    e2:ae:7d:e4:e5:07:13:84:ee:0b:98:7c:01:8e:14:
                    78:5d:71:76:89:d8:d5:46:6d:df:25:29:4b:48:4b:
                    c9:23:41:88:f7:36:b8:42:a5:23:62:55:f1:e5:d9:
                    42:55:54:59:32:9b:86:be:2f:ac:5a:07:9a:76:66:
                    85:20:08:f9:56:d7:e1:db:50:f9:4c:66:35:63:e1:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A5:6F:8A:7E:9F:97:68:28:DA:00:37:2C:CD:A6:72:85:B6:1D:B3
            X509v3 Authority Key Identifier:
                keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:ea:5a:2c:bf:75:21:1d:c3:d7:63:69:f1:71:6f:dc:bd:
         de:3c:51:c9:96:80:10:f5:d2:09:6c:e2:da:40:3b:78:26:58:
         0f:a5:24:8e:c8:f7:dc:c7:5e:5f:8b:1b:eb:a7:a5:03:36:72:
         41:3e:ec:16:8b:eb:9f:46:95:ea:cf:8b:a6:1c:83:f1:5a:82:
         60:88:d6:68:5e:68:c8:a6:37:ba:71:8c:de:03:e3:bc:ad:f0:
         ed:22:7b:1b:cf:ad:a8:67:21:47:c5:6b:c1:e6:0b:0e:ec:72:
         9c:23:ff:67:eb:09:a4:f0:c2:5c:3a:21:6d:38:4a:0a:fe:fd:
         a8:3b:28:6d:b3:1d:57:1e:47:f5:90:7e:8c:88:63:0e:98:48:
         17:7b:04:6e:fb:c4:db:03:be:59:ec:c3:8d:6b:aa:49:2f:e1:
         42:09:8d:80:df:6a:1f:cc:78:0f:f0:c8:72:fb:30:f6:d1:97:
         a6:13:5c:b8:f0:1e:da:61:35:9d:b8:f4:f3:58:ba:4d:6b:73:
         08:81:bb:e7:72:64:11:40:3c:de:31:67:7b:73:80:96:51:49:
         2f:37:8b:69:0e:93:79:6f:1b:be:89:6e:20:4c:90:ed:60:64:
         ca:5f:00:8a:c0:b9:a4:54:8d:b4:00:7a:fb:a4:e0:be:f4:59:
         cb:64:7e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:17 2024 by rpki-client on console-ams.rpki-client.org