Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137322e302f32332d3234203d3e203237373135.roa
File:                     3133382e3132322e3137322e302f32332d3234203d3e203237373135.roa (raw, json)
Hash identifier:          KneU232SbDK0JIyQKvnweQ1242a3diO4tzBElGNkTNM=
Subject key identifier:   96:30:46:B9:C7:4D:CD:24:8A:E9:E3:69:FC:2F:46:46:98:D7:80:8F
Certificate issuer:       /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Certificate serial:       5B0160526DDA9309D7C27518442EA0FA8FEEFCF9
Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137322e302f32332d3234203d3e203237373135.roa
Signing time:             Wed 29 May 2024 14:11:08 +0000
ROA not before:           Wed 29 May 2024 14:06:08 +0000
ROA not after:            Wed 28 May 2025 14:11:08 +0000
asID:                     27715
IP address blocks:        138.122.172.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl
                          rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:01:60:52:6d:da:93:09:d7:c2:75:18:44:2e:a0:fa:8f:ee:fc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
        Validity
            Not Before: May 29 14:06:08 2024 GMT
            Not After : May 28 14:11:08 2025 GMT
        Subject: CN=963046B9C74DCD248AE9E369FC2F464698D7808F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6f:a4:73:b1:91:a1:9a:e6:eb:2a:2e:4a:a6:
                    89:73:9a:6a:ef:46:24:04:67:69:f8:fc:bc:3d:a9:
                    34:54:08:05:2f:31:24:3d:f5:f7:6e:8e:1e:1d:82:
                    7b:cb:12:0d:4a:d4:48:50:30:0a:d2:2f:c7:9f:19:
                    8e:9a:81:c4:ca:5e:84:1d:57:84:01:d6:86:52:b0:
                    83:c4:1b:94:87:70:6e:07:5b:2b:a4:06:3f:34:3a:
                    1e:09:10:15:72:f1:6e:77:8c:f7:50:41:05:d1:68:
                    b7:73:c6:52:7d:94:9e:3b:3d:e5:80:89:60:fd:6a:
                    dd:b0:a0:c6:39:63:30:f3:c9:86:0f:d2:58:b2:21:
                    04:57:1f:2b:f9:95:a9:0b:5b:26:22:a6:bf:93:56:
                    dd:e5:62:6a:75:93:c5:a9:97:be:3d:f5:45:3f:1d:
                    86:d3:f9:d5:c0:4b:32:47:f0:f9:f3:ad:48:3d:66:
                    6b:2b:fc:ec:ea:78:ef:3b:c6:0a:3a:a9:4a:7c:c0:
                    99:2c:60:b8:b5:5a:d8:6d:6f:c4:a4:a1:d0:ba:10:
                    bc:c9:ea:66:61:bc:24:d5:61:2b:05:c4:48:cb:07:
                    02:3f:2f:d2:76:a4:e8:5f:f9:7a:bb:be:f1:4a:ae:
                    20:bf:74:83:67:36:17:a7:58:7e:41:cf:8d:7e:c0:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:30:46:B9:C7:4D:CD:24:8A:E9:E3:69:FC:2F:46:46:98:D7:80:8F
            X509v3 Authority Key Identifier:
                keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137322e302f32332d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:6a:cc:0a:32:4e:80:2c:a2:32:42:1c:c5:60:bc:15:ca:04:
         b3:5d:8f:23:21:05:fb:f1:49:27:5f:a8:18:dc:76:c5:6d:8c:
         88:10:c7:ba:87:90:f9:ba:1e:e1:7a:1d:e0:0d:fa:e8:09:a2:
         41:26:31:20:a9:24:51:d2:f6:9f:cb:aa:7b:cf:a1:9a:56:d3:
         9e:4f:d0:c7:04:78:f0:b7:6c:87:c1:f4:73:c5:0b:32:2c:4c:
         c4:66:7c:be:fb:4a:bb:09:90:b3:76:18:c8:dd:8b:4c:fe:4d:
         e2:b0:35:ed:eb:55:f8:5c:bc:23:4b:50:6c:6f:31:67:9a:42:
         76:eb:3e:62:c6:40:3c:c3:d3:59:06:86:5a:bc:4c:a6:9d:53:
         20:2c:f0:1d:38:7d:1f:60:84:4c:1c:33:45:4a:5c:9b:3d:0b:
         88:a2:05:b1:f2:9b:1e:75:3f:ba:e9:58:74:73:77:f7:50:eb:
         4c:3b:f9:64:8b:60:8b:c7:16:64:09:74:7e:6a:6d:16:86:7c:
         b0:f3:a0:9f:00:ed:ba:e2:d0:34:fd:fe:14:85:e5:17:64:43:
         7e:3d:48:98:25:dd:2f:0e:9d:36:75:95:f5:d9:c2:6b:aa:f2:
         1b:69:76:f7:20:80:44:1e:c7:e9:4e:e8:78:24:58:ab:1a:ca:
         1e:a5:ec:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWwFgUm3akwnXwnUYRC6g+o/u/PkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVFODBFNTBFMDNERjAxQzE1NEJEMkE0RDFEMkYzQkQ2
N0Y3MUYzNjAeFw0yNDA1MjkxNDA2MDhaFw0yNTA1MjgxNDExMDhaMDMxMTAvBgNV
BAMTKDk2MzA0NkI5Qzc0RENEMjQ4QUU5RTM2OUZDMkY0NjQ2OThENzgwOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlb6RzsZGhmubrKi5Kpolzmmrv
RiQEZ2n4/Lw9qTRUCAUvMSQ99fdujh4dgnvLEg1K1EhQMArSL8efGY6agcTKXoQd
V4QB1oZSsIPEG5SHcG4HWyukBj80Oh4JEBVy8W53jPdQQQXRaLdzxlJ9lJ47PeWA
iWD9at2woMY5YzDzyYYP0liyIQRXHyv5lakLWyYipr+TVt3lYmp1k8Wpl7499UU/
HYbT+dXASzJH8PnzrUg9Zmsr/OzqeO87xgo6qUp8wJksYLi1Wthtb8SkodC6ELzJ
6mZhvCTVYSsFxEjLBwI/L9J2pOhf+Xq7vvFKriC/dINnNhenWH5Bz41+wApnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUljBGucdNzSSK6eNp/C9GRpjXgI8wHwYDVR0j
BBgwFoAU3ugOUOA98BwVS9Kk0dLzvWf3HzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGg3bXdKTEpCQjRBejRmanpXMnRXUWt3dlhrNXNOcDRqd0R5TlRZckgz
U3IvMS9ERUU4MEU1MEUwM0RGMDFDMTU0QkQyQTREMUQyRjNCRDY3RjcxRjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFRTgwRTUwRTAzREYwMUMx
NTRCRDJBNEQxRDJGM0JENjdGNzFGMzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoN213SkxKQkI0QXo0Zmp6VzJ0V1Frd3ZYazVzTnA0andEeU5UWXJIM1NyLzEv
MzEzMzM4MmUzMTMyMzIyZTMxMzczMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzczNzMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKeqwwDQYJKoZIhvcNAQELBQADggEBAE1qzAoy
ToAsojJCHMVgvBXKBLNdjyMhBfvxSSdfqBjcdsVtjIgQx7qHkPm6HuF6HeAN+ugJ
okEmMSCpJFHS9p/LqnvPoZpW055P0McEePC3bIfB9HPFCzIsTMRmfL77SrsJkLN2
GMjdi0z+TeKwNe3rVfhcvCNLUGxvMWeaQnbrPmLGQDzD01kGhlq8TKadUyAs8B04
fR9ghEwcM0VKXJs9C4iiBbHymx51P7rpWHRzd/dQ60w7+WSLYIvHFmQJdH5qbRaG
fLDzoJ8A7bri0DT9/hSF5RdkQ349SJgl3S8OnTZ1lfXZwmuq8htpdvcggEQex+lO
6HgkWKsayh6l7Eg=
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:26 2024 by rpki-client on console-fra.rpki-client.org