Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa
File:                     3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa (raw, json)
Hash identifier:          Ht9PbE59qPu22YszIDr+fRxRic1GdObLMUOchv8Gr5s=
Subject key identifier:   54:F8:F2:72:53:D8:7C:15:67:61:8C:40:F4:EE:60:A3:20:A5:CA:3F
Certificate issuer:       /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Certificate serial:       14A8FFEE5800B1E07BD408225444963D02C70A70
Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa
Signing time:             Thu 04 Apr 2024 04:33:14 +0000
ROA not before:           Thu 04 Apr 2024 04:28:14 +0000
ROA not after:            Thu 03 Apr 2025 04:33:14 +0000
asID:                     262518
IP address blocks:        138.122.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl
                          rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a8:ff:ee:58:00:b1:e0:7b:d4:08:22:54:44:96:3d:02:c7:0a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
        Validity
            Not Before: Apr  4 04:28:14 2024 GMT
            Not After : Apr  3 04:33:14 2025 GMT
        Subject: CN=54F8F27253D87C1567618C40F4EE60A320A5CA3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:4c:13:c9:e2:9c:af:68:e2:2c:75:39:fc:
                    99:97:d4:a2:ef:26:fe:fb:04:62:a5:53:55:4b:87:
                    5d:31:ac:6b:39:a1:2a:52:6b:b1:d7:de:12:d0:3a:
                    e6:bf:cd:92:c1:1e:de:3f:84:b4:2e:76:22:d3:48:
                    7c:d8:c4:08:ef:37:6d:b5:87:fc:b5:92:5f:65:ec:
                    a6:1c:c8:9f:40:14:55:d4:88:09:f9:97:37:a3:0a:
                    74:29:17:94:fc:c6:12:ec:89:cc:91:a8:f9:68:8a:
                    29:0c:a9:19:22:97:8a:b5:0e:20:d6:3f:13:ce:3a:
                    70:06:74:bb:b3:07:47:dd:a7:77:01:58:04:d5:ec:
                    d6:b1:6a:f4:39:36:a5:5a:bb:2a:6f:bc:83:f6:cc:
                    a2:13:7a:de:37:1f:bf:a6:82:f2:66:2a:a7:a1:8f:
                    80:2d:9f:ec:8c:96:67:1c:69:e5:72:ef:fe:01:29:
                    b9:dc:90:5b:ec:73:53:73:7a:a2:f6:25:94:6a:7e:
                    cb:74:91:f3:28:3c:d3:38:82:68:4c:39:57:9a:e5:
                    63:9b:09:c7:9a:0b:c0:e8:d6:6b:4a:f6:88:99:20:
                    96:73:8b:3b:ec:aa:17:16:16:b7:be:6b:0d:d9:e9:
                    8f:cf:f6:cd:d6:d7:3d:12:17:fa:77:55:46:a9:e4:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F8:F2:72:53:D8:7C:15:67:61:8C:40:F4:EE:60:A3:20:A5:CA:3F
            X509v3 Authority Key Identifier:
                keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32332d3233203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:c5:3b:6e:8e:c8:db:77:08:12:f7:9e:21:f7:b6:47:48:9a:
         fd:1a:15:9b:ae:c8:4a:18:15:21:38:2a:3e:5b:d0:e4:42:33:
         9e:29:77:86:ec:23:58:e8:db:15:dc:a0:c2:9c:fd:77:82:2b:
         a3:47:a8:1b:f2:76:90:2e:ff:ab:73:d5:49:6e:f7:29:c8:46:
         19:11:db:65:6a:fc:f2:bf:a0:88:77:d1:60:9c:3b:6c:e0:09:
         e9:b3:a8:c5:81:71:fe:a7:15:b3:87:2c:3e:c8:56:de:e2:98:
         f3:97:ba:f6:d1:d4:ee:bf:6b:05:6f:c6:81:3a:d0:bd:10:e4:
         e3:fd:97:eb:38:d0:e0:2b:66:b9:eb:8a:1f:ed:3c:c6:fa:d0:
         aa:ff:99:3a:7f:29:86:49:98:d0:d4:60:c2:e8:19:7f:6e:23:
         15:25:3f:9b:cf:a0:59:b1:2b:07:02:5d:ff:09:ca:6c:a2:09:
         c3:0b:9e:1f:d5:6d:17:86:b3:d3:59:21:27:61:05:6d:cd:93:
         c4:e1:1d:a5:fe:96:1e:72:90:15:5d:9e:08:37:87:d8:cf:7d:
         3e:d9:e1:79:e6:21:11:88:df:33:25:0f:b1:e7:c5:6c:81:54:
         5c:15:ef:12:1a:c8:f2:46:03:c5:bc:d1:df:0d:69:c8:65:5d:
         09:2d:18:5e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFKj/7lgAseB71AgiVESWPQLHCnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVFODBFNTBFMDNERjAxQzE1NEJEMkE0RDFEMkYzQkQ2
N0Y3MUYzNjAeFw0yNDA0MDQwNDI4MTRaFw0yNTA0MDMwNDMzMTRaMDMxMTAvBgNV
BAMTKDU0RjhGMjcyNTNEODdDMTU2NzYxOEM0MEY0RUU2MEEzMjBBNUNBM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTbkwTyeKcr2jiLHU5/JmX1KLv
Jv77BGKlU1VLh10xrGs5oSpSa7HX3hLQOua/zZLBHt4/hLQudiLTSHzYxAjvN221
h/y1kl9l7KYcyJ9AFFXUiAn5lzejCnQpF5T8xhLsicyRqPloiikMqRkil4q1DiDW
PxPOOnAGdLuzB0fdp3cBWATV7NaxavQ5NqVauypvvIP2zKITet43H7+mgvJmKqeh
j4Atn+yMlmccaeVy7/4BKbnckFvsc1NzeqL2JZRqfst0kfMoPNM4gmhMOVea5WOb
CceaC8Do1mtK9oiZIJZzizvsqhcWFre+aw3Z6Y/P9s3W1z0SF/p3VUap5BxxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVPjyclPYfBVnYYxA9O5goyClyj8wHwYDVR0j
BBgwFoAU3ugOUOA98BwVS9Kk0dLzvWf3HzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGg3bXdKTEpCQjRBejRmanpXMnRXUWt3dlhrNXNOcDRqd0R5TlRZckgz
U3IvMS9ERUU4MEU1MEUwM0RGMDFDMTU0QkQyQTREMUQyRjNCRDY3RjcxRjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFRTgwRTUwRTAzREYwMUMx
NTRCRDJBNEQxRDJGM0JENjdGNzFGMzYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoN213SkxKQkI0QXo0Zmp6VzJ0V1Frd3ZYazVzTnA0andEeU5UWXJIM1NyLzEv
MzEzMzM4MmUzMTMyMzIyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp6rjANBgkqhkiG9w0BAQsFAAOCAQEAnsU7
bo7I23cIEveeIfe2R0ia/RoVm67IShgVITgqPlvQ5EIznil3huwjWOjbFdygwpz9
d4Iro0eoG/J2kC7/q3PVSW73KchGGRHbZWr88r+giHfRYJw7bOAJ6bOoxYFx/qcV
s4csPshW3uKY85e69tHU7r9rBW/GgTrQvRDk4/2X6zjQ4CtmueuKH+08xvrQqv+Z
On8phkmY0NRgwugZf24jFSU/m8+gWbErBwJd/wnKbKIJwwueH9VtF4az01khJ2EF
bc2TxOEdpf6WHnKQFV2eCDeH2M99PtnheeYhEYjfMyUPsefFbIFUXBXvEhrI8kYD
xbzR3w1pyGVdCS0YXg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org