Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa
File:                     3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa (raw, json)
Hash identifier:          IweYG9L9mYnvgqjcrnxn0mot14JVl2qV7zEM+hXvM14=
Subject key identifier:   61:49:2C:93:15:1A:6B:33:C6:46:79:76:D7:41:D7:B7:B8:73:E1:CD
Certificate issuer:       /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Certificate serial:       51D80DD8335BD9C73A5CDDE9922C482C04D8A5FC
Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa
Signing time:             Thu 04 Apr 2024 04:33:14 +0000
ROA not before:           Thu 04 Apr 2024 04:28:14 +0000
ROA not after:            Thu 03 Apr 2025 04:33:14 +0000
asID:                     262518
IP address blocks:        138.122.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl
                          rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d8:0d:d8:33:5b:d9:c7:3a:5c:dd:e9:92:2c:48:2c:04:d8:a5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
        Validity
            Not Before: Apr  4 04:28:14 2024 GMT
            Not After : Apr  3 04:33:14 2025 GMT
        Subject: CN=61492C93151A6B33C6467976D741D7B7B873E1CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:bc:31:b8:3f:a2:8a:e3:fb:17:8d:45:67:
                    fa:48:d4:c7:4d:48:45:29:43:e9:66:05:0d:cb:1c:
                    97:48:79:4f:72:36:ea:9e:e3:1f:80:32:dd:35:36:
                    4b:94:6a:97:dc:7c:fd:d0:7a:62:c7:c7:7a:2d:f9:
                    f2:15:44:5b:6c:54:80:2f:37:05:ec:0c:31:b8:04:
                    02:a6:14:43:b9:bc:b4:aa:78:8f:c5:62:a8:82:3f:
                    7a:3a:ca:7d:f9:4f:61:16:d1:d2:a1:f3:ff:b1:47:
                    71:d3:f9:65:94:65:6b:47:df:a4:8a:a0:30:4e:7e:
                    b7:ed:79:90:7b:a3:60:1b:c0:59:5e:84:a4:fd:1d:
                    58:db:63:a3:92:56:99:b4:d9:9c:68:62:11:88:8b:
                    ff:c1:d4:31:93:07:ed:01:b1:6b:8a:0a:e3:5a:1f:
                    51:e8:76:fa:b7:8d:13:ea:7d:8e:0c:3d:f5:96:73:
                    a2:86:08:d6:7c:a5:a0:5c:1f:61:fa:1d:f5:10:e5:
                    3c:1e:97:fd:f1:51:2b:32:38:83:2b:36:d2:9b:9f:
                    ec:81:31:0d:7e:11:e7:37:da:73:7c:89:67:cb:ae:
                    59:85:c1:1a:4d:af:0d:f4:34:cc:95:bb:7c:85:08:
                    23:80:ee:52:95:a2:48:58:96:0d:7d:28:26:96:06:
                    0b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:49:2C:93:15:1A:6B:33:C6:46:79:76:D7:41:D7:B7:B8:73:E1:CD
            X509v3 Authority Key Identifier:
                keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:25:3a:50:b0:48:b7:5f:5d:91:5d:8d:52:16:d9:58:9b:a3:
         fe:3b:c5:5e:65:e1:cd:24:8d:1e:97:f7:f0:e9:7b:03:5c:2d:
         a8:1a:3a:6b:da:7c:84:95:d9:29:31:0d:9c:01:fd:34:bf:75:
         b1:b0:f6:4d:33:d0:ef:b4:63:10:17:b6:c0:97:d6:a7:e1:ae:
         c7:82:36:a8:47:49:7a:9d:fb:a8:6b:2f:e7:a0:83:23:61:b0:
         73:19:d9:ab:2b:45:99:9f:6a:d4:fa:a4:da:77:d3:8e:94:4c:
         70:21:b6:ab:63:b7:5e:7c:14:f7:f7:53:90:8a:4e:16:a0:b3:
         c1:ee:cb:16:e7:df:20:2e:80:b0:a3:5a:62:02:21:5f:5f:de:
         97:fa:8c:e0:20:d5:3a:0a:65:3c:64:d9:b9:b3:cb:90:ed:fb:
         bb:59:7f:40:87:a3:e3:d4:64:fa:9d:c1:53:23:90:1a:d3:4b:
         fb:b7:87:86:9e:2d:31:af:f8:b1:49:db:8b:e6:10:d6:0e:6c:
         e0:f6:06:3d:8e:1d:49:3f:6b:3b:76:a5:c9:88:00:69:72:23:
         85:a8:85:94:77:2a:40:69:39:36:2e:0f:f8:c3:23:b6:e0:91:
         23:ed:1d:a5:c8:28:26:cc:d9:d3:a7:b2:29:a6:f4:3f:59:f7:
         9a:4d:26:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org