Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137352e302f32342d3234203d3e20323632353138.roa
File:                     3133382e3132322e3137352e302f32342d3234203d3e20323632353138.roa (raw, json)
Hash identifier:          hg92iCEzk5tCYtaNpdpLcyv5VxVt7p8SEbZ//taCJ40=
Subject key identifier:   D1:57:18:EA:6F:03:A1:4C:A0:06:67:24:5D:0D:88:00:5E:FF:39:6A
Certificate issuer:       /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Certificate serial:       6BF0641974F8DAF6619C428F00EDC122DFB987C3
Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137352e302f32342d3234203d3e20323632353138.roa
Signing time:             Thu 04 Apr 2024 04:33:14 +0000
ROA not before:           Thu 04 Apr 2024 04:28:14 +0000
ROA not after:            Thu 03 Apr 2025 04:33:14 +0000
asID:                     262518
IP address blocks:        138.122.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl
                          rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f0:64:19:74:f8:da:f6:61:9c:42:8f:00:ed:c1:22:df:b9:87:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
        Validity
            Not Before: Apr  4 04:28:14 2024 GMT
            Not After : Apr  3 04:33:14 2025 GMT
        Subject: CN=D15718EA6F03A14CA00667245D0D88005EFF396A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:79:23:b2:07:09:21:0c:f1:2d:26:95:a2:44:
                    fb:2d:95:2a:7f:f5:24:96:5d:47:7e:eb:77:94:3c:
                    01:2c:41:d0:87:5a:19:34:5d:48:f1:4d:97:41:bf:
                    24:bd:52:51:d7:b1:9f:6a:fb:f8:f1:50:e2:32:31:
                    8c:52:c0:0e:bf:e5:90:77:3c:4e:86:5b:27:b3:38:
                    d0:51:a8:5a:18:b9:c5:48:95:ca:b0:20:02:f2:ad:
                    85:4a:f7:05:e7:e0:3e:29:85:19:a6:4f:72:bf:82:
                    d1:07:08:8c:eb:c9:8b:86:eb:e5:1b:eb:18:27:9a:
                    17:95:af:76:05:fb:67:e5:e7:79:78:3b:39:07:25:
                    eb:fc:fa:83:ff:79:20:52:d9:55:80:62:b1:1b:6b:
                    30:14:7d:15:2d:41:2d:77:a8:ea:97:79:f0:b8:40:
                    9b:d2:ec:eb:00:55:ee:e0:ce:72:c4:1a:0f:13:53:
                    09:b8:cd:20:d3:5c:a0:a7:64:c7:6c:c8:94:84:08:
                    fe:6c:91:69:2f:6b:51:08:9d:48:21:d3:a8:e7:b4:
                    d8:f4:2b:be:14:14:26:0f:33:3d:44:bb:26:38:8c:
                    39:4f:57:ff:8c:0a:de:c7:e2:07:a8:90:6e:8b:1b:
                    7f:1d:61:55:3b:1e:1e:0c:79:45:15:14:90:77:34:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:57:18:EA:6F:03:A1:4C:A0:06:67:24:5D:0D:88:00:5E:FF:39:6A
            X509v3 Authority Key Identifier:
                keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3133382e3132322e3137352e302f32342d3234203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:fc:e8:d0:6b:2a:47:c6:3a:70:f2:a1:e4:4e:55:0f:da:c6:
         82:f6:e6:d9:20:76:bb:c6:fb:a3:4e:74:34:1a:6a:02:72:26:
         34:cd:ae:da:68:f6:78:31:80:2e:ac:78:c1:e5:e0:87:ec:35:
         56:d9:e0:80:1d:e5:5b:52:be:58:81:05:6f:5e:4b:25:e9:d7:
         77:ae:06:5e:26:bd:e4:b4:d1:7f:15:8e:11:05:2c:04:ea:05:
         1c:58:da:e0:d0:49:10:60:9c:f1:80:b5:4f:8e:ab:c3:5c:ab:
         e8:fa:e1:23:79:79:b6:8a:9c:b1:8f:74:8f:99:a4:49:50:76:
         4d:ae:a2:4d:2c:8d:36:27:1d:52:f5:af:bb:cc:33:b2:cf:fb:
         81:b4:77:82:e4:00:56:3f:dd:bb:45:c9:5d:03:27:a6:92:fa:
         59:f8:48:99:b6:fe:16:69:d0:32:4e:67:3b:13:97:f7:09:87:
         e3:c3:4d:06:cd:78:f0:62:4f:a5:a5:67:ce:c8:b1:67:5c:12:
         9d:2e:98:9d:c2:ba:41:b8:91:e6:c2:fa:03:8b:cc:99:96:65:
         3d:5f:d5:e5:6f:ab:a5:ee:4e:3f:e1:a9:98:4b:22:20:53:24:
         81:30:07:9b:9a:15:35:87:10:58:c6:85:82:18:de:ee:d6:9f:
         29:18:e9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org