Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa
File:                     3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa (raw, json)
Hash identifier:          CMyELUQ0L0MKstavwjZ82E8I3mLT+CpA9rRsMImQQ7I=
Subject key identifier:   E0:5C:8F:0C:DB:60:0A:E9:85:74:45:1D:98:D2:70:FB:45:B3:26:98
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       274D59763E21286EE66E55DA2CD727F0E69711C6
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:19 +0000
ROA not before:           Wed 03 Apr 2024 18:26:19 +0000
ROA not after:            Wed 02 Apr 2025 18:31:19 +0000
asID:                     264247
IP address blocks:        138.118.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4d:59:76:3e:21:28:6e:e6:6e:55:da:2c:d7:27:f0:e6:97:11:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:19 2024 GMT
            Not After : Apr  2 18:31:19 2025 GMT
        Subject: CN=E05C8F0CDB600AE98574451D98D270FB45B32698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:18:50:e5:2a:9b:a9:ad:a7:89:ee:54:b6:
                    7a:5c:f0:5b:25:ea:57:78:56:a6:98:0b:47:4e:b1:
                    41:ee:6e:eb:64:93:23:d1:70:a0:9f:dc:b5:18:4e:
                    e8:be:c9:b3:54:b0:99:55:68:20:d3:86:5e:2b:01:
                    9f:82:aa:c6:50:c3:ed:77:f1:03:1b:25:a9:96:bc:
                    28:df:e8:8c:59:d2:01:79:1d:c5:5f:b9:6b:06:63:
                    b5:3d:44:fd:ed:1c:5e:e8:cb:68:79:ad:7b:97:3d:
                    54:cf:01:26:fc:64:38:b4:47:d1:4f:69:43:e1:9a:
                    e6:31:43:91:69:9a:d6:18:a5:a7:f8:74:66:5b:2e:
                    5e:cb:48:1d:e9:e7:51:e9:b4:ed:da:2c:60:e9:91:
                    49:7b:33:de:86:90:29:dc:e6:b1:2d:0c:f5:d3:be:
                    31:bf:44:5f:57:60:4c:e7:91:6b:e2:ae:da:f8:27:
                    be:f9:30:dc:d1:39:9a:cb:89:74:9e:43:d1:1a:f1:
                    39:c2:58:28:2b:70:81:df:12:08:12:e1:57:56:c3:
                    1d:c2:60:14:71:c8:e2:a8:ac:aa:96:99:10:75:a0:
                    5e:8d:94:e7:30:09:23:19:2d:fa:df:a7:75:f1:68:
                    f2:cd:c7:59:d9:03:bb:b2:94:22:be:b5:4f:8d:8c:
                    65:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5C:8F:0C:DB:60:0A:E9:85:74:45:1D:98:D2:70:FB:45:B3:26:98
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33332e302f32342d3234203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:0d:9b:66:1a:a2:e0:8f:bf:c7:61:ad:0a:3e:f7:38:c3:c9:
         60:7d:db:35:62:01:30:50:bd:c0:5f:3b:24:bc:81:74:e7:7c:
         bb:67:b7:77:57:9d:ad:ec:10:26:55:7f:9e:3e:d1:17:07:8b:
         ac:6b:f8:bf:c3:c6:43:cf:9f:f7:73:29:10:fd:77:a0:81:c2:
         d4:cb:0a:22:dc:2a:1f:1c:d4:b4:01:57:3f:dd:04:ae:da:0c:
         dc:c5:46:db:ed:54:be:78:24:38:ff:6e:07:60:42:94:0b:cd:
         9d:34:3c:ef:a1:05:af:65:65:26:0f:67:22:7f:e8:c2:cd:3b:
         f9:8a:88:b7:0b:4a:ce:d9:bf:f9:d2:b9:21:6a:2d:1c:ae:0b:
         af:cc:a2:d2:3f:f2:a2:81:37:04:23:b1:4c:1f:f8:e4:14:35:
         0c:07:9f:e4:48:6a:bb:46:b6:bc:b7:df:c9:e2:2e:3d:be:5d:
         e9:3f:79:8a:7c:f1:43:85:b6:9e:e3:84:b4:db:4b:75:4d:7c:
         ef:45:ae:11:93:29:5a:0b:df:37:ac:26:db:53:f3:fb:64:bb:
         ff:bd:5e:b1:17:de:37:90:0e:9b:ad:0e:81:f9:53:bb:75:68:
         ae:8e:c2:f4:89:73:99:82:de:bd:9f:50:84:08:e9:5f:71:be:
         a8:ac:a1:57
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ01Zdj4hKG7mblXaLNcn8OaXEcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJGRTE2RkFDRDI5OTMxNkZDRUY3M0NGRUE3ODI4NDRE
N0MyRTY5ODAeFw0yNDA0MDMxODI2MTlaFw0yNTA0MDIxODMxMTlaMDMxMTAvBgNV
BAMTKEUwNUM4RjBDREI2MDBBRTk4NTc0NDUxRDk4RDI3MEZCNDVCMzI2OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSsxhQ5Sqbqa2nie5Utnpc8Fsl
6ld4VqaYC0dOsUHubutkkyPRcKCf3LUYTui+ybNUsJlVaCDThl4rAZ+CqsZQw+13
8QMbJamWvCjf6IxZ0gF5HcVfuWsGY7U9RP3tHF7oy2h5rXuXPVTPASb8ZDi0R9FP
aUPhmuYxQ5FpmtYYpaf4dGZbLl7LSB3p51HptO3aLGDpkUl7M96GkCnc5rEtDPXT
vjG/RF9XYEznkWvirtr4J775MNzROZrLiXSeQ9Ea8TnCWCgrcIHfEggS4VdWwx3C
YBRxyOKorKqWmRB1oF6NlOcwCSMZLfrfp3XxaPLNx1nZA7uylCK+tU+NjGUhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4FyPDNtgCumFdEUdmNJw+0WzJpgwHwYDVR0j
BBgwFoAUEv4W+s0pkxb873PP6ngoRNfC5pgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGlBdHRMaURMaXJEUjMycWdlZk5oTDNzdkhTYUh0VXltM0dxaHVaWFY0
dHMvMS8xMkZFMTZGQUNEMjk5MzE2RkNFRjczQ0ZFQTc4Mjg0NEQ3QzJFNjk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyRkUxNkZBQ0QyOTkzMTZG
Q0VGNzNDRkVBNzgyODQ0RDdDMkU2OTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RpQXR0TGlETGlyRFIzMnFnZWZOaEwzc3ZIU2FIdFV5bTNHcWh1WlhWNHRzLzEv
MzEzMzM4MmUzMTMxMzgyZTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKdiEwDQYJKoZIhvcNAQELBQADggEBADINm2Ya
ouCPv8dhrQo+9zjDyWB92zViATBQvcBfOyS8gXTnfLtnt3dXna3sECZVf54+0RcH
i6xr+L/DxkPPn/dzKRD9d6CBwtTLCiLcKh8c1LQBVz/dBK7aDNzFRtvtVL54JDj/
bgdgQpQLzZ00PO+hBa9lZSYPZyJ/6MLNO/mKiLcLSs7Zv/nSuSFqLRyuC6/MotI/
8qKBNwQjsUwf+OQUNQwHn+RIartGtry338niLj2+Xek/eYp88UOFtp7jhLTbS3VN
fO9FrhGTKVoL3zesJttT8/tku/+9XrEX3jeQDputDoH5U7t1aK6OwvSJc5mC3r2f
UIQI6V9xvqisoVc=
-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:40 2024 by rpki-client on console-ams.rpki-client.org