Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa
File:                     3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa (raw, json)
Hash identifier:          Avv+w5Qj/Y6sxcFhqzeOgEA+Inz1GFPwEoyd6gEQwVk=
Subject key identifier:   A3:D3:12:9B:34:F0:9A:A8:F8:7B:B5:E7:93:59:0F:9B:BC:E5:3F:A3
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       619E92D96016BF07141E7BA00CB81B09A162F22A
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:22 +0000
ROA not before:           Wed 03 Apr 2024 18:26:22 +0000
ROA not after:            Wed 02 Apr 2025 18:31:22 +0000
asID:                     264247
IP address blocks:        138.118.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9e:92:d9:60:16:bf:07:14:1e:7b:a0:0c:b8:1b:09:a1:62:f2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:22 2024 GMT
            Not After : Apr  2 18:31:22 2025 GMT
        Subject: CN=A3D3129B34F09AA8F87BB5E793590F9BBCE53FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:3e:39:57:c7:f5:d8:2a:cd:49:c2:62:f1:
                    42:1d:6e:9e:09:06:3a:21:a9:bb:b1:da:7c:60:d1:
                    d7:16:ba:72:e4:07:35:b0:13:38:e9:e0:e8:be:50:
                    b4:5c:06:18:3d:bf:8c:d0:5c:b9:f0:17:a8:8d:66:
                    61:5e:95:b8:f1:89:5b:55:01:36:d3:29:06:52:ab:
                    61:37:6f:0a:7a:73:24:93:0d:89:e7:d0:1c:61:e6:
                    98:c3:55:a1:55:30:df:d7:a0:99:93:d8:2d:6b:11:
                    76:8c:19:a8:41:f4:6f:a0:c9:13:6e:f5:ee:6e:62:
                    9c:a7:ce:e8:45:8e:e4:72:ad:a3:3e:8a:a7:e8:79:
                    0b:e1:55:23:97:e6:4c:3a:3a:68:ca:f1:da:fb:6f:
                    54:2c:07:e8:4a:04:8d:9b:6d:95:8f:09:93:0b:0f:
                    84:9d:a9:0c:6c:a3:67:d2:71:cf:fb:54:fc:35:9f:
                    c6:3c:4e:20:04:23:01:44:25:03:b8:5e:20:50:6c:
                    59:ff:7a:b9:f7:21:d3:79:9b:9f:b4:6f:25:e6:41:
                    5f:58:19:a2:92:db:c0:87:d7:69:7d:8b:3b:c7:aa:
                    51:d5:ca:94:f7:b4:a4:2d:4f:86:a7:53:22:cf:52:
                    1f:0f:f8:3c:04:08:ad:3c:93:fd:81:c2:15:d4:1b:
                    b8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D3:12:9B:34:F0:9A:A8:F8:7B:B5:E7:93:59:0F:9B:BC:E5:3F:A3
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/3133382e3131382e33342e302f32342d3234203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:2f:f3:8f:e6:65:29:86:05:a4:4c:1f:4c:94:bf:2a:99:5c:
         a2:43:e6:96:e2:f7:05:9d:8a:b9:f5:44:69:3c:12:ae:07:3e:
         81:00:32:10:db:b3:33:87:7b:7f:ce:2a:83:72:64:32:00:4f:
         36:e5:a8:67:aa:10:7d:38:a8:0c:c7:2b:e8:15:ef:ec:33:3a:
         a1:13:9c:d1:6b:a9:1e:5b:ac:22:61:f4:42:cc:60:58:90:86:
         18:81:f3:58:3a:e5:bc:03:f9:2f:d2:d4:74:a9:a1:8a:50:a7:
         ed:20:a8:32:e2:6b:b3:8b:d6:da:f3:75:f0:31:e9:0a:b1:a0:
         5c:a6:e8:b0:f2:93:8f:d8:57:a9:e3:be:01:f4:2c:6d:f8:00:
         a6:a8:b6:3e:4b:95:2e:cf:ed:91:4f:67:e9:4a:15:bf:99:02:
         a7:fa:7b:1c:6b:00:d5:06:3d:fb:bd:aa:d8:cf:e6:86:88:d7:
         b2:dd:6d:b4:fe:fd:e3:40:c1:dd:8f:7a:d1:2e:05:eb:0a:ca:
         20:18:fc:04:55:b3:86:1b:02:a1:4d:e5:d6:ef:4c:8c:f5:fa:
         f6:3b:02:61:15:6d:1c:5e:4f:7a:6a:97:6a:1b:73:ce:fa:85:
         9b:28:f3:7c:ea:fc:f2:ef:77:ea:8c:a0:0e:3e:de:3f:a4:51:
         85:25:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:30 2024 by rpki-client on console-fra.rpki-client.org