Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa
File:                     3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa (raw, json)
Hash identifier:          3+GQDF7u9H+qwKE9roeBvqkwcbE8gRVMX3X09KKQs80=
Subject key identifier:   18:84:8D:6A:A6:7D:D1:F0:47:2C:94:C4:32:71:61:6B:87:35:B6:09
Certificate issuer:       /CN=E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7
Certificate serial:       3C947549EA598CF2D256BD80968A489FC8660C
Authority key identifier: E6:F5:BF:AC:26:9F:D2:95:62:6E:73:C6:8D:C0:8E:FC:7B:FD:EE:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa
Signing time:             Mon 11 Nov 2024 19:16:30 +0000
ROA not before:           Mon 11 Nov 2024 19:11:30 +0000
ROA not after:            Mon 10 Nov 2025 19:16:30 +0000
asID:                     52873
IP address blocks:        138.219.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.crl
                          rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:94:75:49:ea:59:8c:f2:d2:56:bd:80:96:8a:48:9f:c8:66:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7
        Validity
            Not Before: Nov 11 19:11:30 2024 GMT
            Not After : Nov 10 19:16:30 2025 GMT
        Subject: CN=18848D6AA67DD1F0472C94C43271616B8735B609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:10:e5:79:c7:c9:fe:b7:3b:a0:4c:77:b4:
                    84:ac:49:b5:7d:b4:5b:97:c3:a3:0b:ad:b0:92:b9:
                    89:2d:85:5c:c4:d2:7e:0f:5c:1f:fc:6d:c2:3f:23:
                    d5:a3:ab:cc:22:21:69:d7:74:73:f9:1b:8f:5c:cf:
                    b3:10:bc:e2:34:99:77:5f:2e:e6:a9:55:35:b2:8d:
                    52:d7:ea:d6:d9:a9:37:6f:54:95:bb:c5:fb:03:26:
                    13:e5:cb:9f:a7:1a:44:24:4e:9f:f0:b7:30:b3:78:
                    98:c5:59:e2:d7:fa:1d:51:34:44:06:46:7f:81:c5:
                    2a:88:8a:8c:2d:0f:3d:7a:07:8a:08:a5:86:af:e1:
                    04:a5:61:a5:59:2d:3c:26:69:62:21:d7:d1:05:e5:
                    ed:c3:5c:e1:17:3c:8d:6d:0c:6e:36:26:80:e5:6b:
                    03:82:e4:f6:52:1c:28:fa:7d:b1:46:a8:fe:60:f1:
                    d6:dc:e1:53:04:29:ae:9a:f9:00:7a:8c:c1:25:36:
                    16:48:5b:b5:39:44:54:7b:08:cf:d2:a4:ce:a0:23:
                    35:6c:53:bb:69:60:a8:16:c1:d8:dd:c3:20:46:f6:
                    26:a2:c4:67:3a:71:4b:4d:2c:fa:73:bf:e3:e8:16:
                    32:09:a0:29:9f:a0:38:a9:16:85:76:02:22:84:80:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:84:8D:6A:A6:7D:D1:F0:47:2C:94:C4:32:71:61:6B:87:35:B6:09
            X509v3 Authority Key Identifier:
                keyid:E6:F5:BF:AC:26:9F:D2:95:62:6E:73:C6:8D:C0:8E:FC:7B:FD:EE:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6F5BFAC269FD295626E73C68DC08EFC7BFDEED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3234203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:70:a0:31:1f:12:32:1d:45:52:34:ba:e1:f9:0d:49:2b:69:
         0f:13:7d:98:25:09:73:da:b7:77:7f:fa:3d:a0:6c:fd:49:d9:
         b7:e8:25:fb:5d:cf:24:40:e9:e9:14:e8:4a:77:bf:5b:36:0e:
         72:2a:8f:6e:e2:e1:f2:f0:81:1f:bd:20:92:5e:12:c7:54:db:
         3a:ee:f8:6e:ec:a0:55:0a:ed:e0:96:70:a3:82:3f:5a:3f:43:
         fc:e0:e2:31:35:1d:bf:00:77:ad:f7:1b:a1:16:93:94:30:ca:
         5e:62:7c:43:d3:e0:f5:a1:d1:8c:a5:8a:ad:07:bb:bc:f5:8a:
         41:21:b6:f1:d4:ca:1e:f2:94:27:26:8b:c2:3d:a9:30:c9:1f:
         55:85:1b:35:2c:75:fe:b3:d1:bb:48:08:b8:38:79:52:55:11:
         7e:e4:1a:cf:1b:31:27:3b:e0:5a:ff:b3:bc:8c:9c:fc:82:74:
         db:9c:7a:6e:88:68:9c:f9:f7:8e:cf:54:29:9c:0d:9b:ae:02:
         be:94:80:f1:72:5e:47:6a:e5:98:e1:00:c0:4e:a4:59:f9:af:
         6f:4c:90:07:62:64:81:b7:b3:a1:21:a7:35:9a:cd:5c:81:ef:
         06:8b:92:2c:cb:f8:51:45:0c:71:8a:dc:23:5d:26:53:e7:a2:
         ec:74:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org