Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa
File:                     3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa (raw, json)
Hash identifier:          9XIq/C0rGZr6y3sVQTPs1Cq6Dh7pF08ILhfZpDXM9zY=
Subject key identifier:   DD:C0:CF:B7:80:6D:44:A0:0B:41:B3:9C:C3:D4:BD:3F:01:CE:36:6E
Certificate issuer:       /CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
Certificate serial:       0FBE1251ACD7CBEC292C6AB3F40849481D4001D7
Authority key identifier: 93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa
Signing time:             Wed 03 Apr 2024 21:08:51 +0000
ROA not before:           Wed 03 Apr 2024 21:03:51 +0000
ROA not after:            Wed 02 Apr 2025 21:08:51 +0000
asID:                     262300
IP address blocks:        138.36.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl
                          rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:be:12:51:ac:d7:cb:ec:29:2c:6a:b3:f4:08:49:48:1d:40:01:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
        Validity
            Not Before: Apr  3 21:03:51 2024 GMT
            Not After : Apr  2 21:08:51 2025 GMT
        Subject: CN=DDC0CFB7806D44A00B41B39CC3D4BD3F01CE366E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:7f:a3:c7:99:4a:d4:41:f3:ef:5a:b6:21:
                    d0:9f:a2:95:a2:e9:40:1f:c3:44:cb:6e:ce:0f:b9:
                    15:e5:ec:2e:5c:99:46:7c:ba:95:d3:01:b3:a8:a8:
                    b3:ff:38:b5:6e:0c:a0:d6:02:12:6a:85:2c:11:d6:
                    77:e3:4f:8a:28:51:34:20:ae:8c:b2:ef:9f:4e:81:
                    cc:a7:cd:3e:36:d2:03:7d:4d:88:41:ae:3f:66:81:
                    28:24:a1:c5:49:64:2f:05:7a:cd:d5:ea:21:69:e9:
                    9a:5d:bb:b3:ec:1b:ae:f6:93:72:64:5b:13:7b:40:
                    fa:86:d6:dc:06:51:f4:f1:d4:e6:94:8e:e9:69:29:
                    f5:f9:35:94:08:0f:f8:38:b4:42:6c:29:13:e3:61:
                    98:eb:7c:07:9a:14:5c:65:29:b5:f4:11:aa:3b:aa:
                    92:dd:47:d0:c9:eb:6d:e0:bb:e3:87:3e:0f:17:97:
                    6a:2c:fa:ad:ed:ca:58:d6:d1:a5:88:fd:f7:69:ad:
                    66:96:be:db:a6:64:17:a2:bf:3b:fd:ab:61:9d:8b:
                    ba:42:ba:20:39:32:56:5f:f2:6a:32:ef:ef:cf:c6:
                    17:a9:6c:0d:53:bf:be:2c:85:1d:5a:fe:a8:e3:d5:
                    d3:e9:ea:f1:d8:1b:cd:cd:62:69:df:3a:b2:f5:74:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C0:CF:B7:80:6D:44:A0:0B:41:B3:9C:C3:D4:BD:3F:01:CE:36:6E
            X509v3 Authority Key Identifier:
                keyid:93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/3133382e33362e3136382e302f32322d3234203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:3c:4f:f1:c5:99:89:1f:59:7e:48:d4:2d:8c:e7:c0:c7:1d:
         ec:f6:d7:94:de:a0:df:00:84:1d:a7:a7:24:e2:97:7d:98:78:
         a8:d9:6a:54:72:47:36:c8:9d:4d:8f:5f:aa:e8:8e:af:9f:9c:
         e8:ef:b0:cd:89:b3:04:1f:69:a5:28:8a:7f:45:e6:52:6b:e9:
         dc:c9:8f:77:62:66:e5:2b:b6:3d:8c:e9:9c:7e:61:3c:b1:07:
         20:79:2b:af:19:e8:38:6a:51:6c:4e:60:28:98:e5:67:ec:64:
         52:fa:e7:4e:a7:fe:44:13:9f:20:e0:09:61:08:03:2b:30:79:
         60:e2:db:5d:4a:06:8c:e8:f1:e7:0c:9b:c2:57:4a:83:61:5d:
         6e:12:37:f2:41:b2:c1:f8:7c:6b:1d:c5:2f:13:cc:6a:75:73:
         8d:2b:98:6f:85:ba:90:ec:ca:5c:81:be:31:db:f8:2e:2e:19:
         7a:59:1d:48:6f:3a:02:04:3e:3f:44:99:60:e5:46:02:30:41:
         dc:0a:71:c0:98:b4:3c:58:7d:57:8a:f3:04:73:8d:99:de:d1:
         62:9e:0c:8b:4b:c6:ea:7f:bd:27:a2:87:43:93:5a:bb:97:aa:
         03:ad:19:90:0b:41:77:89:f5:8f:ce:09:d6:bb:f0:4e:4b:11:
         e5:7f:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org