Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa
File:                     3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa (raw, json)
Hash identifier:          cEaw9XUIpGa8jL69UySQm9MjGuxtGyN4Q4uhUX2uHZ8=
Subject key identifier:   A3:A1:52:D7:1E:81:79:A6:02:EA:89:D8:7B:2E:53:54:70:2A:F9:EC
Certificate issuer:       /CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Certificate serial:       3F597A596F359B4D1E203C79CD0EE4DD64EF4833
Authority key identifier: E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa
Signing time:             Wed 03 Apr 2024 18:30:20 +0000
ROA not before:           Wed 03 Apr 2024 18:25:20 +0000
ROA not after:            Wed 02 Apr 2025 18:30:20 +0000
asID:                     264440
IP address blocks:        138.121.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
                          rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:59:7a:59:6f:35:9b:4d:1e:20:3c:79:cd:0e:e4:dd:64:ef:48:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
        Validity
            Not Before: Apr  3 18:25:20 2024 GMT
            Not After : Apr  2 18:30:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7c:0c:50:e5:1b:f3:8f:13:70:9a:c0:91:a2:
                    e8:88:db:7b:de:5a:f5:6b:c9:18:22:82:d0:fa:b5:
                    a3:d3:d2:36:f0:4f:a6:75:31:63:d5:b2:45:11:bd:
                    b8:4f:9e:c7:80:57:17:18:f5:b2:e2:05:84:6f:ea:
                    9a:06:ce:ef:15:15:9c:32:c2:2a:66:c9:6c:85:33:
                    82:e0:fd:db:3e:1c:31:59:13:bf:e3:b3:02:10:80:
                    5a:a3:bd:00:c3:d4:b8:de:78:47:f1:c0:1d:5f:c1:
                    2e:a0:7b:e2:fa:ab:57:53:41:67:5d:eb:a2:6c:21:
                    58:b0:8c:07:f2:79:1c:2e:d0:c1:7a:78:31:97:8c:
                    42:40:4f:bf:5e:c2:1e:7c:c5:54:47:42:8d:41:6c:
                    9b:f6:40:2c:b3:12:93:66:19:9e:39:a7:62:c0:18:
                    2e:5a:3d:6a:65:33:27:57:cd:51:28:99:72:1a:06:
                    67:b4:e9:54:ea:9c:ef:b7:6f:8e:15:4a:bc:6e:b7:
                    a7:63:6c:1b:3f:81:cc:1e:61:24:7d:92:78:ee:76:
                    71:3a:80:97:c0:27:b3:c5:ae:f6:d1:c1:a6:76:64:
                    48:a6:f2:77:12:21:38:67:e6:48:c9:25:aa:6f:36:
                    a4:b6:6f:c7:96:4d:7f:aa:d2:bb:0d:fb:eb:12:70:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A1:52:D7:1E:81:79:A6:02:EA:89:D8:7B:2E:53:54:70:2A:F9:EC
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:af:c4:d9:31:63:f2:60:15:9d:46:66:c9:d4:61:a0:84:
         98:2b:8c:0f:41:b4:d2:9b:9c:f8:15:7a:30:29:28:10:d6:2b:
         49:52:1c:04:97:56:51:7e:75:22:47:99:2d:1a:7d:af:90:45:
         be:d4:d7:c3:9c:63:6e:65:8f:6d:ff:2e:0a:99:62:3d:8a:c3:
         c6:de:a6:84:db:d4:ea:f9:0c:38:33:81:f0:6b:4a:6a:1f:ff:
         e3:62:ec:ce:3f:af:d9:11:18:92:4d:94:29:7c:20:7a:0c:87:
         be:f1:5b:bc:40:90:07:50:18:f4:d5:41:e4:bc:82:32:31:e8:
         53:6a:32:e9:ca:ee:ec:29:52:5b:29:c5:5f:b8:3d:11:cf:ad:
         da:ba:d2:f5:20:41:ad:fe:d0:52:21:ad:8f:0d:10:a1:02:d1:
         c6:b3:d7:9b:84:ee:20:c6:52:e5:21:e6:05:de:df:a7:2e:a8:
         6e:1f:41:49:77:4a:ed:6a:18:a0:8a:fe:f1:91:48:c5:5a:7d:
         72:bd:67:41:08:68:f6:35:d6:4b:e8:c3:53:e6:a4:db:9c:82:
         77:eb:73:78:67:28:90:d8:62:72:e0:a2:1e:d6:e4:bf:dc:de:
         89:1f:d8:05:b7:8b:42:0a:59:c2:10:19:98:02:22:21:63:66:
         6f:28:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:51 2024 by rpki-client on console-fra.rpki-client.org