Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32322d3232203d3e20323634333230.roa
File:                     3133382e3132322e3132302e302f32322d3232203d3e20323634333230.roa (raw, json)
Hash identifier:          2EP2oowDcShWWwEa5ppcmI94+lZ8HvVJ5wOUMTcAI7w=
Subject key identifier:   3E:15:CC:AC:E2:36:36:CD:8D:86:FA:9B:01:87:CC:05:A6:D5:D7:87
Certificate issuer:       /CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
Certificate serial:       146272D9668A4170CD979901D5F22001A248F509
Authority key identifier: 4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32322d3232203d3e20323634333230.roa
Signing time:             Mon 18 Nov 2024 19:18:36 +0000
ROA not before:           Mon 18 Nov 2024 19:13:36 +0000
ROA not after:            Mon 17 Nov 2025 19:18:36 +0000
asID:                     264320
IP address blocks:        138.122.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl
                          rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 23:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:62:72:d9:66:8a:41:70:cd:97:99:01:d5:f2:20:01:a2:48:f5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
        Validity
            Not Before: Nov 18 19:13:36 2024 GMT
            Not After : Nov 17 19:18:36 2025 GMT
        Subject: CN=3E15CCACE23636CD8D86FA9B0187CC05A6D5D787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:48:c1:16:8d:c8:d5:e8:1c:d8:0d:12:a8:
                    58:66:28:83:8c:bb:d9:ab:12:b0:44:70:32:cb:c0:
                    20:f3:2c:61:8f:d2:99:b4:f7:fe:09:5b:59:d8:0c:
                    62:e7:77:42:8e:bf:47:e2:ad:75:36:3d:69:ad:9d:
                    b9:46:2d:be:70:77:45:b2:cc:1e:ec:cb:9b:31:ca:
                    e2:b3:31:ff:97:9a:18:be:15:af:ef:de:19:1a:ab:
                    a6:ce:b7:d7:da:33:bf:76:4e:d6:c5:70:0e:1b:3f:
                    3a:8f:f0:b2:e5:1f:0f:67:8d:c3:20:aa:96:23:5e:
                    d0:9f:fb:0e:c6:04:0a:1c:06:9b:ca:92:72:83:02:
                    f9:79:94:20:63:d4:92:2b:3f:ed:ac:34:37:7e:c9:
                    1d:79:62:07:fb:3c:2f:4f:45:31:77:67:29:ea:6d:
                    03:88:a0:91:b7:99:d9:b7:0f:5c:e4:ed:10:92:de:
                    16:c8:da:a1:0a:29:78:0d:42:c1:20:1b:e7:6c:ef:
                    ce:5c:1a:24:44:c7:e0:7b:2d:07:c2:70:9c:2e:fe:
                    db:27:88:a5:1e:2f:ff:98:ad:77:81:aa:e1:57:ec:
                    02:0c:b0:9f:46:13:e4:4d:34:98:71:75:d5:86:c9:
                    9b:14:a2:15:66:85:c4:66:26:a1:bd:fe:1b:85:19:
                    a7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:15:CC:AC:E2:36:36:CD:8D:86:FA:9B:01:87:CC:05:A6:D5:D7:87
            X509v3 Authority Key Identifier:
                keyid:4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/3133382e3132322e3132302e302f32322d3232203d3e20323634333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:19:01:1f:4f:85:54:fc:7c:de:14:fd:1b:82:e8:81:74:65:
         6c:71:cd:38:0e:c1:78:b5:8c:10:f4:5b:5d:49:ab:d3:08:93:
         9e:be:25:1f:24:57:f3:ed:69:71:59:a7:d6:b2:0a:82:f8:56:
         ce:6c:5c:97:8d:21:1c:94:00:e1:18:7d:6d:24:12:fa:cd:a4:
         26:be:4f:7b:14:a9:b0:c4:ab:d0:27:24:70:fa:6e:2f:4b:21:
         0c:e2:78:9f:68:37:6d:7e:bb:2e:b7:9c:e4:2d:ce:15:f9:d8:
         79:00:4e:3a:71:14:36:38:79:e4:73:b9:ec:c2:77:89:38:b6:
         c5:d4:51:73:ae:ab:e4:e3:75:c4:14:89:b7:2b:31:15:ff:d1:
         c4:9c:63:fb:17:05:d3:56:13:50:43:22:36:f5:4f:7a:ce:3f:
         51:10:22:29:6f:50:8d:c9:d1:8c:7f:1e:2d:04:04:28:6f:cc:
         07:a5:81:c9:2d:94:24:3a:71:01:d2:aa:c8:98:e3:d8:f6:7b:
         04:5d:46:28:76:9a:96:63:84:51:cf:31:be:d0:75:cd:2a:cb:
         df:f2:77:de:a2:18:c4:2d:e9:98:b8:4b:1f:f4:34:bb:a9:35:
         f5:3f:ce:ac:6e:37:8b:cd:8f:0c:17:4f:cc:02:20:da:f7:5a:
         ff:3e:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 22:35:52 2024 by rpki-client on console-fra.rpki-client.org