Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/3133382e35392e3234302e302f32322d3332203d3e20323634323134.roa
File:                     3133382e35392e3234302e302f32322d3332203d3e20323634323134.roa (raw, json)
Hash identifier:          tcwQMUsaUSAFPxC+G4w3iHbKteCaDFd+HFX8d3PUlKc=
Subject key identifier:   CD:8C:40:17:04:CC:9D:D5:DC:7E:15:DF:A0:31:64:24:D1:52:A2:9A
Certificate issuer:       /CN=02642BE58C8AD035AC6C68EC6B4B82849440F6D3
Certificate serial:       76D68FE4DAF0559E5ED3BCAD87ABB878CEB8C411
Authority key identifier: 02:64:2B:E5:8C:8A:D0:35:AC:6C:68:EC:6B:4B:82:84:94:40:F6:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/3133382e35392e3234302e302f32322d3332203d3e20323634323134.roa
Signing time:             Tue 20 Aug 2024 15:56:18 +0000
ROA not before:           Tue 20 Aug 2024 15:51:18 +0000
ROA not after:            Tue 19 Aug 2025 15:56:18 +0000
asID:                     264214
IP address blocks:        138.59.240.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.crl
                          rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d6:8f:e4:da:f0:55:9e:5e:d3:bc:ad:87:ab:b8:78:ce:b8:c4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02642BE58C8AD035AC6C68EC6B4B82849440F6D3
        Validity
            Not Before: Aug 20 15:51:18 2024 GMT
            Not After : Aug 19 15:56:18 2025 GMT
        Subject: CN=CD8C401704CC9DD5DC7E15DFA0316424D152A29A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c1:b2:ab:31:c9:e8:88:4b:c1:57:88:bc:5b:
                    b5:01:2c:b7:5f:42:d0:b3:0b:50:b6:88:27:fb:63:
                    3d:82:52:73:6e:e5:60:59:ea:89:be:31:fa:b9:74:
                    de:1e:44:09:17:9c:ac:4c:d6:04:23:cb:07:b4:86:
                    5f:d3:20:ac:85:b0:9c:6c:b6:60:19:0c:e6:b9:67:
                    b5:14:31:62:08:6b:63:c1:a5:23:c8:5f:e3:f6:3d:
                    65:05:c9:4e:6f:32:c0:79:c9:56:77:76:dd:a8:1e:
                    7f:b1:09:f8:ff:4c:47:65:b6:ca:67:32:82:fd:14:
                    c1:82:f9:42:6f:50:15:48:af:61:c4:69:bf:65:ee:
                    3e:fc:67:b6:e4:61:ad:6e:8e:e8:b0:4f:10:b5:ce:
                    f9:29:bc:66:4c:61:60:ad:10:ff:3c:22:d3:88:e8:
                    6f:2c:67:13:8e:f8:e2:2f:1c:c8:45:dd:00:70:d5:
                    19:45:0c:74:a3:d2:a3:ad:e6:75:d1:ea:63:78:8a:
                    97:df:69:d5:ed:2f:7f:7e:c9:47:4c:c6:08:c7:eb:
                    da:5d:5d:c7:6c:4d:ab:ab:f4:27:9a:d0:d7:c2:4b:
                    a1:27:72:ca:e2:43:8a:59:9d:7d:44:95:11:5c:47:
                    c3:4c:96:fe:77:99:d6:c1:44:d8:73:2f:a9:04:a0:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8C:40:17:04:CC:9D:D5:DC:7E:15:DF:A0:31:64:24:D1:52:A2:9A
            X509v3 Authority Key Identifier:
                keyid:02:64:2B:E5:8C:8A:D0:35:AC:6C:68:EC:6B:4B:82:84:94:40:F6:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02642BE58C8AD035AC6C68EC6B4B82849440F6D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/3133382e35392e3234302e302f32322d3332203d3e20323634323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:3e:7b:6d:d5:79:c1:32:26:00:67:8a:e6:26:48:64:3a:
         fd:79:d8:a9:9f:4b:33:37:03:58:97:b1:c6:05:6b:d2:61:28:
         e8:74:95:21:1f:bd:48:e6:6c:99:ad:f3:ee:32:bf:f0:34:01:
         60:d5:41:8c:f6:1a:da:86:22:dd:dd:50:5d:38:05:59:82:f0:
         ac:18:8a:5d:ba:3f:11:a7:ca:f5:3d:ce:0b:b5:86:95:32:78:
         6a:a8:dc:8c:d2:04:a3:2d:b2:1d:a4:aa:34:56:9a:9e:7b:0f:
         a8:33:54:d1:a3:ca:ee:7e:24:ed:33:c2:1b:0d:56:eb:e0:1f:
         2a:43:ac:a1:45:b7:c8:ca:18:14:a5:44:bd:28:ef:b6:3c:21:
         ad:fc:9e:01:03:e8:0a:79:a7:0b:d4:ba:15:48:52:96:d0:b8:
         98:af:a5:6f:4e:3c:d9:cc:61:5c:f1:a5:ca:29:e2:58:27:9a:
         24:ed:f2:7e:fc:7f:c7:39:f3:ba:64:fb:c0:50:8f:90:b6:94:
         ee:3a:b9:7e:90:1d:b1:12:d2:59:37:cd:0e:ba:c9:c0:fd:65:
         85:af:db:c4:5d:8d:4f:b1:7f:8b:6c:1f:60:67:4a:d8:56:d0:
         5d:3c:4b:f9:18:2d:2b:25:7a:9f:92:23:b3:ef:ab:0a:35:44:
         ee:ed:15:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:51 2024 by rpki-client on console-fra.rpki-client.org