Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/3133382e39372e36302e302f32342d3234203d3e20323634313330.roa
File:                     3133382e39372e36302e302f32342d3234203d3e20323634313330.roa (raw, json)
Hash identifier:          yeSTJ62+kBY6qZle7a3/ns8UNLRY7WEp+YsMjf+Ng84=
Subject key identifier:   75:51:6D:C1:BB:50:57:F8:65:E8:84:73:17:B9:12:34:04:EA:74:44
Certificate issuer:       /CN=7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9
Certificate serial:       43967AEAAE05441A83F249E50E08FEFF1ABCA1CE
Authority key identifier: 7B:3D:67:B8:BC:F8:6E:AB:99:78:72:5F:19:C0:82:8C:CC:57:B6:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/3133382e39372e36302e302f32342d3234203d3e20323634313330.roa
Signing time:             Thu 04 Apr 2024 00:20:00 +0000
ROA not before:           Thu 04 Apr 2024 00:15:00 +0000
ROA not after:            Thu 03 Apr 2025 00:20:00 +0000
asID:                     264130
IP address blocks:        138.97.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.crl
                          rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:96:7a:ea:ae:05:44:1a:83:f2:49:e5:0e:08:fe:ff:1a:bc:a1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9
        Validity
            Not Before: Apr  4 00:15:00 2024 GMT
            Not After : Apr  3 00:20:00 2025 GMT
        Subject: CN=75516DC1BB5057F865E8847317B9123404EA7444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:14:bb:02:c3:0b:b1:53:51:f1:c4:e3:1d:2e:
                    5a:6f:bf:f9:44:85:d8:f4:8e:51:82:f7:39:86:6b:
                    86:2d:a4:b3:01:c2:4f:6f:05:8d:07:c0:fd:3c:3b:
                    7a:28:dd:5d:34:61:06:31:14:be:f0:a4:f7:ff:1b:
                    1d:e9:4d:18:71:54:56:14:ad:46:cf:81:63:29:ab:
                    20:92:58:ad:34:cf:03:63:6e:eb:06:a0:4b:5c:fd:
                    f2:9b:12:c8:dd:7c:84:56:a6:8d:3c:ba:11:cc:7c:
                    54:a5:0d:9b:93:fb:86:7a:63:ac:57:37:60:8b:b8:
                    4a:f1:82:d7:95:8e:cb:e7:18:95:c4:05:35:e6:7e:
                    3c:6f:2b:35:66:32:8f:07:ed:06:d0:5c:96:ab:91:
                    6b:06:80:74:2c:ff:39:34:d6:14:16:a4:f0:5c:1e:
                    c6:26:32:f8:ab:fe:39:f5:f5:54:e7:ca:cd:e0:3d:
                    6d:6e:4b:f8:3a:c0:fb:5b:51:fd:98:79:bb:16:44:
                    0c:cc:fa:d2:35:cb:3f:c1:2e:39:7d:0f:69:8b:45:
                    2d:d5:ba:69:a4:47:e3:82:ad:93:1e:5b:83:2b:b7:
                    f8:4b:d4:86:9d:e0:42:51:4b:21:bd:54:f5:5f:6e:
                    b3:73:c0:fe:4c:98:5d:b9:3a:ba:40:cd:61:3a:98:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:51:6D:C1:BB:50:57:F8:65:E8:84:73:17:B9:12:34:04:EA:74:44
            X509v3 Authority Key Identifier:
                keyid:7B:3D:67:B8:BC:F8:6E:AB:99:78:72:5F:19:C0:82:8C:CC:57:B6:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B3D67B8BCF86EAB9978725F19C0828CCC57B6C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/1/3133382e39372e36302e302f32342d3234203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e3:31:02:c0:53:95:e5:ea:14:64:c8:07:2d:48:be:12:ca:
         84:ca:b7:47:bc:13:15:45:30:49:d0:5e:85:bb:19:44:99:e9:
         14:87:e2:eb:6d:61:ef:49:f3:25:b1:09:e2:99:31:da:2f:9b:
         19:62:3c:7d:7d:15:24:d7:43:cd:3b:7e:bc:0f:3c:58:65:d5:
         3e:35:79:db:e5:88:cd:a3:d5:aa:48:6a:b3:24:ab:b0:6d:4f:
         69:0f:37:a1:2d:82:c3:c5:89:49:2f:bc:05:e2:33:af:14:98:
         67:a9:ac:b5:df:b1:b4:e6:35:5d:51:cf:6c:eb:32:1b:84:35:
         06:aa:ec:5e:25:fc:ac:f6:82:dd:79:f0:f7:64:ae:68:ff:51:
         28:d0:3b:dd:a7:e6:08:2c:d2:4a:e6:80:a3:ba:11:a4:a4:12:
         e6:f2:59:54:5f:55:43:57:f7:85:15:5b:d1:b5:f6:31:aa:6f:
         fe:01:84:2d:8d:f6:63:5a:b4:c3:37:5c:9f:c5:ef:8a:89:df:
         70:68:de:b1:d2:68:3b:d4:ac:c8:6d:d9:93:9f:02:72:a1:88:
         d3:d6:b3:7b:df:09:ce:e7:fc:79:25:e8:5d:e2:80:07:b8:1d:
         4a:47:e4:63:1c:12:56:5c:b3:7c:b7:50:7f:69:57:dd:72:64:
         3f:66:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:26 2024 by rpki-client on console-fra.rpki-client.org