Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3133382e33362e3234382e302f32322d3234203d3e203631393334.roa
File:                     3133382e33362e3234382e302f32322d3234203d3e203631393334.roa (raw, json)
Hash identifier:          GF3pAO5M/wNeUGU4r7/UMpw5hqhxhn6iEYuO8R341UE=
Subject key identifier:   34:5A:56:E0:B1:22:1B:3B:24:0F:B8:CD:D5:79:3F:E3:7E:AF:1A:B3
Certificate issuer:       /CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
Certificate serial:       318854584D6861FB8CF3572821144E3BE32977BC
Authority key identifier: B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3133382e33362e3234382e302f32322d3234203d3e203631393334.roa
Signing time:             Fri 12 Jul 2024 17:46:21 +0000
ROA not before:           Fri 12 Jul 2024 17:41:21 +0000
ROA not after:            Fri 11 Jul 2025 17:46:21 +0000
asID:                     61934
IP address blocks:        138.36.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl
                          rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:88:54:58:4d:68:61:fb:8c:f3:57:28:21:14:4e:3b:e3:29:77:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204
        Validity
            Not Before: Jul 12 17:41:21 2024 GMT
            Not After : Jul 11 17:46:21 2025 GMT
        Subject: CN=345A56E0B1221B3B240FB8CDD5793FE37EAF1AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:84:d9:12:eb:32:50:28:c0:c5:66:44:13:
                    b9:14:3e:dc:5d:4c:74:ff:4e:7b:d3:8b:d7:9d:69:
                    b5:05:5e:6d:49:6f:3f:64:df:81:31:f5:eb:6e:ba:
                    ca:dd:4d:74:ba:f4:0a:ea:b2:95:20:1b:16:1d:42:
                    2e:63:d3:99:29:9c:ca:22:59:68:48:fd:e9:05:d9:
                    da:b2:34:6e:de:ba:d6:55:31:2e:ab:6b:a1:ad:d9:
                    ec:84:de:01:b9:d5:32:f2:ee:a6:4f:67:60:2c:5f:
                    8e:07:bb:ee:7a:a6:a6:1a:ae:37:e6:ab:70:76:f2:
                    70:36:43:7f:9c:54:e3:1f:f9:7f:5c:e0:f5:50:ee:
                    5b:fe:fc:86:b2:7c:3d:4a:bd:29:67:ee:05:95:e0:
                    7a:1c:fb:ef:24:34:61:9a:b6:7f:1c:04:4b:7b:b5:
                    18:1f:c0:ef:4b:37:61:0d:54:2b:0d:b1:a8:e2:ca:
                    b0:ac:04:23:93:38:85:1a:71:44:14:25:3d:62:fb:
                    e2:7c:ad:1a:b8:78:c3:6f:2a:0d:0c:ae:50:62:c6:
                    26:4b:8c:59:da:dd:62:e3:e6:62:d6:3d:ed:f9:62:
                    52:e2:32:aa:24:cc:67:80:2c:1b:b3:cc:40:96:12:
                    53:59:cf:38:5f:cd:73:69:8c:c1:a3:c1:d6:65:15:
                    a1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5A:56:E0:B1:22:1B:3B:24:0F:B8:CD:D5:79:3F:E3:7E:AF:1A:B3
            X509v3 Authority Key Identifier:
                keyid:B2:A1:BA:E4:B3:4B:FC:AC:AD:5F:1A:7C:AF:81:C3:FE:7E:9C:02:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2A1BAE4B34BFCACAD5F1A7CAF81C3FE7E9C0204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENZNLMwewHzpbJmgndnh9VuSSbK2cc1PUFXF4voAXCn4/0/3133382e33362e3234382e302f32322d3234203d3e203631393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:7b:76:1f:0e:63:db:5b:eb:7a:ca:82:4a:83:ee:8e:f8:36:
         42:bb:1a:14:00:5d:66:85:3e:b5:ed:e9:1f:ff:16:6a:d6:2c:
         c9:7e:97:03:f3:7c:80:c4:0a:ed:54:d0:80:e4:18:bc:36:a5:
         b5:73:58:c9:64:47:f9:5c:ec:bf:9e:ea:20:5f:fa:2c:11:1d:
         9d:d9:c2:44:7b:2b:95:e0:c3:10:2b:b1:66:ff:44:f3:62:3d:
         86:cf:3e:b0:08:41:28:4f:2c:7f:c7:7b:6e:01:b1:9a:12:9f:
         90:c1:76:71:d1:6f:4c:ff:bc:57:9f:66:94:3d:94:cd:e3:dc:
         e9:3a:27:41:55:73:75:e7:52:3b:30:12:91:9d:bf:02:3e:86:
         69:9e:2f:13:d2:7b:46:10:b5:84:0d:cc:32:d8:53:0a:08:59:
         6f:62:78:ff:63:8d:7e:b2:32:74:aa:38:b1:64:ea:46:ce:34:
         a0:e3:18:cb:05:98:d3:40:68:56:81:8d:b5:67:1c:b8:3c:21:
         ed:b8:e6:a3:98:e0:98:57:be:0b:79:21:d6:37:94:40:f3:f4:
         c0:be:c3:22:ff:00:fc:aa:0e:4d:27:fe:64:ef:7a:c5:14:12:
         a5:d9:46:f3:6f:2f:af:18:67:c0:44:29:ed:c0:f5:5b:39:58:
         eb:80:0a:63
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMYhUWE1oYfuM81coIRROO+Mpd7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBMUJBRTRCMzRCRkNBQ0FENUYxQTdDQUY4MUMzRkU3
RTlDMDIwNDAeFw0yNDA3MTIxNzQxMjFaFw0yNTA3MTExNzQ2MjFaMDMxMTAvBgNV
BAMTKDM0NUE1NkUwQjEyMjFCM0IyNDBGQjhDREQ1NzkzRkUzN0VBRjFBQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwlYTZEusyUCjAxWZEE7kUPtxd
THT/TnvTi9edabUFXm1Jbz9k34Ex9etuusrdTXS69ArqspUgGxYdQi5j05kpnMoi
WWhI/ekF2dqyNG7eutZVMS6ra6Gt2eyE3gG51TLy7qZPZ2AsX44Hu+56pqYarjfm
q3B28nA2Q3+cVOMf+X9c4PVQ7lv+/IayfD1KvSln7gWV4Hoc++8kNGGatn8cBEt7
tRgfwO9LN2ENVCsNsajiyrCsBCOTOIUacUQUJT1i++J8rRq4eMNvKg0MrlBixiZL
jFna3WLj5mLWPe35YlLiMqokzGeALBuzzECWElNZzzhfzXNpjMGjwdZlFaFtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNFpW4LEiGzskD7jN1Xk/436vGrMwHwYDVR0j
BBgwFoAUsqG65LNL/KytXxp8r4HD/n6cAgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU5aTkxNd2V3SHpwYkptZ25kbmg5VnVTU2JLMmNjMVBVRlhGNHZvQVhD
bjQvMC9CMkExQkFFNEIzNEJGQ0FDQUQ1RjFBN0NBRjgxQzNGRTdFOUMwMjA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyQTFCQUU0QjM0QkZDQUNB
RDVGMUE3Q0FGODFDM0ZFN0U5QzAyMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VOWk5MTXdld0h6cGJKbWduZG5oOVZ1U1NiSzJjYzFQVUZYRjR2b0FYQ240LzAv
MzEzMzM4MmUzMzM2MmUzMjM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzkzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCiiT4MA0GCSqGSIb3DQEBCwUAA4IBAQA2e3YfDmPb
W+t6yoJKg+6O+DZCuxoUAF1mhT617ekf/xZq1izJfpcD83yAxArtVNCA5Bi8NqW1
c1jJZEf5XOy/nuogX/osER2d2cJEeyuV4MMQK7Fm/0TzYj2Gzz6wCEEoTyx/x3tu
AbGaEp+QwXZx0W9M/7xXn2aUPZTN49zpOidBVXN151I7MBKRnb8CPoZpni8T0ntG
ELWEDcwy2FMKCFlvYnj/Y41+sjJ0qjixZOpGzjSg4xjLBZjTQGhWgY21Zxy4PCHt
uOajmOCYV74LeSHWN5RA8/TAvsMi/wD8qg5NJ/5k73rFFBKl2Ubzby+vGGfARCnt
wPVbOVjrgApj
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:12 2024 by rpki-client on console-ams.rpki-client.org