Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3133382e3230342e36342e302f32322d3234203d3e203533313831.roa
File:                     3133382e3230342e36342e302f32322d3234203d3e203533313831.roa (raw, json)
Hash identifier:          QPbps9KXzvs9fEEI2m3+irCqiTkdgPW5E0TT0oGnVKs=
Subject key identifier:   B8:61:9A:10:C0:3F:A9:FB:CD:AF:77:E1:03:DB:91:7E:28:A8:D7:05
Certificate issuer:       /CN=E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB
Certificate serial:       5FBA3D4457DC1A6ADC3378DB45DFC9A68A44DC52
Authority key identifier: E3:87:5F:4F:49:41:71:D8:D4:FF:E7:94:B4:2A:8B:5C:ED:1A:6D:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3133382e3230342e36342e302f32322d3234203d3e203533313831.roa
Signing time:             Thu 04 Apr 2024 09:58:19 +0000
ROA not before:           Thu 04 Apr 2024 09:53:19 +0000
ROA not after:            Thu 03 Apr 2025 09:58:19 +0000
asID:                     53181
IP address blocks:        138.204.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ba:3d:44:57:dc:1a:6a:dc:33:78:db:45:df:c9:a6:8a:44:dc:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB
        Validity
            Not Before: Apr  4 09:53:19 2024 GMT
            Not After : Apr  3 09:58:19 2025 GMT
        Subject: CN=B8619A10C03FA9FBCDAF77E103DB917E28A8D705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:85:3b:6d:23:68:46:1b:7a:c2:19:d1:ea:
                    7b:b3:4e:94:f4:e4:e4:d2:28:a3:5d:28:c8:37:40:
                    64:8a:39:e7:a3:60:fd:45:74:b6:58:76:d9:92:df:
                    f6:22:94:9e:15:5f:58:5f:99:0a:ab:14:b9:75:80:
                    69:e3:4d:9a:c6:91:5e:c8:23:c5:3c:5d:fa:c5:a0:
                    1f:41:07:0e:69:dc:b9:df:a4:da:bc:36:5e:26:1c:
                    0b:70:d4:26:65:dc:52:52:ff:d9:d3:cd:1f:05:03:
                    93:18:fc:76:30:a5:6c:fb:54:2e:de:3a:5b:03:66:
                    12:12:12:30:9e:b9:38:88:40:de:41:53:80:e8:09:
                    3c:2f:52:59:d3:54:99:29:e4:09:3e:22:2f:e9:8e:
                    77:67:fc:49:19:97:01:55:7b:fd:bb:d5:e8:6c:7c:
                    9b:a2:02:58:0c:38:63:45:38:da:31:d7:35:61:eb:
                    77:74:b7:03:5a:b9:ce:e4:cc:c6:c4:df:8d:da:5c:
                    c8:08:d8:0f:77:43:d6:4f:1b:1b:aa:35:cd:79:2b:
                    d7:82:77:95:26:58:1e:40:5b:17:e9:f0:91:70:0d:
                    96:43:cb:01:2b:1c:90:fe:10:fa:02:03:35:fb:42:
                    67:f1:c9:4f:0a:19:20:13:d2:84:eb:cc:b1:5a:76:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:9A:10:C0:3F:A9:FB:CD:AF:77:E1:03:DB:91:7E:28:A8:D7:05
            X509v3 Authority Key Identifier:
                keyid:E3:87:5F:4F:49:41:71:D8:D4:FF:E7:94:B4:2A:8B:5C:ED:1A:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3133382e3230342e36342e302f32322d3234203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:87:5b:81:1f:14:ea:02:22:dc:ea:05:55:e2:52:a8:b5:0e:
         a5:4e:c7:4a:de:14:88:77:f2:2f:f4:aa:5c:8a:3d:ab:82:c5:
         e5:27:4e:ae:30:d7:36:a2:11:63:43:5b:7f:df:de:e1:73:78:
         95:6f:4d:3e:e5:e7:3e:e6:ce:5a:a4:00:0d:ad:6b:cb:08:cf:
         6a:57:ef:f5:16:3b:fb:52:c4:b1:a8:d7:79:02:b9:e1:2a:07:
         ff:72:51:41:ae:e8:e3:18:ea:a6:90:6c:9c:e1:04:87:4f:c2:
         a0:e7:dc:89:7d:8b:97:12:e9:8b:9d:b1:cf:5c:23:7d:3e:cb:
         26:66:a9:9b:96:41:71:41:6a:9e:9c:c7:81:0d:bd:85:e6:83:
         8d:d4:1a:03:a0:33:24:cd:5b:18:34:d8:56:1b:94:9f:4c:27:
         73:c0:50:94:41:5c:6b:92:c7:5e:20:cf:b1:30:38:0e:b0:a9:
         2d:d4:ab:e0:a2:ae:6c:be:34:34:4d:85:c7:30:6f:d7:09:56:
         15:23:30:11:0d:b6:b4:45:53:bd:5c:e2:d7:13:aa:df:80:c3:
         49:23:ad:52:01:5b:a3:3c:5f:e6:62:32:e1:d4:fc:6e:41:57:
         e1:32:ff:11:1f:9a:57:81:f6:6e:e8:52:b9:90:b8:fe:a6:9e:
         b6:30:da:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:37 2024 by rpki-client on console-fra.rpki-client.org