Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWoEjDQRqmJT2Yi4u4AZ7VWFahnpix9tH2PVXfQMyGA4/0/3133382e3231392e3130302e302f32322d3235203d3e20323633393431.roa
File:                     3133382e3231392e3130302e302f32322d3235203d3e20323633393431.roa (raw, json)
Hash identifier:          +k1hrKd6tOQvk/05mtJNzqYIsvpq+j2CgoK7LCpLC/s=
Subject key identifier:   B6:82:A2:51:D1:B8:75:F3:75:C6:3B:E5:CA:DA:E3:CA:31:54:68:56
Certificate issuer:       /CN=15454F5864506215FD2C79471D5D512C400CB724
Certificate serial:       761D2A3B444C22D69FE2B6A6D915C2168E4DD602
Authority key identifier: 15:45:4F:58:64:50:62:15:FD:2C:79:47:1D:5D:51:2C:40:0C:B7:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15454F5864506215FD2C79471D5D512C400CB724.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWoEjDQRqmJT2Yi4u4AZ7VWFahnpix9tH2PVXfQMyGA4/0/3133382e3231392e3130302e302f32322d3235203d3e20323633393431.roa
Signing time:             Sun 10 Nov 2024 16:29:56 +0000
ROA not before:           Sun 10 Nov 2024 16:24:56 +0000
ROA not after:            Sun 09 Nov 2025 16:29:56 +0000
asID:                     263941
IP address blocks:        138.219.100.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWoEjDQRqmJT2Yi4u4AZ7VWFahnpix9tH2PVXfQMyGA4/0/15454F5864506215FD2C79471D5D512C400CB724.crl
                          rsync://rpki-repo.registro.br/repo/EWoEjDQRqmJT2Yi4u4AZ7VWFahnpix9tH2PVXfQMyGA4/0/15454F5864506215FD2C79471D5D512C400CB724.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15454F5864506215FD2C79471D5D512C400CB724.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1d:2a:3b:44:4c:22:d6:9f:e2:b6:a6:d9:15:c2:16:8e:4d:d6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15454F5864506215FD2C79471D5D512C400CB724
        Validity
            Not Before: Nov 10 16:24:56 2024 GMT
            Not After : Nov  9 16:29:56 2025 GMT
        Subject: CN=B682A251D1B875F375C63BE5CADAE3CA31546856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:25:91:13:15:83:c0:d2:a7:8f:43:a7:84:
                    8e:cf:b8:3e:5f:28:24:de:e7:89:12:26:13:44:70:
                    dc:0f:64:5e:fb:0b:ba:28:34:4f:52:9b:af:d5:ac:
                    9e:f4:ad:bd:aa:e8:0b:06:23:6d:d7:c0:29:35:57:
                    21:83:d2:d3:46:25:1e:18:31:a1:36:55:17:18:07:
                    70:93:f6:a0:28:bb:34:64:a4:67:c8:83:73:45:40:
                    b0:1a:98:bd:38:72:ff:87:66:c3:45:25:0f:1a:e8:
                    45:5f:81:1a:b8:10:b2:43:02:ba:1e:d8:e4:6a:84:
                    95:ab:cc:b0:cf:93:8a:a4:19:d8:24:ca:48:7a:c5:
                    3e:57:58:9e:b7:de:71:90:48:7c:c0:9d:de:5a:71:
                    b3:cd:72:fb:cf:e2:4e:40:b5:e5:9b:72:24:08:ae:
                    63:be:82:e8:de:9d:b7:1e:f6:7d:de:e5:80:d8:6e:
                    9c:3c:c5:d0:2a:01:9a:60:ac:a8:b8:f5:a4:85:43:
                    9d:29:04:3c:d6:e0:00:3a:25:bf:d5:53:e9:7a:ec:
                    73:26:32:ce:c3:c3:b3:a3:c7:8b:21:7a:8b:3c:e1:
                    21:75:bb:12:04:2f:da:3c:a1:cf:0a:3b:df:1a:9a:
                    f9:3c:7b:cf:db:da:f3:58:83:a6:0e:f6:24:e6:89:
                    28:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:82:A2:51:D1:B8:75:F3:75:C6:3B:E5:CA:DA:E3:CA:31:54:68:56
            X509v3 Authority Key Identifier:
                keyid:15:45:4F:58:64:50:62:15:FD:2C:79:47:1D:5D:51:2C:40:0C:B7:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWoEjDQRqmJT2Yi4u4AZ7VWFahnpix9tH2PVXfQMyGA4/0/15454F5864506215FD2C79471D5D512C400CB724.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15454F5864506215FD2C79471D5D512C400CB724.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWoEjDQRqmJT2Yi4u4AZ7VWFahnpix9tH2PVXfQMyGA4/0/3133382e3231392e3130302e302f32322d3235203d3e20323633393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:cd:dc:fd:38:cd:12:95:21:5e:34:e1:07:73:2d:55:65:96:
         35:ad:30:36:87:92:62:25:5b:8c:16:bb:d6:80:19:ae:09:83:
         36:09:e9:0e:58:18:48:a4:00:3d:0d:73:dc:51:0f:24:dc:97:
         69:a2:6d:3a:ac:53:f9:fc:01:0d:c8:00:93:91:86:af:6b:33:
         e8:fe:f3:0c:d0:48:74:17:27:70:4e:b5:2b:91:3e:a1:f3:19:
         a7:9e:23:ea:5f:f5:a0:30:d2:b9:19:4c:95:2a:78:60:43:93:
         2f:5d:1a:eb:cb:ec:09:b7:fd:32:f2:16:41:63:25:a8:89:77:
         19:4c:ed:46:9b:ca:53:a4:19:a1:c7:fb:23:45:a0:87:9a:cd:
         6c:32:07:ff:fc:00:c0:3c:b4:18:27:b2:9f:c2:cd:a0:48:66:
         4c:c0:90:b9:d6:23:69:c3:d5:4b:0d:7d:e8:d7:60:46:cc:9b:
         c4:ce:20:4d:a5:3a:2a:62:c5:58:52:10:fc:a2:ff:f8:da:8b:
         21:38:d7:85:70:66:5b:e1:00:79:f5:fa:a2:84:75:73:77:1f:
         0b:69:7c:af:ad:0f:65:9e:48:16:d1:24:7f:81:26:91:ff:ae:
         4e:0d:1a:fd:aa:82:e7:66:2a:87:db:a9:31:d4:23:df:1b:b8:
         45:e6:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:55 2024 by rpki-client on console-ams.rpki-client.org