Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e39342e3137362e302f32322d3232203d3e20323733363833.roa
File:                     3133382e39342e3137362e302f32322d3232203d3e20323733363833.roa (raw, json)
Hash identifier:          ZZpDu04kU4oWoC4uIAJET/qYZoyMQKitoxZ2fF7q3H8=
Subject key identifier:   7F:75:75:DD:B1:EC:9C:C2:96:38:4D:CB:5B:7E:4B:F3:24:E8:19:64
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       6755435888EB763FDDD58258EF3AEADB7EA15F9D
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e39342e3137362e302f32322d3232203d3e20323733363833.roa
Signing time:             Fri 04 Oct 2024 04:12:31 +0000
ROA not before:           Fri 04 Oct 2024 04:07:31 +0000
ROA not after:            Fri 03 Oct 2025 04:12:31 +0000
asID:                     273683
IP address blocks:        138.94.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:55:43:58:88:eb:76:3f:dd:d5:82:58:ef:3a:ea:db:7e:a1:5f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  4 04:07:31 2024 GMT
            Not After : Oct  3 04:12:31 2025 GMT
        Subject: CN=7F7575DDB1EC9CC296384DCB5B7E4BF324E81964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:64:84:86:6e:2a:98:7a:dd:0e:08:d5:1e:80:
                    01:ae:66:ca:41:4e:f5:99:83:db:f5:5f:c8:a9:cb:
                    0b:c0:59:70:59:c8:c2:56:86:8c:48:3a:ba:10:5f:
                    9a:91:28:bc:5f:37:a0:9f:5b:27:81:98:7b:48:93:
                    84:70:19:c5:5c:4a:8b:c9:70:4e:0c:77:e5:d6:27:
                    55:fd:09:20:c4:ce:ad:9d:4f:b3:02:7c:33:35:ea:
                    1f:93:f8:96:24:d5:a5:2e:6c:30:e5:3d:58:72:24:
                    7f:89:e6:5d:c3:76:3b:72:27:72:18:f7:3a:d7:1e:
                    7a:ae:2d:e5:c9:10:71:55:4b:85:4d:6a:65:07:bf:
                    85:84:bf:09:cf:91:bf:41:0d:74:ae:5e:0b:38:8d:
                    5b:9a:e2:00:bd:18:3c:66:46:77:2b:52:20:20:4a:
                    22:37:78:db:d8:54:d2:8f:8a:a9:1b:5c:0c:24:b2:
                    cf:0f:c6:3b:45:b1:a3:8c:c8:9a:19:41:d6:dc:65:
                    c6:5d:26:af:1d:c4:2c:b6:72:db:82:44:fc:73:07:
                    2c:da:65:dc:74:da:72:30:ea:31:ff:90:d1:b1:54:
                    04:67:2e:94:12:75:86:78:1a:bb:4c:10:d2:15:d8:
                    a5:c3:ff:55:1a:ad:38:60:16:49:1d:5b:16:49:07:
                    dd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:75:75:DD:B1:EC:9C:C2:96:38:4D:CB:5B:7E:4B:F3:24:E8:19:64
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e39342e3137362e302f32322d3232203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:00:f4:82:6d:86:4d:40:e6:a9:23:4b:7f:a3:83:9e:aa:a2:
         37:ec:10:62:11:f1:3c:c3:97:4a:65:18:25:68:c8:7d:fa:32:
         9c:8b:27:9b:2a:13:76:5c:49:88:bc:fc:bb:ee:d6:61:76:e6:
         14:3a:1d:ac:df:70:0a:4f:16:6e:a4:4e:4f:66:6c:fc:9c:e8:
         b6:52:2b:51:e0:71:5e:34:16:05:3a:5c:38:d2:6b:16:69:c5:
         67:c3:0d:b4:6a:a0:0d:45:f6:35:5a:ea:2f:2d:55:65:87:2b:
         84:ad:ef:c1:cd:db:e7:e1:87:f7:a2:c0:46:a6:20:82:ab:41:
         a3:38:5f:5f:bf:be:9d:20:f7:e0:00:66:c3:0d:9d:59:ec:61:
         d9:c3:42:7e:fd:f9:59:23:51:64:a0:e4:54:73:80:d6:71:04:
         0b:a9:a4:f8:ee:da:81:d9:a0:10:00:54:f5:f7:05:b5:8d:d2:
         c6:9e:7b:94:9a:e1:ce:99:36:c9:05:75:6c:c2:ad:fd:fa:0f:
         3e:87:fe:91:6a:90:12:fe:15:12:10:b3:59:18:7d:29:5e:06:
         82:8b:f8:26:79:79:60:f0:66:88:36:a5:d7:1d:39:06:2c:4c:
         22:8b:4c:2f:f2:2d:af:f2:0f:2b:93:f6:6c:7b:d4:95:7c:27:
         67:80:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:47 2024 by rpki-client on console-ams.rpki-client.org