Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e39342e3137392e302f32342d3234203d3e20323733363833.roa
File:                     3133382e39342e3137392e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          z4yG05T+dLsivkVsvyYdLS5n9sG2WGpwM5LsIZcRs8k=
Subject key identifier:   C5:EA:CD:22:E6:EC:BA:1A:DC:AF:F0:14:50:09:44:6B:12:9F:77:65
Certificate issuer:       /CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
Certificate serial:       45CDD993C5979C986045EB100E7AF9CBF1E3FFC7
Authority key identifier: EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e39342e3137392e302f32342d3234203d3e20323733363833.roa
Signing time:             Sat 05 Oct 2024 00:16:59 +0000
ROA not before:           Sat 05 Oct 2024 00:11:59 +0000
ROA not after:            Sat 04 Oct 2025 00:16:59 +0000
asID:                     273683
IP address blocks:        138.94.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cd:d9:93:c5:97:9c:98:60:45:eb:10:0e:7a:f9:cb:f1:e3:ff:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5
        Validity
            Not Before: Oct  5 00:11:59 2024 GMT
            Not After : Oct  4 00:16:59 2025 GMT
        Subject: CN=C5EACD22E6ECBA1ADCAFF0145009446B129F7765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:4d:27:43:36:84:bc:48:26:fe:f8:5b:eb:
                    bc:42:f1:a8:17:76:fd:6b:54:d7:ca:63:8e:0f:f1:
                    ab:58:c9:e8:c7:fd:81:df:7b:61:1c:1e:cc:df:fa:
                    f7:d6:ce:c9:73:6e:dd:16:d2:7a:fa:b8:73:8a:c8:
                    63:ab:f7:9a:cd:0b:94:41:12:b3:3a:c1:45:77:64:
                    91:3a:d5:64:f2:32:c3:a8:1d:28:23:ec:d9:02:a5:
                    a8:54:6d:3a:9e:96:b7:98:d5:3d:ea:39:f0:bc:46:
                    94:29:d1:f7:04:82:ec:00:8d:c8:fa:72:aa:92:ed:
                    20:d4:4a:ad:87:1d:ce:0e:7e:0a:04:55:d6:5a:cd:
                    82:45:76:c8:2f:5f:d4:44:14:3e:fc:36:92:f1:b2:
                    3c:e1:7c:d8:29:c9:45:90:7e:21:2b:81:00:ac:82:
                    7c:30:69:48:a1:31:8e:c4:91:24:6c:df:fe:43:8e:
                    52:14:55:27:b2:a6:00:54:81:f0:f6:fa:37:97:03:
                    9e:40:2a:d2:af:ac:8a:1e:15:78:50:a9:c4:1a:c5:
                    e4:b9:80:08:7a:59:ee:9f:da:83:09:35:a1:57:d0:
                    0d:a2:ac:8e:cc:7b:ce:68:e1:b6:cd:8c:50:35:fe:
                    63:07:ed:1d:4d:ba:06:2e:8a:90:ac:4a:07:9e:65:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EA:CD:22:E6:EC:BA:1A:DC:AF:F0:14:50:09:44:6B:12:9F:77:65
            X509v3 Authority Key Identifier:
                keyid:EF:6C:B2:C4:9C:32:45:F8:CC:33:A1:8F:08:A1:0C:F9:B3:63:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF6CB2C49C3245F8CC33A18F08A10CF9B363ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/3133382e39342e3137392e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:7d:da:80:19:e6:65:17:9d:15:a3:21:1a:71:e1:bd:8b:e6:
         49:4e:3f:39:ff:c1:93:5b:aa:63:8f:83:7d:20:cb:cf:08:87:
         fe:aa:9e:dd:56:b7:35:67:28:2d:16:51:c4:28:db:32:78:81:
         c0:58:ed:c4:5d:74:c8:0f:e6:2c:89:e7:5d:2f:08:ee:0c:f0:
         31:69:2c:71:80:1a:49:56:28:d9:bf:99:bf:47:80:45:88:8f:
         60:77:74:98:ac:02:42:7f:64:2c:21:f2:f3:93:52:d6:43:86:
         a5:db:13:e0:64:a2:1f:e4:9f:f4:86:7d:bb:f1:9c:b9:15:f1:
         3a:78:4a:f6:dd:20:89:62:8f:47:31:d1:63:55:1c:66:bd:cb:
         60:fc:b0:c4:63:ac:05:4b:fb:a7:52:2f:29:07:77:11:19:82:
         e2:17:7c:24:eb:60:83:3b:ee:80:d5:91:53:5c:46:a3:e2:48:
         02:d9:fa:2b:a1:60:39:9c:f6:6b:2c:db:ac:71:c9:9f:23:8c:
         b4:70:52:6b:a7:02:9e:c5:c7:00:b4:27:f8:9e:ac:9c:1f:e3:
         39:6d:e9:18:11:59:b7:2f:2f:e4:a9:25:f0:b1:55:d8:49:76:
         5d:09:bb:a0:ad:b0:55:7d:27:fb:2c:a9:78:09:9a:29:49:50:
         df:e2:22:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org