Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/3133382e3131372e3232362e302f32342d3234203d3e20323732323133.roa
File:                     3133382e3131372e3232362e302f32342d3234203d3e20323732323133.roa (raw, json)
Hash identifier:          0rfSxNLx+OskwXWv1hjoV+/f9LpQkz58RvxtwX1w33M=
Subject key identifier:   A5:C0:A6:0D:21:75:80:9F:0D:3B:B5:D2:37:8E:13:0E:41:E7:68:11
Certificate issuer:       /CN=2F80C6D34B32E20EB0237883044A376795281E67
Certificate serial:       4A336528FDA1C68BB4B40184E8785A22E43C2769
Authority key identifier: 2F:80:C6:D3:4B:32:E2:0E:B0:23:78:83:04:4A:37:67:95:28:1E:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F80C6D34B32E20EB0237883044A376795281E67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/3133382e3131372e3232362e302f32342d3234203d3e20323732323133.roa
Signing time:             Tue 16 Apr 2024 12:46:24 +0000
ROA not before:           Tue 16 Apr 2024 12:41:24 +0000
ROA not after:            Tue 15 Apr 2025 12:46:24 +0000
asID:                     272213
IP address blocks:        138.117.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/2F80C6D34B32E20EB0237883044A376795281E67.crl
                          rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/2F80C6D34B32E20EB0237883044A376795281E67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F80C6D34B32E20EB0237883044A376795281E67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:33:65:28:fd:a1:c6:8b:b4:b4:01:84:e8:78:5a:22:e4:3c:27:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F80C6D34B32E20EB0237883044A376795281E67
        Validity
            Not Before: Apr 16 12:41:24 2024 GMT
            Not After : Apr 15 12:46:24 2025 GMT
        Subject: CN=A5C0A60D2175809F0D3BB5D2378E130E41E76811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:5f:1b:0a:66:d3:9c:1c:35:3c:26:9b:e9:
                    25:8e:da:30:4d:7a:78:4d:d1:ca:c2:e1:d7:43:85:
                    42:0f:c1:24:ea:1c:ff:4e:68:35:96:3b:13:57:ca:
                    16:6e:6a:6c:ba:b6:2e:e0:3c:d8:45:dc:b7:66:6d:
                    53:00:22:17:95:32:80:6e:54:10:5e:d3:67:17:87:
                    d5:cf:77:12:dc:e5:2c:07:de:f6:02:fb:bc:48:09:
                    87:dc:c0:1c:8a:06:29:33:aa:0e:a9:1b:ec:59:00:
                    37:9c:ca:83:b2:42:3d:52:bf:27:be:04:98:6f:70:
                    f4:25:0a:0d:62:cb:b8:b0:b6:4f:10:b4:cd:dd:cc:
                    66:20:5b:26:df:a4:5e:36:06:c6:7c:e8:2e:83:45:
                    a4:98:9a:00:08:66:91:3e:83:47:56:6b:87:0d:91:
                    7e:46:e1:9c:8b:75:b3:e1:05:b9:33:0f:19:ec:0e:
                    7e:10:7e:4e:a1:a9:17:d3:ca:d9:28:33:c7:80:3e:
                    5e:49:da:2d:69:e7:97:7f:0f:5e:5f:bf:e2:a5:46:
                    04:10:21:21:53:60:53:e6:4e:0a:ff:72:39:ef:7d:
                    9e:8d:4b:c4:7f:7d:f8:c8:01:41:e7:bf:d0:6a:2d:
                    bb:84:24:73:d3:5c:4e:d0:5e:25:dd:c9:37:b0:d3:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C0:A6:0D:21:75:80:9F:0D:3B:B5:D2:37:8E:13:0E:41:E7:68:11
            X509v3 Authority Key Identifier:
                keyid:2F:80:C6:D3:4B:32:E2:0E:B0:23:78:83:04:4A:37:67:95:28:1E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/2F80C6D34B32E20EB0237883044A376795281E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F80C6D34B32E20EB0237883044A376795281E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/3133382e3131372e3232362e302f32342d3234203d3e20323732323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:2e:ec:47:88:fb:10:98:08:ad:79:e1:a8:52:e3:19:99:a3:
         bb:7a:ce:c7:3a:b8:30:d2:65:c6:f3:98:47:08:5c:12:5b:59:
         f7:99:53:a2:16:11:15:5f:ff:aa:c6:f5:8c:60:5d:da:01:b6:
         fd:20:e1:63:b8:67:f2:cf:fa:bc:42:f3:f5:98:7e:69:71:df:
         c3:58:0e:dc:a2:b4:56:56:f3:dc:4c:9b:05:b6:b8:99:2a:b3:
         5a:12:ad:fb:8c:8b:5f:5f:68:50:75:b9:09:fb:d0:96:21:d5:
         9e:fa:3d:48:7c:82:42:b0:49:30:97:79:03:8a:10:f2:1e:50:
         5b:e8:7e:30:f9:32:ed:ee:78:f9:0c:85:3d:3c:3b:23:1f:73:
         a5:19:2e:fa:2a:5a:3b:4f:fb:1a:7b:5a:8f:5b:5b:16:ec:3c:
         70:79:43:ec:74:58:d4:7a:3e:13:5b:b5:b9:9f:75:de:8c:67:
         54:99:61:5e:0b:d4:a4:62:73:89:7e:1f:ef:5e:cb:8a:4a:4b:
         9e:bf:71:e2:4e:45:d0:cd:b1:b1:65:27:b3:ef:f4:23:18:27:
         b1:19:14:05:9e:30:ee:5e:13:53:88:8b:8c:f8:5b:8a:fa:59:
         bb:dc:d2:92:33:9f:2b:41:67:ec:45:5d:df:d4:5e:b5:34:7a:
         ae:3d:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:07 2024 by rpki-client on console-fra.rpki-client.org