Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32332d3234203d3e20323634333332.roa
File:                     3133382e3138352e32302e302f32332d3234203d3e20323634333332.roa (raw, json)
Hash identifier:          UC7wasZeeJNMImRpg1cf9O4KX5x2jg+CR7e8RBWNzAc=
Subject key identifier:   2B:18:98:62:9D:60:FF:70:FF:39:54:91:40:58:2D:41:DD:32:3B:83
Certificate issuer:       /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial:       136A0C385037D1CDCE7DF8D81FDB54D28A660D1C
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32332d3234203d3e20323634333332.roa
Signing time:             Wed 03 Apr 2024 18:31:12 +0000
ROA not before:           Wed 03 Apr 2024 18:26:12 +0000
ROA not after:            Wed 02 Apr 2025 18:31:12 +0000
asID:                     264332
IP address blocks:        138.185.20.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
                          rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6a:0c:38:50:37:d1:cd:ce:7d:f8:d8:1f:db:54:d2:8a:66:0d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
        Validity
            Not Before: Apr  3 18:26:12 2024 GMT
            Not After : Apr  2 18:31:12 2025 GMT
        Subject: CN=2B1898629D60FF70FF39549140582D41DD323B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6b:4a:6b:ee:e8:b2:a1:ea:5a:b5:ca:16:3f:
                    af:3f:28:e7:f2:65:03:31:e2:bb:2d:b2:90:79:35:
                    57:42:14:46:be:57:11:23:9c:f3:38:85:4b:88:b2:
                    09:25:27:a8:88:17:af:6b:ef:17:6c:8e:a4:82:28:
                    1d:ad:95:5b:b8:78:17:a8:4b:6e:70:1a:0d:93:9f:
                    86:bc:3d:09:08:fc:e5:c6:69:a1:69:06:11:a9:40:
                    ea:30:61:08:dc:e6:bc:6f:e0:c9:9b:1b:5b:1c:53:
                    73:fc:3e:f4:9b:5d:6d:5e:c7:97:f3:28:f9:ca:08:
                    64:96:2b:3b:ee:23:5e:ba:08:90:89:48:2a:32:3c:
                    aa:7f:c7:d4:76:c6:aa:d4:1c:e7:96:eb:99:ce:84:
                    d5:a7:b7:03:88:b6:6c:62:59:f0:67:11:75:5b:99:
                    99:53:cb:3b:b0:c7:e2:e7:ab:c4:1f:e1:a2:f7:bf:
                    e0:6e:ff:82:ab:ac:1a:73:00:f6:f0:9f:35:68:cb:
                    8a:a8:f2:95:53:3b:8a:9e:e9:4a:2c:93:3b:69:b5:
                    28:d7:49:27:25:26:c0:0b:9c:44:70:64:b5:24:19:
                    47:cf:66:bb:72:8d:21:54:d1:2d:17:33:a7:b1:b9:
                    e1:10:21:85:b8:de:29:70:ef:b2:90:82:22:ed:a6:
                    17:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:18:98:62:9D:60:FF:70:FF:39:54:91:40:58:2D:41:DD:32:3B:83
            X509v3 Authority Key Identifier:
                keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32302e302f32332d3234203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:87:60:88:2e:75:48:d7:42:b7:d6:5f:d5:7e:68:ca:58:4f:
         ab:64:6e:57:9e:02:5f:45:c8:fe:b7:13:f6:96:89:04:4d:b8:
         01:60:20:9a:de:ff:03:ea:5a:28:87:b3:14:b2:bd:81:36:95:
         78:fa:e4:72:a9:99:e8:47:0b:a2:49:fa:a0:73:35:f1:25:14:
         06:79:86:2c:f3:a4:93:7d:50:23:59:09:91:4c:39:97:27:94:
         03:84:ea:2b:5b:80:c9:35:11:01:30:42:be:62:8e:c5:c1:a5:
         17:dd:4e:9d:8b:fa:46:7e:64:ca:c8:5c:13:21:2e:cb:0a:5e:
         c7:a9:10:9a:dd:64:f6:bd:da:04:87:0d:8a:3e:a3:a2:48:06:
         13:c1:a1:55:84:04:ea:67:7b:f6:29:a5:36:f3:fe:75:9f:55:
         a3:ad:e6:f5:af:65:97:53:db:6e:25:66:2b:62:e2:3d:32:22:
         5a:a4:e8:7d:1e:25:cb:92:8f:8b:27:8d:d7:91:7a:03:30:d0:
         7d:fd:cf:2a:02:16:61:7b:bb:82:05:33:db:b3:74:03:e9:0d:
         39:11:9a:fa:ba:e3:65:22:da:00:95:b8:a6:1b:3f:6c:49:99:
         d2:9a:dc:2a:6c:9c:76:20:2d:56:fc:dd:c8:3c:d3:18:4e:f7:
         81:49:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org