Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa
File:                     3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa (raw, json)
Hash identifier:          Tn4WZxP7vRIVY0/1PLnSoPJWIErqaHS10q0zQg8LLko=
Subject key identifier:   2C:B1:63:92:98:1E:E4:3F:0E:8B:1A:B5:E3:7A:C6:8C:EE:3B:C7:87
Certificate issuer:       /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial:       0FF1A23F5A4CB9E2E9C0D1730E44A5D9BC075955
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa
Signing time:             Wed 03 Apr 2024 18:31:13 +0000
ROA not before:           Wed 03 Apr 2024 18:26:13 +0000
ROA not after:            Wed 02 Apr 2025 18:31:13 +0000
asID:                     264332
IP address blocks:        138.185.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
                          rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f1:a2:3f:5a:4c:b9:e2:e9:c0:d1:73:0e:44:a5:d9:bc:07:59:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
        Validity
            Not Before: Apr  3 18:26:13 2024 GMT
            Not After : Apr  2 18:31:13 2025 GMT
        Subject: CN=2CB16392981EE43F0E8B1AB5E37AC68CEE3BC787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:37:88:ed:f0:9b:a7:93:cf:91:9c:9b:d9:
                    0d:aa:a6:7a:85:2b:30:45:f6:50:0e:23:ee:83:1b:
                    b5:ae:b1:c4:0c:40:fc:77:e3:ce:81:47:58:a7:27:
                    ca:b3:4a:de:57:8a:d3:9a:e3:fd:5f:1d:f1:76:3e:
                    b0:03:64:35:87:c0:7c:61:5f:1a:60:7f:b3:de:4f:
                    70:03:73:79:f1:a8:24:6a:47:34:5f:79:ba:8b:c3:
                    e5:22:1f:58:6c:ef:22:c3:f1:bb:a5:17:8e:76:89:
                    1f:1a:56:47:8a:c4:8c:95:e9:1f:7c:ba:0b:32:0d:
                    b2:aa:92:55:9a:b0:11:6c:24:57:8e:16:49:01:d3:
                    49:5c:ea:b1:c7:0c:0c:7b:47:e4:ca:81:13:e1:3e:
                    91:7e:87:62:08:22:66:c3:42:24:9b:be:e8:c0:77:
                    61:3e:65:9e:50:6d:45:e2:0c:04:03:69:37:fc:82:
                    07:80:81:d2:33:16:35:bd:22:63:31:d5:48:d2:55:
                    c7:bd:2e:03:03:da:ac:31:d6:e8:92:a5:97:f7:dd:
                    2a:4b:a5:a4:de:1b:d6:fe:df:b0:55:e6:88:12:45:
                    e9:24:20:a6:59:10:14:e8:29:75:64:04:da:83:c9:
                    08:c2:ae:a0:82:97:44:54:fa:43:61:fe:9f:0c:d6:
                    a8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B1:63:92:98:1E:E4:3F:0E:8B:1A:B5:E3:7A:C6:8C:EE:3B:C7:87
            X509v3 Authority Key Identifier:
                keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32322e302f32332d3233203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:3c:dc:91:c5:44:55:e4:b4:cf:40:57:0c:5d:ba:11:56:e7:
         01:3c:c9:5e:7a:a6:78:ad:ea:13:09:44:a5:35:a6:58:00:a3:
         90:92:f4:40:e1:30:d2:a6:75:e9:d0:03:5a:31:d2:87:d3:d5:
         de:ec:65:95:08:54:e1:75:83:06:78:db:6a:c7:03:6b:3a:52:
         50:ec:af:3a:6e:28:92:fc:d4:4c:16:dc:5c:58:26:cb:f3:a3:
         c8:a2:98:a8:eb:3d:78:7e:c9:04:0b:a2:72:3e:11:7a:f2:6e:
         0d:9c:46:00:18:f9:49:af:21:04:0a:fd:08:2b:13:3b:b5:90:
         74:48:8f:ae:c8:a6:05:2b:85:86:ca:b2:ce:aa:aa:ea:25:41:
         82:ca:4c:bc:04:6f:83:a2:d9:99:0d:07:1c:be:ef:11:fa:1f:
         e1:55:ae:f1:8c:2e:8f:5b:0c:06:02:5e:df:ee:de:46:37:af:
         f5:73:db:4d:d8:92:2c:88:90:47:cd:a6:5a:e1:2f:62:60:88:
         4a:6e:2d:cf:d9:6f:60:1f:73:4f:4d:e4:29:c2:e4:02:c0:60:
         f0:8d:d5:54:24:a6:f0:77:eb:43:f7:63:49:84:18:17:f6:cd:
         16:66:c7:57:86:82:9b:b6:c2:38:c4:c6:ec:3a:a0:76:e6:fd:
         1e:ac:79:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:39 2024 by rpki-client on console-fra.rpki-client.org