Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa
File:                     3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa (raw, json)
Hash identifier:          KwHfyHJGA2jfy/fGYWVNQXbOsqG9lWTfGeE+1YFPGMg=
Subject key identifier:   5B:F0:2A:A4:4A:53:2D:64:AE:32:22:D8:9F:12:A3:57:76:73:71:1D
Certificate issuer:       /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial:       626956366B7DE73D676EB9739BD4F426D4130FAC
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa
Signing time:             Wed 03 Apr 2024 18:31:13 +0000
ROA not before:           Wed 03 Apr 2024 18:26:13 +0000
ROA not after:            Wed 02 Apr 2025 18:31:13 +0000
asID:                     264332
IP address blocks:        138.185.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
                          rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:69:56:36:6b:7d:e7:3d:67:6e:b9:73:9b:d4:f4:26:d4:13:0f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
        Validity
            Not Before: Apr  3 18:26:13 2024 GMT
            Not After : Apr  2 18:31:13 2025 GMT
        Subject: CN=5BF02AA44A532D64AE3222D89F12A3577673711D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:9a:70:c5:b8:d8:f8:07:a2:96:96:76:5d:
                    49:91:f9:9d:ac:f3:d5:c1:e1:a5:63:f5:31:ca:77:
                    ad:79:74:7c:61:06:7a:d4:ff:57:40:1a:0e:dd:63:
                    7e:ab:bf:0f:47:e3:56:b2:b5:0b:58:b8:a8:41:18:
                    5d:e8:86:96:32:68:f7:35:6a:f2:fb:f0:a7:9e:4a:
                    8b:55:9d:45:72:0e:c6:79:ec:33:b2:cf:a8:4a:ce:
                    86:16:9c:4d:35:ad:d2:c5:91:6f:fb:16:0b:e8:eb:
                    e5:7f:de:c6:19:f5:24:b0:ea:d2:98:e3:34:4a:0d:
                    ae:2e:2f:5a:ab:10:5f:c1:60:9a:9b:70:d1:9c:86:
                    a5:a7:e2:89:77:01:0e:7f:6b:77:35:5e:bf:79:15:
                    a0:cd:96:9b:35:b5:54:dd:d5:26:91:5d:fe:7d:86:
                    5e:d6:31:5a:97:b5:f8:c9:2f:6d:84:3f:8d:9d:91:
                    61:b2:6f:1b:27:cb:f5:97:3a:7a:da:73:da:a4:9c:
                    1a:12:19:05:2e:4c:91:81:29:d2:69:4a:e6:64:46:
                    f8:97:13:7d:d2:bb:1a:3d:97:91:b8:10:30:f4:b2:
                    ee:43:df:87:7e:43:2d:c0:c6:75:08:a9:ad:68:0a:
                    c7:83:0e:f5:13:45:85:81:79:0e:99:17:d0:7d:b9:
                    fd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F0:2A:A4:4A:53:2D:64:AE:32:22:D8:9F:12:A3:57:76:73:71:1D
            X509v3 Authority Key Identifier:
                keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:cc:34:b9:f8:4e:49:a9:73:78:04:86:1a:75:eb:d0:da:5c:
         5d:ec:21:9a:f4:9d:61:a9:c9:81:0d:de:9b:b9:e0:ca:2c:ea:
         3d:97:61:b9:56:19:e4:92:78:18:5b:c2:db:68:94:ea:42:ee:
         c3:fb:6c:42:78:88:2d:05:e1:9f:0f:09:f5:a9:61:33:4b:46:
         f5:52:f8:3f:49:db:3d:9b:47:e6:b3:d5:c5:1d:4a:1a:1e:18:
         c4:ef:2b:2d:25:6f:52:43:74:19:59:db:86:42:10:0f:e9:53:
         c5:1e:03:d9:88:de:b3:7c:5b:2a:e3:0e:bf:c7:79:d9:a6:24:
         c5:52:61:23:6d:7c:12:06:b4:7e:08:9b:5e:e4:52:da:93:e6:
         31:06:06:7e:a0:88:1c:3e:1a:dc:c3:b9:80:33:c9:d7:50:27:
         1f:38:a6:f6:ef:a4:e8:f1:88:f6:4f:e6:b9:f8:b9:65:50:92:
         25:bc:76:6a:0b:87:28:26:0f:ad:12:94:ba:d4:ce:2c:86:35:
         c7:8b:cb:03:61:c7:f5:67:25:7d:b4:e6:2d:0b:15:af:9e:f9:
         13:6c:9c:53:48:74:51:e7:50:35:6e:34:dd:20:da:d6:73:89:
         2c:4e:0d:93:ff:0e:87:c0:26:4a:bc:08:d3:3c:d0:f5:11:03:
         8a:c0:fa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org