Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa
File:                     3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa (raw, json)
Hash identifier:          kFQxsU0UFUvtahpp4kxJYIWE9DIUfRkzAES4uuOZPtI=
Subject key identifier:   F7:F4:5C:9D:EE:86:E0:97:CA:A4:7D:A3:F1:BB:8B:32:89:5E:31:B7
Certificate issuer:       /CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
Certificate serial:       66C26942FC16EDA38A7BE5FD5DB74D04364280A2
Authority key identifier: 4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa
Signing time:             Wed 03 Apr 2024 18:39:17 +0000
ROA not before:           Wed 03 Apr 2024 18:34:17 +0000
ROA not after:            Wed 02 Apr 2025 18:39:17 +0000
asID:                     267220
IP address blocks:        138.219.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl
                          rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c2:69:42:fc:16:ed:a3:8a:7b:e5:fd:5d:b7:4d:04:36:42:80:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
        Validity
            Not Before: Apr  3 18:34:17 2024 GMT
            Not After : Apr  2 18:39:17 2025 GMT
        Subject: CN=3082010A0282010100C5CC062DD8FEDC4DF5555C22E8CE5F0B955C2EFB333A3B33BD12F177AE7DD05E71A522EFFD1D73118C7891489EC9B27CC5122B0A7E9483E207DDDE27F87BFE9850583AAA9EE7CEF87830258BB68916577065DAFA83872613EFBD4884A80E30A7BE88CA46DA42186785EC6E12E5F0FF2B662424056FA316D93879B686CC2DE15FE28BCFBCD995C3129BA00D2CB1BB7C5EAA9CFC34C68CC90DBA3515566EAF04355C46231F1A7573182650E66853DF3A36AEC91044C13C56EA60C215B5F49B9CDF5FCCAEC99CCB57A1BEFA1A2057A02B8215DD8A7404958DEBDD256A619017CFF917BCD4AC02739459CBC3BA069F028066C6BAE954733677A453AE54D89EFE83890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:06:2d:d8:fe:dc:4d:f5:55:5c:22:e8:ce:
                    5f:0b:95:5c:2e:fb:33:3a:3b:33:bd:12:f1:77:ae:
                    7d:d0:5e:71:a5:22:ef:fd:1d:73:11:8c:78:91:48:
                    9e:c9:b2:7c:c5:12:2b:0a:7e:94:83:e2:07:dd:de:
                    27:f8:7b:fe:98:50:58:3a:aa:9e:e7:ce:f8:78:30:
                    25:8b:b6:89:16:57:70:65:da:fa:83:87:26:13:ef:
                    bd:48:84:a8:0e:30:a7:be:88:ca:46:da:42:18:67:
                    85:ec:6e:12:e5:f0:ff:2b:66:24:24:05:6f:a3:16:
                    d9:38:79:b6:86:cc:2d:e1:5f:e2:8b:cf:bc:d9:95:
                    c3:12:9b:a0:0d:2c:b1:bb:7c:5e:aa:9c:fc:34:c6:
                    8c:c9:0d:ba:35:15:56:6e:af:04:35:5c:46:23:1f:
                    1a:75:73:18:26:50:e6:68:53:df:3a:36:ae:c9:10:
                    44:c1:3c:56:ea:60:c2:15:b5:f4:9b:9c:df:5f:cc:
                    ae:c9:9c:cb:57:a1:be:fa:1a:20:57:a0:2b:82:15:
                    dd:8a:74:04:95:8d:eb:dd:25:6a:61:90:17:cf:f9:
                    17:bc:d4:ac:02:73:94:59:cb:c3:ba:06:9f:02:80:
                    66:c6:ba:e9:54:73:36:77:a4:53:ae:54:d8:9e:fe:
                    83:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F4:5C:9D:EE:86:E0:97:CA:A4:7D:A3:F1:BB:8B:32:89:5E:31:B7
            X509v3 Authority Key Identifier:
                keyid:4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/3133382e3231392e3138342e302f32322d3234203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:b4:c0:e9:4c:ab:cf:7c:5d:ef:1a:b8:94:04:36:0d:e3:7e:
         f9:e7:9b:02:d6:9c:10:16:02:3c:95:72:5f:dc:94:13:e1:18:
         dc:d9:3e:51:13:06:a8:8c:12:fa:a6:32:dc:b0:df:7e:d0:c8:
         3f:e6:e3:91:ca:98:bb:e1:4b:dd:78:d0:ce:71:f6:8c:7f:ed:
         fd:98:dd:ed:ac:32:70:05:b9:91:93:d0:de:85:43:17:8a:90:
         b4:f8:05:fb:a0:9c:57:c5:99:f5:09:d6:8c:99:cd:f3:13:0a:
         4d:aa:d1:62:28:62:1b:82:13:cc:48:c0:88:30:be:d5:11:fb:
         79:b9:75:18:da:1b:69:ca:25:e1:a3:8c:89:e3:8b:d2:bf:2f:
         69:1f:50:88:24:c8:4e:9e:f1:a1:b0:d0:87:9f:28:c2:fe:3d:
         44:ec:a8:bf:ca:cb:a4:85:f1:52:09:fe:19:ff:3f:81:89:e4:
         49:44:d8:d9:54:f3:c4:27:3b:d0:2a:e3:91:fd:38:f4:34:34:
         07:93:0f:5d:32:30:a5:a0:60:c8:2d:91:26:e0:c9:08:5d:d3:
         65:8b:76:49:f7:ba:f5:b2:16:02:bc:46:b1:39:5b:bf:18:aa:
         cd:45:a6:40:05:45:0a:7b:22:9c:de:80:69:3e:92:84:a3:81:
         1b:4c:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:41 2024 by rpki-client on console-fra.rpki-client.org