Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31322e302f32342d3234203d3e20323634313131.roa
File:                     3133382e39372e31322e302f32342d3234203d3e20323634313131.roa (raw, json)
Hash identifier:          A1Atc4ohI6pkVRrrQz8YCR3eGkLSwH0WVR3CBdCuACo=
Subject key identifier:   AA:29:A0:FD:16:41:24:E1:DE:45:A8:26:2F:13:FE:0C:00:69:39:6A
Certificate issuer:       /CN=732008C67B67B29496E25CA0E43402A0B56D183A
Certificate serial:       5BA14F0A50D281F5A3CAFC7E2E8038CFCA61E7C2
Authority key identifier: 73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31322e302f32342d3234203d3e20323634313131.roa
Signing time:             Tue 30 Apr 2024 14:27:40 +0000
ROA not before:           Tue 30 Apr 2024 14:22:40 +0000
ROA not after:            Tue 29 Apr 2025 14:27:40 +0000
asID:                     264111
IP address blocks:        138.97.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl
                          rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a1:4f:0a:50:d2:81:f5:a3:ca:fc:7e:2e:80:38:cf:ca:61:e7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732008C67B67B29496E25CA0E43402A0B56D183A
        Validity
            Not Before: Apr 30 14:22:40 2024 GMT
            Not After : Apr 29 14:27:40 2025 GMT
        Subject: CN=AA29A0FD164124E1DE45A8262F13FE0C0069396A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:78:b4:6f:de:77:8e:8f:2c:8d:e2:56:9e:
                    0c:a5:c4:52:82:9f:25:79:ef:ac:a4:a9:bb:7d:65:
                    3a:2a:6b:6a:ca:3e:d0:36:5e:40:41:55:89:09:83:
                    fb:4a:7d:e9:c4:02:02:39:ef:97:95:d8:82:f0:7d:
                    0a:1b:f7:ac:7b:a6:5e:3e:02:9b:8f:84:4f:7e:2d:
                    d6:6d:c0:79:0d:bc:f2:6c:15:c8:e6:ad:e0:32:77:
                    f5:3d:13:13:05:b6:9d:45:52:f8:be:0e:9d:43:69:
                    fd:a3:14:69:ac:d9:09:69:98:12:57:d8:90:79:c8:
                    77:81:ac:0a:44:15:3a:78:9d:4c:e1:ce:bd:54:69:
                    2a:ee:4e:67:a1:bc:d2:a8:74:6d:c1:7b:8a:92:7c:
                    05:05:f4:9f:f6:c4:f3:65:df:1a:91:5d:17:74:b4:
                    03:ae:e7:1e:03:d1:25:83:2c:1c:ed:31:93:0e:f7:
                    a5:cd:42:69:57:3f:b0:ef:4e:27:b7:5c:51:e0:d2:
                    3d:d2:29:a9:4b:ed:93:dc:fe:64:9a:a8:f7:16:c0:
                    c7:10:9d:d9:47:21:86:5c:59:7d:8f:29:be:c3:29:
                    44:cd:10:42:a4:c3:06:35:f6:d0:1d:f3:bc:03:d4:
                    64:f5:69:9f:40:75:80:2c:44:b3:af:a2:66:bc:84:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:29:A0:FD:16:41:24:E1:DE:45:A8:26:2F:13:FE:0C:00:69:39:6A
            X509v3 Authority Key Identifier:
                keyid:73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31322e302f32342d3234203d3e20323634313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:15:c0:d0:15:a5:94:99:72:6a:1c:bb:ab:e6:c8:2e:6b:4e:
         c8:8d:0e:76:ef:f5:1d:aa:31:7b:14:b0:da:1f:10:a8:81:7b:
         8e:c2:7b:2a:6d:fe:35:8e:63:fb:ae:8b:ac:ce:69:21:db:23:
         df:05:2b:fc:83:ef:3e:67:85:73:26:05:3b:22:5b:15:3c:e1:
         b0:0e:37:4d:54:22:28:f3:bf:91:5b:91:ec:da:c1:56:2f:af:
         f9:b2:ff:7a:46:5c:64:55:b2:1b:8e:69:5f:87:0c:f1:f5:1b:
         04:05:5f:59:3a:3c:37:38:49:46:b9:56:9d:55:48:24:e0:78:
         69:6e:87:59:3c:ea:28:81:e8:ed:68:78:1c:f2:b1:a2:f4:f3:
         ac:1f:5e:0f:6f:cc:c6:6a:f8:ae:c7:55:68:fc:78:7f:b1:5f:
         3b:c8:7c:3f:ee:72:d9:30:c5:45:41:eb:29:96:16:9e:87:15:
         7a:29:36:16:bd:d7:a2:24:a9:9e:6f:36:e2:58:28:ee:c9:e2:
         aa:be:74:ed:56:19:d5:05:10:33:44:11:f8:80:fa:e8:99:8f:
         05:c0:af:26:8b:c3:49:58:45:d8:60:34:e7:4b:0f:29:91:83:
         d4:f2:fb:42:7b:50:47:fe:19:b6:d6:e5:a1:19:cb:d9:29:25:
         56:9d:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org