Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31332e302f32342d3234203d3e20323634313131.roa
File:                     3133382e39372e31332e302f32342d3234203d3e20323634313131.roa (raw, json)
Hash identifier:          W5cJwY/1xNwn8/rbliqP0o8cTGGJ5EA5Uh2BZMaZEPY=
Subject key identifier:   96:29:82:F3:65:80:2C:84:81:FD:5C:72:D1:17:07:72:A8:64:56:E8
Certificate issuer:       /CN=732008C67B67B29496E25CA0E43402A0B56D183A
Certificate serial:       33AA556B56CA745EFA1697FE62AB20AEDA0EA531
Authority key identifier: 73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31332e302f32342d3234203d3e20323634313131.roa
Signing time:             Tue 30 Apr 2024 14:28:20 +0000
ROA not before:           Tue 30 Apr 2024 14:23:20 +0000
ROA not after:            Tue 29 Apr 2025 14:28:20 +0000
asID:                     264111
IP address blocks:        138.97.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl
                          rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:aa:55:6b:56:ca:74:5e:fa:16:97:fe:62:ab:20:ae:da:0e:a5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732008C67B67B29496E25CA0E43402A0B56D183A
        Validity
            Not Before: Apr 30 14:23:20 2024 GMT
            Not After : Apr 29 14:28:20 2025 GMT
        Subject: CN=962982F365802C8481FD5C72D1170772A86456E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:af:9c:06:d5:2d:f8:d4:e4:fe:47:29:75:34:
                    c0:72:6d:a6:90:b5:6a:76:98:51:55:56:60:21:2c:
                    0d:3a:d8:33:f2:04:1d:fa:c2:da:bf:d7:df:9f:c1:
                    8b:55:01:d7:8b:59:e8:52:8c:85:cb:b5:eb:c7:da:
                    ef:ef:29:30:fd:54:00:5b:ca:fd:36:e3:0a:a0:cb:
                    c6:cc:e9:35:73:a5:27:6a:77:fa:b1:16:85:f1:ce:
                    b7:58:51:8b:49:aa:da:3d:99:9f:0d:36:a8:be:47:
                    7a:c5:58:dc:d9:90:6c:25:c8:a6:68:63:11:13:58:
                    d3:98:a9:ff:55:da:5b:71:1a:26:21:de:60:8d:64:
                    94:f0:bf:5f:27:8f:85:72:3e:ab:98:83:6b:b3:8e:
                    1c:f0:1d:3c:06:87:78:91:ec:bc:70:a7:0d:8d:a5:
                    0c:50:55:4c:d0:99:9d:c0:39:eb:9b:a2:8e:87:a2:
                    74:80:03:c8:2f:67:2e:6e:98:bc:26:11:fe:5e:c1:
                    78:34:6e:32:6c:bf:bb:43:e4:18:51:29:d9:52:4f:
                    cf:6a:28:22:d5:09:f1:1e:59:9f:70:47:ff:b5:0a:
                    8c:aa:6c:ee:45:f1:1c:02:54:27:11:f6:ad:f6:58:
                    86:a5:41:af:5f:f4:2a:b9:e0:0b:e1:25:cc:32:53:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:29:82:F3:65:80:2C:84:81:FD:5C:72:D1:17:07:72:A8:64:56:E8
            X509v3 Authority Key Identifier:
                keyid:73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31332e302f32342d3234203d3e20323634313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:92:be:88:e4:e3:6e:db:3b:0d:42:90:41:3c:6b:27:9b:ef:
         6f:8e:5e:c7:9b:11:42:6d:65:e8:db:ef:07:c7:90:6e:28:44:
         57:3b:e4:8d:86:a5:77:8a:ef:8a:72:f7:c1:6e:7f:5b:0d:c9:
         69:92:b5:b8:9a:4a:3a:b4:f1:70:2e:53:66:26:e2:99:68:e1:
         60:35:0f:b4:3f:fb:6c:c5:27:aa:05:c6:9c:c1:82:93:b8:62:
         44:ce:da:ec:4a:41:23:28:ba:a5:07:16:04:7b:92:a0:27:d1:
         eb:32:ce:5b:52:2e:69:a3:12:4c:a3:80:bb:9f:a6:8c:a3:d1:
         25:f5:88:13:f2:d2:82:65:a4:07:03:d7:00:83:b6:3a:8b:77:
         81:08:eb:20:92:ed:aa:44:79:6a:df:91:87:9e:12:ae:31:41:
         75:cf:5e:a9:04:22:a6:44:46:f6:8d:cf:12:8e:8a:1a:42:b8:
         30:0d:13:08:f3:b1:36:31:d7:bf:55:10:f6:7c:db:47:c2:99:
         1b:47:bf:87:25:0f:16:34:43:b7:e7:6b:0d:4f:0e:8b:11:50:
         72:e4:17:57:52:0b:7a:bf:4b:dc:d5:55:ea:02:95:26:b5:8b:
         e4:0d:17:46:29:a9:79:67:b2:98:0f:45:bb:72:e9:07:5c:d2:
         57:40:a6:69
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUM6pVa1bKdF76Fpf+YqsgrtoOpTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyMDA4QzY3QjY3QjI5NDk2RTI1Q0EwRTQzNDAyQTBC
NTZEMTgzQTAeFw0yNDA0MzAxNDIzMjBaFw0yNTA0MjkxNDI4MjBaMDMxMTAvBgNV
BAMTKDk2Mjk4MkYzNjU4MDJDODQ4MUZENUM3MkQxMTcwNzcyQTg2NDU2RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUr5wG1S341OT+Ryl1NMBybaaQ
tWp2mFFVVmAhLA062DPyBB36wtq/19+fwYtVAdeLWehSjIXLtevH2u/vKTD9VABb
yv024wqgy8bM6TVzpSdqd/qxFoXxzrdYUYtJqto9mZ8NNqi+R3rFWNzZkGwlyKZo
YxETWNOYqf9V2ltxGiYh3mCNZJTwv18nj4VyPquYg2uzjhzwHTwGh3iR7Lxwpw2N
pQxQVUzQmZ3AOeuboo6HonSAA8gvZy5umLwmEf5ewXg0bjJsv7tD5BhRKdlST89q
KCLVCfEeWZ9wR/+1CoyqbO5F8RwCVCcR9q32WIalQa9f9Cq54AvhJcwyUz7DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlimC82WALISB/Vxy0RcHcqhkVugwHwYDVR0j
BBgwFoAUcyAIxntnspSW4lyg5DQCoLVtGDowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDI0MThFRXRXNFpycGlIeVFUWVhqWFdXQTQ5NGk4TG8yd01nbzFQdmVG
c1ovMC83MzIwMDhDNjdCNjdCMjk0OTZFMjVDQTBFNDM0MDJBMEI1NkQxODNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMjAwOEM2N0I2N0IyOTQ5
NkUyNUNBMEU0MzQwMkEwQjU2RDE4M0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gyNDE4RUV0VzRacnBpSHlRVFlYalhXV0E0OTRpOExvMndNZ28xUHZlRnNaLzAv
MzEzMzM4MmUzOTM3MmUzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAimENMA0GCSqGSIb3DQEBCwUAA4IBAQCzkr6I5ONu
2zsNQpBBPGsnm+9vjl7HmxFCbWXo2+8Hx5BuKERXO+SNhqV3iu+KcvfBbn9bDclp
krW4mko6tPFwLlNmJuKZaOFgNQ+0P/tsxSeqBcacwYKTuGJEztrsSkEjKLqlBxYE
e5KgJ9HrMs5bUi5poxJMo4C7n6aMo9El9YgT8tKCZaQHA9cAg7Y6i3eBCOsgku2q
RHlq35GHnhKuMUF1z16pBCKmREb2jc8SjooaQrgwDRMI87E2Mde/VRD2fNtHwpkb
R7+HJQ8WNEO352sNTw6LEVBy5BdXUgt6v0vc1VXqApUmtYvkDRdGKal5Z7KYD0W7
cukHXNJXQKZp
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org