Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31342e302f32332d3233203d3e20323634313131.roa
File:                     3133382e39372e31342e302f32332d3233203d3e20323634313131.roa (raw, json)
Hash identifier:          o3g9MuKQRO7l5VVIQVc/Y7RZ19uLGArveOLkFv3DHDw=
Subject key identifier:   B3:BE:EF:C3:9E:54:AB:0B:81:2D:A5:F7:4C:E6:94:12:65:54:E8:77
Certificate issuer:       /CN=732008C67B67B29496E25CA0E43402A0B56D183A
Certificate serial:       1AE990681016D656D16AB5FE3E15C1041502E19B
Authority key identifier: 73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31342e302f32332d3233203d3e20323634313131.roa
Signing time:             Tue 30 Apr 2024 12:54:14 +0000
ROA not before:           Tue 30 Apr 2024 12:49:14 +0000
ROA not after:            Tue 29 Apr 2025 12:54:14 +0000
asID:                     264111
IP address blocks:        138.97.14.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl
                          rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e9:90:68:10:16:d6:56:d1:6a:b5:fe:3e:15:c1:04:15:02:e1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732008C67B67B29496E25CA0E43402A0B56D183A
        Validity
            Not Before: Apr 30 12:49:14 2024 GMT
            Not After : Apr 29 12:54:14 2025 GMT
        Subject: CN=B3BEEFC39E54AB0B812DA5F74CE694126554E877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:22:4e:48:04:62:22:32:ac:31:40:c7:c7:
                    b9:4c:e8:6a:e2:86:f1:00:4c:2c:6e:42:e2:0e:54:
                    c6:37:16:b1:dc:5d:29:e3:65:cd:f5:09:48:18:85:
                    de:4a:4b:f6:36:7c:b8:fb:7a:78:b4:16:52:80:e9:
                    95:11:06:3b:2b:be:02:51:dc:79:a6:3d:c5:9f:fe:
                    19:a5:37:00:81:42:3a:ab:d7:5e:4a:f5:2a:a1:7a:
                    9b:6f:82:32:16:8f:2e:d1:6f:00:51:c7:bc:fa:ce:
                    cf:6b:9e:85:f6:ea:7b:0a:7a:cd:a8:8e:82:f2:a8:
                    ed:39:7f:58:63:f2:4d:50:fd:39:57:ee:89:e0:3b:
                    9a:da:6a:ec:95:09:32:da:b6:4d:25:be:a5:9e:af:
                    ce:71:a5:48:40:ac:af:73:59:c4:2c:86:d6:6d:e9:
                    26:10:0c:a9:3f:a6:b1:9e:49:ec:52:23:f5:88:1a:
                    58:a9:f4:b8:30:e9:cb:a8:a0:2b:72:10:69:53:2e:
                    1d:d0:77:6a:16:a0:2e:bc:2b:a0:c8:b1:35:9b:ba:
                    7b:9a:b8:e1:08:70:b4:72:9a:1a:4a:d0:44:bb:9d:
                    6c:44:83:89:20:1b:2e:40:a8:75:bc:db:17:ab:a4:
                    81:37:cb:86:68:a1:4a:6e:45:a2:f0:5b:1e:e2:3b:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BE:EF:C3:9E:54:AB:0B:81:2D:A5:F7:4C:E6:94:12:65:54:E8:77
            X509v3 Authority Key Identifier:
                keyid:73:20:08:C6:7B:67:B2:94:96:E2:5C:A0:E4:34:02:A0:B5:6D:18:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/732008C67B67B29496E25CA0E43402A0B56D183A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732008C67B67B29496E25CA0E43402A0B56D183A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2418EEtW4ZrpiHyQTYXjXWWA494i8Lo2wMgo1PveFsZ/0/3133382e39372e31342e302f32332d3233203d3e20323634313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:be:8d:d9:61:f4:19:e4:a1:aa:d8:82:f5:76:87:0f:7a:8e:
         a8:ba:f6:e6:20:7c:3c:ba:09:2e:ff:c2:95:12:2e:d6:fb:95:
         ca:6e:e4:d5:bc:53:3c:d4:bb:f2:7d:5e:85:cc:24:cb:bf:95:
         c3:5e:f2:61:6f:c7:e8:ab:68:35:38:b9:12:84:0b:5d:c5:d9:
         7f:38:f7:48:8a:6a:8a:72:ae:da:26:b7:3b:9e:c9:0d:9a:d5:
         48:3a:32:f5:cd:dc:0b:6b:32:98:fb:9b:f7:48:14:85:86:a6:
         a4:09:04:f9:c9:77:ba:29:78:c9:88:62:86:53:f7:8b:5e:17:
         dd:d9:62:0f:bb:82:ff:96:f8:7f:f0:56:d9:b7:41:d5:4f:57:
         92:12:eb:86:40:de:88:55:1d:c4:5d:12:2c:11:41:b5:09:d9:
         79:ef:f4:21:6c:74:83:f3:86:ae:64:0d:dc:78:a5:fd:4b:ee:
         af:de:e0:c1:54:98:8e:47:c8:70:1a:40:2c:df:4e:4c:8e:92:
         18:25:36:80:83:62:97:e3:f6:3a:35:5e:d2:a6:0d:32:ae:4e:
         b5:59:f7:13:f9:fd:0d:59:ae:a0:b5:b5:42:cd:06:7b:8f:46:
         06:21:37:02:58:99:7c:65:79:4e:b2:0f:50:39:bc:34:5c:c8:
         ea:0d:48:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org