Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130372e302f32342d3234203d3e203533313037.roa
File:                     3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          TOzMhiT+Pddf2RjaqkSfHqTDsC6Vja8b3U9qWNLM+CU=
Subject key identifier:   41:F8:5A:6D:1E:D0:01:2C:F5:67:A1:CB:2E:A5:84:E6:35:9C:4E:7F
Certificate issuer:       /CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
Certificate serial:       6FB2C37CADFAF61905E3979CDAAC8CF7AD9B98C6
Authority key identifier: 71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130372e302f32342d3234203d3e203533313037.roa
Signing time:             Thu 04 Apr 2024 00:20:23 +0000
ROA not before:           Thu 04 Apr 2024 00:15:23 +0000
ROA not after:            Thu 03 Apr 2025 00:20:23 +0000
asID:                     53107
IP address blocks:        138.97.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl
                          rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b2:c3:7c:ad:fa:f6:19:05:e3:97:9c:da:ac:8c:f7:ad:9b:98:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1
        Validity
            Not Before: Apr  4 00:15:23 2024 GMT
            Not After : Apr  3 00:20:23 2025 GMT
        Subject: CN=41F85A6D1ED0012CF567A1CB2EA584E6359C4E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:15:5d:5d:43:b9:fb:d2:db:4a:5a:30:fc:
                    43:0b:85:46:5b:71:80:5d:b5:2b:a4:d2:8f:59:7a:
                    93:3b:52:94:5e:dd:9e:97:a7:f5:e4:ff:eb:90:d5:
                    ff:ec:5c:ce:c0:59:0a:ad:97:01:e5:07:d8:38:70:
                    80:d4:16:33:78:f1:e7:0a:43:62:d4:94:f9:e2:ce:
                    86:4a:28:2b:ef:a2:1f:c1:c2:d6:d1:b3:91:70:3b:
                    7c:83:0f:af:83:4b:d2:94:df:13:f3:62:00:c5:c7:
                    5a:8c:0b:dc:67:ad:25:2d:fe:45:31:3c:2e:10:a6:
                    db:ac:7c:e9:a2:c7:d8:17:51:c9:17:b8:93:eb:8e:
                    2b:5d:c3:26:ec:7a:25:85:53:1f:2e:d5:2c:7c:26:
                    eb:c2:23:a8:6f:57:d7:68:5b:31:19:aa:33:4f:82:
                    60:1f:29:7d:e3:98:e6:d2:a5:8e:4a:a1:30:d0:8c:
                    cf:6e:28:48:57:05:20:78:c8:f9:18:42:3c:6c:61:
                    b8:13:c0:6d:08:be:b7:c0:74:a3:44:aa:cf:4c:19:
                    00:55:3e:7b:1f:64:bf:e3:7b:03:0d:56:2e:30:94:
                    f4:0f:e3:8b:e8:12:4c:7d:c1:54:4e:ac:0f:2c:f0:
                    e6:40:49:5c:e1:00:16:a2:b3:74:99:26:5a:a9:69:
                    18:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F8:5A:6D:1E:D0:01:2C:F5:67:A1:CB:2E:A5:84:E6:35:9C:4E:7F
            X509v3 Authority Key Identifier:
                keyid:71:25:BE:DD:FE:C2:9C:0A:4C:F5:91:E5:EB:40:83:8B:FE:3C:7A:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7125BEDDFEC29C0A4CF591E5EB40838BFE3C7AC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/1/3133382e39372e3130372e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:5f:00:cc:c3:c1:59:6d:50:3c:03:83:a0:09:75:2c:04:b7:
         5d:3c:b2:9f:11:da:fa:dd:13:03:73:25:5c:47:32:7a:4b:4f:
         58:82:21:72:b9:a2:db:00:7e:a7:e4:27:8a:00:dc:fc:bc:49:
         51:69:d4:dc:a4:c0:91:88:32:4d:62:48:8a:50:e1:ca:6f:58:
         70:68:dc:3a:52:84:e5:87:10:e8:34:82:70:d1:0c:5f:62:2a:
         ce:ae:97:d7:ae:19:96:b1:ab:da:c0:2f:c2:17:eb:39:27:f1:
         46:33:a6:fe:f1:0f:f1:ee:d3:c0:22:03:ac:d1:33:2a:9c:16:
         07:7e:a9:0d:4e:f6:28:d4:dd:1c:1e:2d:0b:4e:af:64:5d:e1:
         aa:5a:61:e9:ab:b3:9e:1f:9f:af:2f:16:3d:3f:f1:88:da:5d:
         a7:67:53:1f:12:f6:26:24:3c:05:6c:8b:e0:e3:18:35:63:a4:
         be:9d:26:b9:08:55:47:d6:a8:ce:2c:00:38:ce:0f:d6:68:87:
         e4:10:8f:76:d0:37:12:98:69:0c:a9:48:93:d6:45:1d:9e:5c:
         eb:34:26:ac:32:80:61:42:c7:df:5f:30:ee:0b:a0:7c:63:62:
         cb:bc:a5:01:3d:2f:21:a5:35:73:90:c9:8f:63:db:1c:12:f4:
         2d:14:06:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org