Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa
File:                     3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa (raw, json)
Hash identifier:          pNg8gvjLBJEFrkXeTjg04ExBEmB+fNDhsZib20mQAX8=
Subject key identifier:   E1:2B:A4:5B:4A:17:68:71:A8:8B:0B:99:A4:C2:81:74:C9:64:4D:3C
Certificate issuer:       /CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
Certificate serial:       51B30ED217DC854C907B69CF81FC26C21C6AD74A
Authority key identifier: 42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa
Signing time:             Wed 03 Apr 2024 22:03:53 +0000
ROA not before:           Wed 03 Apr 2024 21:58:53 +0000
ROA not after:            Wed 02 Apr 2025 22:03:53 +0000
asID:                     264196
IP address blocks:        138.97.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl
                          rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b3:0e:d2:17:dc:85:4c:90:7b:69:cf:81:fc:26:c2:1c:6a:d7:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42361EAB494B759A64EFEB313189F9E2DF6603C8
        Validity
            Not Before: Apr  3 21:58:53 2024 GMT
            Not After : Apr  2 22:03:53 2025 GMT
        Subject: CN=E12BA45B4A176871A88B0B99A4C28174C9644D3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4f:fc:5e:e7:75:1f:e8:e2:72:2e:77:72:8c:
                    85:3b:a2:e6:d1:66:09:39:49:d1:08:a6:4d:06:ec:
                    5e:a9:e8:19:89:fa:a8:34:5d:ff:b3:ba:2d:37:60:
                    47:b7:ed:a6:42:10:89:19:78:0e:cb:da:d9:24:0a:
                    39:a8:55:55:68:f2:57:1c:8d:3c:7b:98:c9:69:42:
                    16:48:67:91:16:c6:ff:13:fe:ac:db:0a:50:f4:96:
                    41:63:a6:1b:80:b7:2d:0b:02:c6:57:a1:df:c1:48:
                    6b:32:c9:1d:1a:f2:2c:83:84:88:e3:03:a3:90:b1:
                    8c:13:d9:55:0c:87:59:b0:c8:a0:b5:b5:f8:13:3b:
                    f2:6f:b7:2d:fd:13:ea:f5:f3:66:0d:5a:74:0e:c7:
                    25:b1:53:03:fd:59:9d:ea:b6:e7:3f:41:37:7d:f1:
                    bb:58:07:c9:4f:6f:45:b1:05:3c:3a:70:93:26:01:
                    d7:54:d4:75:9a:2b:b1:99:90:64:fd:79:9b:6a:21:
                    66:7f:4f:c6:92:85:2b:ff:a7:7f:ed:8d:55:77:ca:
                    e5:4e:a4:0f:79:a3:e0:b7:44:3a:16:e2:b9:5c:6d:
                    0b:2d:6e:6f:27:f0:5e:0d:9b:a8:2e:51:1b:b9:19:
                    96:56:75:dd:9b:01:e6:0a:67:7c:0d:f2:ef:4e:3a:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2B:A4:5B:4A:17:68:71:A8:8B:0B:99:A4:C2:81:74:C9:64:4D:3C
            X509v3 Authority Key Identifier:
                keyid:42:36:1E:AB:49:4B:75:9A:64:EF:EB:31:31:89:F9:E2:DF:66:03:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42361EAB494B759A64EFEB313189F9E2DF6603C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/1/3133382e39372e3230342e302f32322d3234203d3e20323634313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:04:9c:8d:3b:a9:f3:ab:c3:9e:9d:f1:1d:61:9b:ff:e9:f2:
         c5:cb:a3:b5:14:71:2b:be:01:e9:2a:22:38:04:3b:39:9f:52:
         89:9d:87:64:65:e1:f4:61:e9:9c:78:1e:2b:27:83:b8:ec:cb:
         88:58:de:42:ea:e5:fb:30:db:42:23:7d:85:50:90:c4:16:03:
         d0:ae:df:c0:f2:3e:5c:da:55:14:4b:25:30:04:2c:6f:a9:0f:
         37:6c:3b:52:06:fe:8d:f4:71:7c:bb:ac:d5:9b:2f:ad:e8:9b:
         0e:90:c7:73:ac:4a:05:a5:75:51:49:07:32:c8:f8:1b:9a:79:
         01:8e:3b:9c:2a:9d:0f:44:a6:c9:f6:96:56:2a:78:fc:3c:a8:
         56:4a:3b:89:fe:18:d3:d2:24:55:c9:65:78:d4:e2:3a:76:43:
         a2:5b:af:34:86:06:0e:8f:33:11:00:7f:d3:6f:32:0c:ca:c9:
         6c:06:25:ab:4f:3a:89:ed:12:8a:bf:98:81:c9:92:9b:c2:c6:
         82:5f:7e:f8:05:00:55:b9:70:f6:68:d0:01:49:3c:a7:5f:ae:
         cd:12:08:70:50:a1:d6:2f:5e:ba:3d:6e:3a:18:11:ff:fd:b6:
         50:f5:e2:78:31:63:9a:29:ee:29:b9:d2:30:8b:3e:3a:2f:46:
         e1:05:0b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:20 2024 by rpki-client on console-ams.rpki-client.org