Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137332e302f32342d3234203d3e20323634323337.roa
File:                     3133382e3131372e3137332e302f32342d3234203d3e20323634323337.roa (raw, json)
Hash identifier:          j3gj3ryHvdAuOwN3Q2JWez1Zby9FQ98byvLz7yw1WyQ=
Subject key identifier:   F4:5A:13:DA:29:C6:3C:FF:ED:AF:A9:1A:59:08:12:53:D3:CF:56:BB
Certificate issuer:       /CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
Certificate serial:       043DC818B11519649590A27AE3CD73719B063641
Authority key identifier: 66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137332e302f32342d3234203d3e20323634323337.roa
Signing time:             Wed 03 Apr 2024 18:33:15 +0000
ROA not before:           Wed 03 Apr 2024 18:28:15 +0000
ROA not after:            Wed 02 Apr 2025 18:33:15 +0000
asID:                     264237
IP address blocks:        138.117.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl
                          rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3d:c8:18:b1:15:19:64:95:90:a2:7a:e3:cd:73:71:9b:06:36:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
        Validity
            Not Before: Apr  3 18:28:15 2024 GMT
            Not After : Apr  2 18:33:15 2025 GMT
        Subject: CN=F45A13DA29C63CFFEDAFA91A59081253D3CF56BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cd:f9:a5:b5:fe:8b:ba:c8:81:33:b6:18:ae:
                    29:58:ec:a4:a0:46:fb:dc:94:59:87:61:cb:c6:d2:
                    85:a3:90:bf:e9:42:6e:b9:44:46:ce:ad:31:b4:80:
                    33:54:4a:ac:16:d9:82:63:1c:ee:d1:ca:36:62:95:
                    0b:46:7f:50:0c:6e:65:4c:88:71:fc:99:f4:db:35:
                    89:f8:6e:c7:63:7b:4c:3e:24:1b:3f:74:f2:fc:d8:
                    e6:e6:78:71:a1:03:89:37:cb:6e:0c:17:94:e7:75:
                    e4:d2:ab:57:3a:1d:a5:31:b1:67:ea:24:9b:90:80:
                    c0:41:4b:ab:b7:be:e3:bc:3f:8f:81:91:09:d5:4b:
                    92:0b:b0:da:8e:0d:51:45:47:89:15:92:41:56:ef:
                    a3:67:d8:af:e1:f4:4e:7e:10:77:b2:01:0a:ab:d8:
                    76:e9:e2:6a:99:49:a3:9f:32:6a:27:ae:db:ac:fc:
                    97:d5:c5:3f:69:28:f4:1e:85:65:07:4c:49:91:53:
                    77:bd:b7:7c:d5:22:29:3f:4d:d7:27:5d:65:43:e6:
                    c3:8e:a3:81:09:d8:38:4d:8b:51:c0:92:35:27:90:
                    9f:ff:b4:73:04:c4:aa:9f:e9:f4:42:3f:cc:f3:b2:
                    f5:e6:0d:5e:01:bd:a2:eb:e8:8e:76:c1:d5:4f:88:
                    05:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5A:13:DA:29:C6:3C:FF:ED:AF:A9:1A:59:08:12:53:D3:CF:56:BB
            X509v3 Authority Key Identifier:
                keyid:66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137332e302f32342d3234203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:f0:73:ad:52:06:a3:95:86:96:f3:1b:c6:88:9d:87:28:
         b8:0c:74:5d:e6:f8:a6:37:cc:28:38:d1:82:3b:bf:3b:f5:ba:
         b1:bb:e9:f9:5a:0f:a9:23:81:73:74:ad:a3:0a:2c:70:f3:09:
         ff:74:ff:88:fe:77:fd:81:6b:50:65:82:d4:3c:cb:98:80:58:
         93:50:a0:a3:57:97:d9:d0:f7:d0:d6:19:cc:e1:41:54:06:cd:
         3a:4d:d9:c4:74:58:34:e9:db:30:39:99:f7:28:b8:42:90:bb:
         61:31:0c:eb:db:23:46:b8:32:bb:15:fe:57:6a:96:50:4b:10:
         f6:f2:c1:e0:ae:16:50:f5:12:a1:35:af:ef:b5:8c:03:1b:03:
         f5:40:43:22:95:83:35:1b:fe:b7:75:d2:a1:e1:d0:16:46:03:
         9c:0c:24:d1:5f:33:88:95:55:0a:a1:bc:7e:53:12:9d:9f:82:
         b4:4c:93:b8:d4:fd:b2:a9:54:f6:2e:ea:fa:69:03:7d:84:9c:
         c1:86:f3:e7:e7:5b:9f:12:4e:e0:d9:ac:18:f5:1e:5d:8f:80:
         c2:c6:20:0c:d8:92:1a:d1:06:06:be:e5:0b:d0:d6:5a:63:d2:
         2d:e5:97:ab:37:d0:c3:8b:cf:09:06:4f:68:51:d9:10:6b:20:
         eb:58:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:48 2024 by rpki-client on console-fra.rpki-client.org