Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137342e302f32342d3234203d3e20323634323337.roa
File:                     3133382e3131372e3137342e302f32342d3234203d3e20323634323337.roa (raw, json)
Hash identifier:          iyFvMGDgrN6UCQ9LiuQKzkxHV5daV6CrBjTdY0/rCTs=
Subject key identifier:   2C:64:BC:D5:AC:8F:72:9E:AC:B8:5E:5A:B2:86:EE:77:D3:AB:71:AF
Certificate issuer:       /CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
Certificate serial:       529698CFC8E523D8CF9B912C0BD5150FD4358EDA
Authority key identifier: 66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137342e302f32342d3234203d3e20323634323337.roa
Signing time:             Wed 03 Apr 2024 18:33:15 +0000
ROA not before:           Wed 03 Apr 2024 18:28:15 +0000
ROA not after:            Wed 02 Apr 2025 18:33:15 +0000
asID:                     264237
IP address blocks:        138.117.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl
                          rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:96:98:cf:c8:e5:23:d8:cf:9b:91:2c:0b:d5:15:0f:d4:35:8e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
        Validity
            Not Before: Apr  3 18:28:15 2024 GMT
            Not After : Apr  2 18:33:15 2025 GMT
        Subject: CN=2C64BCD5AC8F729EACB85E5AB286EE77D3AB71AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:9a:c3:56:4a:59:c7:33:60:3e:9d:c9:6c:
                    11:8d:cd:f6:a1:fc:32:0d:03:eb:b4:2f:8f:2f:19:
                    a7:ee:66:e2:62:44:a8:38:17:cc:c0:7e:7e:6e:48:
                    29:16:16:2d:3d:fa:3e:73:e7:8e:3e:2c:72:e4:4c:
                    dd:8d:25:8a:d4:c4:2e:48:d4:f5:84:9a:42:58:4a:
                    0d:91:93:ba:4c:a8:af:cc:20:d1:88:ea:de:a4:c5:
                    cd:90:c8:0b:7f:e1:f3:29:ee:62:b2:bf:9e:ed:0b:
                    91:24:ae:aa:12:10:d1:12:d5:d7:3e:6a:a1:8f:3b:
                    e5:28:0b:44:f5:c0:30:ea:8a:0f:0e:36:c1:16:10:
                    6a:60:71:43:e2:fd:d1:0a:25:ce:73:e4:23:a4:6c:
                    a8:a2:ca:1e:19:af:ef:29:ca:84:88:67:81:c9:e0:
                    bc:58:85:51:32:80:34:9a:bb:0f:ee:7b:d8:80:3d:
                    a7:1f:2f:dd:35:ff:31:d0:65:f9:cf:c0:58:64:28:
                    54:96:45:46:70:f6:cf:58:f7:31:d5:35:30:6d:fa:
                    09:15:0f:9b:32:a2:49:d0:78:81:6a:e9:0a:e9:00:
                    a0:52:9b:61:47:23:71:20:91:24:70:5b:f1:34:13:
                    be:8a:13:43:ff:8f:0d:20:1b:6b:8a:27:08:f4:a6:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:64:BC:D5:AC:8F:72:9E:AC:B8:5E:5A:B2:86:EE:77:D3:AB:71:AF
            X509v3 Authority Key Identifier:
                keyid:66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/3133382e3131372e3137342e302f32342d3234203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:ec:fe:1d:fd:58:bb:af:b7:fc:d9:62:f9:ae:ad:f5:36:5f:
         be:ef:69:89:19:54:69:59:a6:79:19:4f:8b:15:8f:17:c8:f1:
         bb:95:1b:d8:ac:43:8c:a3:b0:c8:ca:eb:fd:56:98:04:c6:38:
         81:4c:41:e0:b9:65:c1:4a:68:25:1e:b6:49:de:dd:43:47:ea:
         9c:b6:07:74:b9:a3:c1:25:e9:f2:af:cc:30:98:03:99:42:3d:
         ee:bc:2a:cb:0c:de:64:f3:e1:30:2f:06:58:3e:33:a8:ec:6a:
         ad:1a:95:f7:6e:19:8c:bd:91:2c:2c:f9:d8:01:b5:1d:08:5c:
         fa:fa:a7:be:24:53:17:18:3f:e7:0d:58:63:3f:83:b3:6f:3b:
         f0:77:8d:6f:a1:86:ab:c5:cb:5d:78:f2:68:75:3a:e3:c0:62:
         ed:60:90:6d:cc:89:a5:90:85:ed:1e:98:ba:06:be:21:5c:9a:
         42:90:fe:2d:26:b2:fe:b6:e5:3e:3f:4d:53:7b:91:7e:38:68:
         98:82:fd:c8:37:36:ce:57:61:cb:07:8c:36:be:35:7a:c6:07:
         e2:5f:90:33:60:09:e2:f0:47:b1:f2:ca:c1:68:2a:52:78:85:
         b6:f3:20:4b:c1:17:f9:93:d2:42:34:49:62:59:82:14:8d:b4:
         70:da:98:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:21 2024 by rpki-client on console-ams.rpki-client.org