Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36332e302f32342d3234203d3e203631353733.roa
File:                     3133382e3132322e36332e302f32342d3234203d3e203631353733.roa (raw, json)
Hash identifier:          vEVxCDRi6ISb2iBPQJ7Bx6B10yqtrUZArxNqP67ImLA=
Subject key identifier:   FC:37:4D:B0:BE:40:20:8F:AE:3F:DA:28:B6:C1:D8:4D:68:01:47:B0
Certificate issuer:       /CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
Certificate serial:       12107A67F9C3F6280B6CEBE9951E86325053DBAB
Authority key identifier: DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36332e302f32342d3234203d3e203631353733.roa
Signing time:             Fri 31 May 2024 23:25:12 +0000
ROA not before:           Fri 31 May 2024 23:20:12 +0000
ROA not after:            Fri 30 May 2025 23:25:12 +0000
asID:                     61573
IP address blocks:        138.122.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl
                          rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:10:7a:67:f9:c3:f6:28:0b:6c:eb:e9:95:1e:86:32:50:53:db:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE18E4F1B19E9CB42BE5468312764519EAA866BD
        Validity
            Not Before: May 31 23:20:12 2024 GMT
            Not After : May 30 23:25:12 2025 GMT
        Subject: CN=FC374DB0BE40208FAE3FDA28B6C1D84D680147B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:5d:f9:7b:fc:3c:2e:53:79:e5:48:aa:92:
                    27:8b:96:d9:48:1c:44:44:cb:0c:c7:ce:83:cd:09:
                    15:8e:86:34:00:b7:cc:be:fd:ae:3f:0e:a1:9c:a2:
                    af:52:c2:4c:c1:f0:97:b7:90:cc:a1:dd:13:9c:0d:
                    5c:15:19:32:87:01:fc:5d:bc:77:c5:2d:ef:e7:0c:
                    19:1f:00:86:ac:f6:b5:59:ef:43:68:e5:63:5f:93:
                    c3:92:56:4b:7d:4f:7f:08:f8:ac:d7:fc:b2:2c:cf:
                    2b:26:02:f5:4f:50:d9:e6:f4:fd:aa:07:54:c2:e8:
                    41:58:70:32:ec:6f:a0:90:58:cb:b5:22:a9:d4:79:
                    b0:57:1d:f2:42:73:f9:0b:21:8a:0f:1d:25:16:86:
                    2a:62:31:11:27:1f:c4:6a:69:f7:48:bb:0b:1a:c3:
                    65:80:72:93:50:e0:ee:8e:2b:bf:69:5e:48:0b:66:
                    c5:f5:03:97:e1:a9:b0:45:3b:7a:b4:0a:6c:78:c0:
                    79:a7:ec:03:30:b1:7c:cc:c3:93:de:87:7a:72:43:
                    52:5c:48:f4:e9:c9:b7:bd:a1:f0:ca:9a:e3:a2:9e:
                    24:b3:e7:3c:ac:11:d4:7a:23:13:76:7f:2d:ca:93:
                    e6:0d:83:8b:2d:e3:fd:0e:cd:58:aa:f4:eb:3c:16:
                    11:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:37:4D:B0:BE:40:20:8F:AE:3F:DA:28:B6:C1:D8:4D:68:01:47:B0
            X509v3 Authority Key Identifier:
                keyid:DE:18:E4:F1:B1:9E:9C:B4:2B:E5:46:83:12:76:45:19:EA:A8:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/DE18E4F1B19E9CB42BE5468312764519EAA866BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE18E4F1B19E9CB42BE5468312764519EAA866BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/3133382e3132322e36332e302f32342d3234203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:15:e3:c6:c9:2c:f5:8e:37:56:c1:2c:02:37:9b:77:19:96:
         17:83:27:ed:d2:34:f6:33:f2:ad:84:a8:b6:61:5e:14:2f:bd:
         33:68:04:08:25:0d:fa:b0:e5:03:0e:df:a9:0e:6d:3c:95:73:
         2a:d3:09:86:5c:42:86:a4:1b:de:59:eb:a4:a6:c3:a3:3c:fb:
         9d:7c:cf:99:24:4c:bf:1b:61:1f:47:b2:e2:2e:9f:d8:95:76:
         1d:c6:95:4a:66:d4:28:42:25:32:b7:fd:b8:f9:b2:f5:e2:7e:
         ba:d1:00:90:22:1b:06:8a:85:3f:e5:01:6b:a7:af:9d:cd:cb:
         e1:fa:5e:fe:3c:a0:09:ad:00:6e:46:58:d6:5e:53:9f:5f:2b:
         02:76:57:f4:ce:99:22:47:04:c1:76:41:50:f7:51:fc:3b:dd:
         5c:f3:e1:36:bf:3b:d3:e0:71:01:12:e3:9a:5c:8c:44:3a:06:
         ca:c5:26:7b:87:45:6f:78:59:d8:4f:61:e9:3d:08:81:3b:0a:
         b0:6a:ed:65:fb:19:36:c5:e9:9e:eb:6b:eb:48:47:17:ca:a3:
         fe:1e:ca:6c:ff:11:41:c8:ab:84:84:19:3d:c4:32:dd:c3:65:
         03:92:12:e5:11:8f:0a:67:b9:e2:87:7c:14:c0:e5:f9:78:de:
         b7:02:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org