Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e302e302f32342d3234203d3e20323634323834.roa
File:                     3133382e3132312e302e302f32342d3234203d3e20323634323834.roa (raw, json)
Hash identifier:          OsbWoNCCgOMLHaxYabWJr2C1C5uCuXu6GbSDxcMUxKI=
Subject key identifier:   96:31:48:13:17:A5:08:D7:05:49:7B:9C:55:16:79:58:4A:3B:FF:EA
Certificate issuer:       /CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Certificate serial:       60CA26178FF9751D220FE8BAB27798BB160A9E30
Authority key identifier: 80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e302e302f32342d3234203d3e20323634323834.roa
Signing time:             Fri 17 May 2024 14:34:13 +0000
ROA not before:           Fri 17 May 2024 14:29:13 +0000
ROA not after:            Fri 16 May 2025 14:34:13 +0000
asID:                     264284
IP address blocks:        138.121.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl
                          rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ca:26:17:8f:f9:75:1d:22:0f:e8:ba:b2:77:98:bb:16:0a:9e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
        Validity
            Not Before: May 17 14:29:13 2024 GMT
            Not After : May 16 14:34:13 2025 GMT
        Subject: CN=9631481317A508D705497B9C551679584A3BFFEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:ab:4f:79:49:dd:ec:b8:8e:03:e6:3d:a7:
                    8f:e4:02:ba:81:8e:3e:61:40:f7:91:df:b8:30:d5:
                    c3:b5:f5:68:52:cc:b2:8f:ae:18:8f:c0:96:75:47:
                    68:7f:84:68:bc:aa:61:97:a5:88:c3:f7:b7:70:11:
                    4e:e2:97:1b:8a:9a:35:f8:37:5e:9a:1e:44:08:f1:
                    39:44:2e:6f:1d:99:b0:54:76:50:ca:18:bc:15:33:
                    cf:90:38:10:e3:e4:47:1a:ae:1f:a7:b8:f8:c9:cc:
                    45:ca:0c:40:01:0b:79:d4:80:0f:f3:cc:9e:65:34:
                    3e:c1:7f:ba:50:58:52:2b:e6:a8:f3:7b:f3:c5:8e:
                    cd:d1:7f:97:e1:c6:66:77:89:45:23:42:99:47:78:
                    fd:90:d0:03:1c:0d:c1:69:3f:34:30:e7:57:c2:78:
                    c2:92:8c:49:5f:be:ef:b7:7b:29:4b:d5:48:f1:4a:
                    3f:cf:06:f4:97:c7:09:fc:f2:d1:32:3b:9a:4b:0f:
                    e2:54:59:8b:be:3d:44:6d:b6:d9:c5:35:a9:e3:c0:
                    97:e4:4f:3a:0e:28:28:0c:04:cb:22:5b:e3:94:5e:
                    5b:8a:18:1c:75:6f:c2:b9:4e:6f:27:b6:f8:6b:b6:
                    ab:9f:98:37:aa:8a:e1:c0:77:38:b6:77:4d:42:85:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:31:48:13:17:A5:08:D7:05:49:7B:9C:55:16:79:58:4A:3B:FF:EA
            X509v3 Authority Key Identifier:
                keyid:80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e302e302f32342d3234203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:a6:b3:09:04:44:7f:a9:95:9f:7f:63:27:27:f5:cf:72:aa:
         9d:be:0c:c6:4b:4e:63:89:bd:0e:80:84:19:85:1d:97:3b:a1:
         5a:24:93:80:18:ba:40:e3:ea:87:1d:1e:5f:e0:c3:c2:f9:18:
         8c:44:2c:3e:48:b9:0c:38:a6:4a:09:98:b6:4f:bf:36:30:5f:
         02:7a:c2:c0:6e:d2:ab:92:99:12:e4:41:33:ce:27:5f:91:89:
         39:86:6b:ba:62:ef:ce:3f:30:1c:20:dd:fb:15:e1:05:1a:3d:
         68:60:01:2f:80:08:f0:68:fb:bc:37:ca:79:52:ef:b4:8e:71:
         0d:d5:59:4f:79:3b:fd:92:c8:f9:42:63:99:62:b1:19:1f:5d:
         fd:97:10:f9:5d:cd:a8:43:08:ba:80:a4:f4:2b:61:4a:18:0f:
         78:09:f8:68:a5:00:78:61:d4:49:d0:42:7c:cf:07:26:aa:cd:
         44:8c:7e:d7:04:9a:00:13:76:a0:17:56:fb:0a:eb:5c:d5:16:
         ba:e2:95:f1:d1:d3:66:e2:f7:bf:c3:49:48:3c:c8:31:ec:20:
         7b:97:f3:24:e0:c1:4c:06:43:0d:e6:ef:30:61:b2:16:42:75:
         5b:ff:58:e1:ee:eb:50:c6:11:21:6e:9e:9d:9c:a9:46:24:e2:
         d7:ba:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org