Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e332e302f32342d3234203d3e20323634323834.roa
File:                     3133382e3132312e332e302f32342d3234203d3e20323634323834.roa (raw, json)
Hash identifier:          2gGzewFmL2dZzWd94PPm3U+9zNgoY/10CgK5Ddm4Gmc=
Subject key identifier:   6B:46:77:BD:B0:47:56:BD:CD:E3:86:20:2A:12:89:5A:4F:C6:28:D8
Certificate issuer:       /CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Certificate serial:       0A08A2E3FAB927DC68FFF7A5875EF0B4C4EDDBDC
Authority key identifier: 80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e332e302f32342d3234203d3e20323634323834.roa
Signing time:             Fri 17 May 2024 14:33:43 +0000
ROA not before:           Fri 17 May 2024 14:28:43 +0000
ROA not after:            Fri 16 May 2025 14:33:43 +0000
asID:                     264284
IP address blocks:        138.121.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl
                          rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:08:a2:e3:fa:b9:27:dc:68:ff:f7:a5:87:5e:f0:b4:c4:ed:db:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
        Validity
            Not Before: May 17 14:28:43 2024 GMT
            Not After : May 16 14:33:43 2025 GMT
        Subject: CN=6B4677BDB04756BDCDE386202A12895A4FC628D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:6d:0a:6d:31:f9:23:35:8f:01:02:db:3c:
                    4d:19:02:59:37:2e:9c:07:48:3c:e3:a8:53:99:06:
                    e9:56:24:ce:7e:44:0b:c7:e9:8e:f8:21:f4:ad:6e:
                    43:00:98:ac:d0:11:1f:4a:d1:a0:44:f3:11:30:f7:
                    25:52:5c:cf:e9:b9:f7:0e:8b:09:7e:79:e4:e7:ae:
                    8a:22:d3:96:f5:52:fc:8d:da:6e:d1:7d:25:ed:6c:
                    c1:a7:a9:22:1c:77:b1:1d:0c:ae:ce:a3:62:48:af:
                    c6:5b:d5:93:48:37:fd:f4:aa:24:1b:9c:e0:b3:20:
                    66:1f:c7:6b:f8:88:77:b6:3e:95:c6:3c:8c:b9:a5:
                    3a:4b:69:19:0e:b0:79:47:c8:c0:04:e9:4e:cf:d4:
                    44:21:76:e6:29:8e:21:ed:2d:cb:96:01:18:fb:5b:
                    d3:96:bb:26:f5:b9:d6:37:91:24:2d:13:2a:72:a6:
                    a3:39:29:b6:2f:7b:2b:df:b1:3e:91:7a:48:e5:48:
                    fb:95:e4:64:d0:a5:5b:2e:54:ec:35:92:f4:00:9f:
                    66:e7:07:e2:c8:cd:97:e0:6f:b6:88:ed:0d:9a:36:
                    7b:66:14:52:ae:9d:19:e0:1b:d3:81:09:ba:71:f1:
                    83:43:04:b0:15:bf:75:c9:15:37:0d:4a:19:b3:df:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:46:77:BD:B0:47:56:BD:CD:E3:86:20:2A:12:89:5A:4F:C6:28:D8
            X509v3 Authority Key Identifier:
                keyid:80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/3133382e3132312e332e302f32342d3234203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:be:b1:c4:54:8e:a1:7c:30:77:e2:fb:e0:c5:cd:1b:f0:c3:
         51:bf:46:3d:55:cb:a4:f5:fd:dd:a0:b5:40:77:a1:2b:ba:ef:
         6a:ab:d3:e0:cc:8e:1d:fe:91:1b:7e:1e:50:95:8c:4d:e7:cd:
         aa:e5:b0:4a:a4:dc:7f:f7:13:1a:22:05:95:10:1b:f8:b1:a1:
         6d:4c:c5:b1:e1:b7:fb:0e:01:64:98:c3:f4:89:9b:22:76:32:
         40:d7:89:8a:cb:97:58:f0:61:8e:e4:ab:0b:69:23:33:47:34:
         66:4a:40:8e:d4:da:fe:28:11:b4:01:58:b6:ef:60:34:88:c4:
         9b:1b:b6:e9:64:94:f1:7f:51:cf:72:fb:c3:38:57:c5:cd:67:
         d4:ba:74:e0:6a:2a:4f:08:b9:32:ba:d2:39:62:4d:40:8d:9d:
         38:87:db:47:7b:55:38:1d:10:8b:fe:f6:30:c9:92:7e:2a:65:
         91:d1:54:b9:b5:fe:9c:13:52:19:d5:a5:f0:06:d2:2f:3a:6d:
         c7:aa:cb:9d:e4:32:97:bb:29:13:24:c8:01:01:9c:e0:0d:51:
         c6:ac:31:19:0c:6a:8c:5d:56:9d:5f:cf:b9:fd:bc:71:e3:a3:
         6c:88:d0:4f:18:4c:f4:f0:df:37:0a:96:c7:60:a0:af:af:11:
         98:a4:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:23 2024 by rpki-client on console-ams.rpki-client.org