Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3133382e39372e342e302f32322d3232203d3e203533313132.roa
File:                     3133382e39372e342e302f32322d3232203d3e203533313132.roa (raw, json)
Hash identifier:          I5/WiV7d6oK1+Phdb2gAw5CeKDFF1qxEXrWEGwkKD/k=
Subject key identifier:   20:81:0B:4B:98:25:E9:D9:26:5F:F1:4C:92:D5:6B:04:7E:97:8B:6A
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       5BD61E619BA8006DDDBF5A31D057BEF9EE19BF67
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3133382e39372e342e302f32322d3232203d3e203533313132.roa
Signing time:             Thu 04 Apr 2024 09:41:30 +0000
ROA not before:           Thu 04 Apr 2024 09:36:30 +0000
ROA not after:            Thu 03 Apr 2025 09:41:30 +0000
asID:                     53112
IP address blocks:        138.97.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 07:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d6:1e:61:9b:a8:00:6d:dd:bf:5a:31:d0:57:be:f9:ee:19:bf:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Apr  4 09:36:30 2024 GMT
            Not After : Apr  3 09:41:30 2025 GMT
        Subject: CN=20810B4B9825E9D9265FF14C92D56B047E978B6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a5:8b:5f:a8:93:ae:86:17:b1:91:b8:95:02:
                    83:cc:4f:c2:d2:4e:34:63:7f:92:4b:52:6f:e3:32:
                    97:b3:49:97:63:df:31:b3:1b:ca:d9:a0:64:dc:0f:
                    ea:d6:1e:f1:f3:74:50:e8:14:3a:8a:4a:98:f8:f3:
                    0e:9e:4f:f6:13:99:24:7b:26:0c:a7:74:6d:76:1b:
                    4c:b2:fa:ae:e6:92:fd:9f:35:e2:c4:a1:92:4a:5f:
                    b1:e4:f7:6a:40:d7:24:23:ad:72:66:9f:c8:6d:0b:
                    4b:f0:01:26:19:ec:dc:6b:3d:56:c0:c9:c0:a3:5d:
                    6c:97:11:78:06:60:f0:96:5f:d0:38:fe:19:64:21:
                    49:d8:5a:52:3e:94:43:6f:73:11:84:64:52:8e:36:
                    fd:29:a9:8f:33:75:82:12:89:61:13:c3:99:a6:92:
                    dc:68:ef:91:9a:8a:9f:34:2c:ac:ec:0e:83:77:0e:
                    32:ca:90:2f:ec:d0:f6:a4:77:e8:b1:7a:c1:2f:f5:
                    eb:a9:2c:6e:74:ba:13:2c:8e:a5:47:8e:e1:a3:9c:
                    b2:fe:10:b1:86:8b:a2:ce:e4:0c:10:47:c7:4a:4f:
                    78:92:f4:93:94:7b:e7:55:22:9d:66:02:32:1e:b0:
                    c4:e4:59:91:20:91:2c:9c:35:59:6f:fe:88:e6:95:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:81:0B:4B:98:25:E9:D9:26:5F:F1:4C:92:D5:6B:04:7E:97:8B:6A
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/3133382e39372e342e302f32322d3232203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:29:a6:2e:18:12:55:98:22:36:0e:1d:7c:e2:73:bc:1b:8d:
         87:27:5f:fe:bd:34:9b:e6:97:77:4e:e6:16:bc:74:ad:db:10:
         18:e3:95:4d:75:5c:58:3f:e4:0b:13:b9:3b:4b:21:54:de:07:
         7b:1c:0e:60:47:ca:c2:f7:46:81:71:8e:87:d0:89:03:c5:f7:
         4d:6b:fd:5a:ac:09:6c:bc:6a:dd:92:b8:99:2e:a6:fe:4e:4a:
         49:3d:3a:6c:59:08:8e:06:59:f3:e6:69:2f:fe:aa:c7:36:e0:
         a8:1e:ed:cf:21:32:f4:13:7d:bc:7e:52:48:c8:33:e8:af:bf:
         c7:34:91:9f:5a:3b:c0:75:8d:eb:97:74:ba:72:5a:4c:28:24:
         cc:a4:28:09:96:bb:3f:c0:ba:d6:37:15:72:5b:37:39:ae:dc:
         2e:5a:42:6b:98:88:f5:7e:78:70:7c:12:9a:b8:04:2b:5e:93:
         fc:ea:54:5f:80:3b:b0:9a:c5:9c:ae:d2:ba:60:13:0f:bb:c6:
         e3:3e:c4:87:b2:36:6c:df:2d:8b:6c:d4:8b:4d:c3:f5:5e:26:
         d7:f3:00:82:1c:8b:22:9f:5b:16:f4:d2:ad:3f:d0:d6:c0:18:
         fd:9f:79:d3:52:c5:4d:7a:ee:86:eb:34:27:4d:44:a2:a8:de:
         79:fc:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 07:38:56 2024 by rpki-client on console-fra.rpki-client.org