Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32322d3332203d3e203631353834.roa
File:                     3133382e39342e3132382e302f32322d3332203d3e203631353834.roa (raw, json)
Hash identifier:          CJ5oDs0OD4F13uN+YBAYBQKWv4Nhhz7ZMciQsVHbqIQ=
Subject key identifier:   1B:72:D7:60:08:A8:0D:9E:73:05:AB:D5:30:5D:D7:70:3C:5D:99:37
Certificate issuer:       /CN=BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7
Certificate serial:       22B3112C864966204917FE6C91E7DD8F6D94F7D2
Authority key identifier: BC:0D:4A:1B:CF:B2:62:F6:32:8B:E4:3F:0B:FE:09:C3:71:06:8E:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32322d3332203d3e203631353834.roa
Signing time:             Fri 01 Nov 2024 13:19:16 +0000
ROA not before:           Fri 01 Nov 2024 13:14:16 +0000
ROA not after:            Fri 31 Oct 2025 13:19:16 +0000
asID:                     61584
IP address blocks:        138.94.128.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.crl
                          rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b3:11:2c:86:49:66:20:49:17:fe:6c:91:e7:dd:8f:6d:94:f7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7
        Validity
            Not Before: Nov  1 13:14:16 2024 GMT
            Not After : Oct 31 13:19:16 2025 GMT
        Subject: CN=1B72D76008A80D9E7305ABD5305DD7703C5D9937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:1f:7a:0e:61:e0:60:fd:35:50:37:0f:9c:
                    07:52:f8:95:93:cb:aa:df:5f:ba:f9:6a:2d:9b:26:
                    81:dc:ac:56:aa:7a:81:8e:74:20:76:50:74:73:1f:
                    b3:f5:ce:3a:10:ec:54:bf:9e:25:2b:9b:6f:35:08:
                    5a:3b:3d:1e:4c:d0:61:a8:27:7f:1a:8c:3a:d7:48:
                    f2:07:7c:c0:dc:b4:99:2e:1b:00:e3:63:56:5f:74:
                    4f:9a:fa:17:ea:b1:e9:e3:96:01:e6:6c:57:ea:01:
                    63:c7:60:a4:d1:9d:66:e5:05:14:65:20:e8:9d:56:
                    5f:29:5a:ef:bf:11:d2:96:85:df:79:83:cd:fc:c5:
                    fb:96:08:39:8a:8f:ec:67:37:b9:fc:75:ac:d8:73:
                    51:33:01:a5:32:1a:4c:61:ea:9a:af:06:08:01:6a:
                    8d:79:7d:7c:5b:e6:26:2a:c8:cb:46:cb:6c:5f:c9:
                    44:3f:ff:3d:f8:f4:1e:1a:4f:e9:bb:2f:47:78:46:
                    49:09:0e:ef:9e:fd:30:c6:80:17:75:b8:d8:a7:b3:
                    0f:80:59:89:db:8b:0d:a2:02:c8:12:1e:b8:82:93:
                    c3:19:8a:12:36:12:2b:41:05:82:c9:a9:1b:db:3b:
                    85:63:9a:21:53:a6:52:0c:0b:0d:c0:e6:55:07:3b:
                    b0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:72:D7:60:08:A8:0D:9E:73:05:AB:D5:30:5D:D7:70:3C:5D:99:37
            X509v3 Authority Key Identifier:
                keyid:BC:0D:4A:1B:CF:B2:62:F6:32:8B:E4:3F:0B:FE:09:C3:71:06:8E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32322d3332203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:34:e4:86:47:dd:71:4f:07:91:fd:c6:98:53:09:b0:b8:eb:
         79:db:34:a5:20:aa:2f:34:c0:8b:4b:9e:b7:42:46:7e:93:59:
         03:55:86:44:69:8e:aa:3a:35:22:fc:45:05:b1:68:08:70:9d:
         de:d4:f5:38:db:48:47:21:ad:2e:f3:60:72:37:1d:3a:34:bb:
         4d:90:4a:a0:a9:b2:72:aa:c5:90:25:25:ec:9d:c8:27:fb:c3:
         02:d1:2d:1d:22:0c:44:63:a6:ab:80:41:6d:23:a0:f6:1e:84:
         c8:9b:cc:fc:48:3f:1f:23:00:fa:43:b9:3b:1a:7c:48:bf:3a:
         a4:a7:6d:ad:5b:4e:a0:4e:a4:f7:ee:e7:67:31:77:61:a3:8c:
         2d:2d:9d:ca:d0:5d:32:13:19:82:16:1a:68:c7:a7:6d:bd:3a:
         d6:57:5f:c0:e5:ca:af:d5:ae:7d:5e:76:4a:5d:a0:43:e8:e4:
         d5:ce:50:91:32:c0:bc:bc:4b:d0:f7:29:67:e6:7e:bf:20:82:
         fa:c7:45:e4:bc:a8:a6:8f:32:9c:ea:c2:a7:65:88:12:e9:8e:
         d6:40:d6:96:3f:c1:0d:81:88:4d:9a:fa:ba:41:74:78:d3:8c:
         15:f7:b0:18:8d:80:67:5d:9c:cd:53:0a:48:87:b7:fe:37:79:
         32:b6:f9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:00 2024 by rpki-client on console-fra.rpki-client.org