Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e203238313330.roa
File:                     3133382e39392e3234382e302f32322d3234203d3e203238313330.roa (raw, json)
Hash identifier:          46supZm8NCAtHPkTPwALkcGcb18nF4locgMiCWYBxlQ=
Subject key identifier:   B7:4A:E7:A1:F7:40:6B:9C:A9:72:E4:6D:8A:08:DB:6B:A6:C0:53:C9
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       6910B28344161BF153B8F4B63BDA2EF2C0D6463A
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e203238313330.roa
Signing time:             Thu 04 Apr 2024 07:32:48 +0000
ROA not before:           Thu 04 Apr 2024 07:27:48 +0000
ROA not after:            Thu 03 Apr 2025 07:32:48 +0000
asID:                     28130
IP address blocks:        138.99.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:10:b2:83:44:16:1b:f1:53:b8:f4:b6:3b:da:2e:f2:c0:d6:46:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr  4 07:27:48 2024 GMT
            Not After : Apr  3 07:32:48 2025 GMT
        Subject: CN=B74AE7A1F7406B9CA972E46D8A08DB6BA6C053C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:90:a4:d1:67:01:ed:f9:6a:97:46:60:a1:44:
                    48:71:64:95:cd:f1:a5:f3:72:73:b2:27:bd:a0:ca:
                    60:5f:d4:a8:81:a9:79:32:f3:0b:c5:c7:50:4c:29:
                    f4:0f:16:5b:3d:f9:1a:de:86:5e:83:43:1e:ca:86:
                    8f:76:a5:7f:94:1d:05:28:ab:74:a0:17:39:01:81:
                    21:8c:58:f7:a2:db:29:d0:e5:ae:e9:17:c0:ba:82:
                    7f:ba:97:28:31:18:21:b5:d5:47:de:cf:c4:c8:86:
                    5b:61:ff:f3:a3:dc:b9:c0:c7:f0:bb:a6:a0:59:1c:
                    08:0a:93:f5:a4:3d:f3:0f:e0:83:54:2e:fa:bc:18:
                    49:b0:08:9f:6c:16:55:81:c9:1a:66:e4:55:f5:9b:
                    c1:dd:fe:4e:42:8d:dc:54:e1:8d:e6:bc:2e:13:4d:
                    a5:71:a8:5d:8b:e2:c4:8d:80:d6:cb:14:af:6e:58:
                    17:f1:95:c1:0f:97:05:d7:08:73:23:9c:d6:dd:42:
                    ed:0e:7a:e1:e0:7a:11:be:a7:8b:4f:a7:f9:ad:9c:
                    e5:e2:49:9c:b2:fe:3c:bc:1f:83:de:48:cc:9b:92:
                    d7:61:19:74:bd:6f:c4:58:6a:25:9b:9b:5b:6e:60:
                    4a:2d:06:81:e9:7b:7a:75:ff:38:92:0c:97:3d:ff:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4A:E7:A1:F7:40:6B:9C:A9:72:E4:6D:8A:08:DB:6B:A6:C0:53:C9
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3133382e39392e3234382e302f32322d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:44:af:08:7c:ba:0f:90:eb:b0:51:cc:54:da:ae:f2:e4:ef:
         a9:21:7b:a4:dc:aa:2e:0b:c4:0c:7a:88:61:fc:a8:80:4b:72:
         97:f7:f4:2a:4a:f8:51:96:74:56:77:25:64:cd:af:2e:73:c9:
         c7:0b:96:48:87:18:6e:24:04:b6:fb:04:51:04:5f:74:72:8e:
         2f:81:5e:00:e6:4c:dc:f9:22:01:e3:aa:37:04:f8:3e:3d:40:
         4e:89:de:96:ee:4c:a8:6c:fd:27:a1:29:98:71:b1:34:3d:f1:
         62:93:51:40:a5:ef:ab:b5:8b:bb:43:77:21:a7:be:a5:c7:b6:
         b6:1b:70:29:44:69:85:25:98:37:ab:c7:7e:6c:fa:ac:3d:5c:
         90:ac:4b:21:5d:a6:92:bf:75:cf:a5:b3:4f:61:f1:ac:61:f5:
         97:7b:03:a0:82:3a:3a:ac:3f:c4:26:ff:a8:e8:75:43:30:71:
         b1:e2:79:39:cf:d0:16:b4:e3:df:90:08:32:b2:06:ca:3f:88:
         40:61:09:8a:88:ab:1b:26:75:c6:c3:0f:83:36:06:bb:3d:64:
         b1:df:ba:51:05:5f:a9:4a:f6:7e:c5:0b:a9:37:7f:1d:68:b4:
         89:37:0a:13:12:06:ec:85:a2:ad:e0:70:c1:a0:a5:84:78:b9:
         c7:a3:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:12 2024 by rpki-client on console-ams.rpki-client.org