Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa
File:                     3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa (raw, json)
Hash identifier:          yZIxtBQTr8RqMcCkTEXyMTmWiHgy+UiCjgKqRuCWbXg=
Subject key identifier:   36:CF:1F:E7:E2:35:17:B6:09:0F:3A:3D:46:C6:04:0E:3B:4B:27:6C
Certificate issuer:       /CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
Certificate serial:       33A5560C7C36ABEB3D75FDA93D4A6FCE5EB7364D
Authority key identifier: 8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa
Signing time:             Fri 05 Apr 2024 01:38:08 +0000
ROA not before:           Fri 05 Apr 2024 01:33:08 +0000
ROA not after:            Fri 04 Apr 2025 01:38:08 +0000
asID:                     271623
IP address blocks:        138.121.36.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl
                          rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a5:56:0c:7c:36:ab:eb:3d:75:fd:a9:3d:4a:6f:ce:5e:b7:36:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
        Validity
            Not Before: Apr  5 01:33:08 2024 GMT
            Not After : Apr  4 01:38:08 2025 GMT
        Subject: CN=36CF1FE7E23517B6090F3A3D46C6040E3B4B276C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:e2:38:18:a1:66:b8:15:55:8a:39:4d:1c:
                    a3:f7:d8:a0:1b:1d:85:42:80:8b:54:64:fd:34:a7:
                    7f:b6:00:b9:9e:42:34:cb:5e:01:ab:be:b4:bb:1c:
                    f0:36:4b:8c:a1:1b:66:7e:a8:37:69:3c:53:fa:e4:
                    29:e0:9d:ad:91:62:2c:2e:a3:68:60:47:9a:66:95:
                    66:71:ec:1b:73:8a:78:a3:64:06:93:68:f6:43:a0:
                    84:1d:fe:ec:03:07:48:93:cf:2d:cb:12:b4:8b:cd:
                    3d:34:93:32:0a:b1:43:fd:62:f4:d8:49:f2:b6:13:
                    ee:7c:df:c8:dc:1b:be:75:b1:52:8e:5a:4d:48:fd:
                    37:f5:39:9a:a9:a1:ea:d5:ef:5f:64:53:15:86:c8:
                    92:b8:80:8a:bf:dd:20:c5:a9:fd:3c:bb:15:90:47:
                    1d:f7:e6:22:eb:4f:42:e8:52:66:98:02:37:09:fa:
                    81:21:fa:8a:0f:53:20:de:09:9a:4a:38:ee:6d:72:
                    95:f7:b1:ca:2a:28:8d:a5:ce:c2:7b:99:f8:a0:87:
                    ba:7f:45:df:49:a2:a1:ad:44:fd:b2:13:50:36:e3:
                    9b:37:1c:51:da:01:12:e9:cf:81:21:b8:16:64:ce:
                    e6:e5:32:52:8e:60:20:6e:40:ed:2e:3e:e8:e5:b6:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CF:1F:E7:E2:35:17:B6:09:0F:3A:3D:46:C6:04:0E:3B:4B:27:6C
            X509v3 Authority Key Identifier:
                keyid:8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/3133382e3132312e33362e302f32322d3332203d3e20323731363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:66:1c:95:59:e6:c4:75:23:8f:5f:77:62:3c:b0:d1:65:c4:
         5b:38:4f:47:c8:42:ab:6e:ec:15:dd:b0:8f:48:06:2a:fd:4a:
         b4:d1:fc:3a:04:e9:eb:f2:ba:6f:f2:32:44:21:be:6d:12:f0:
         0a:e9:c6:4c:6d:2c:33:6f:e8:bf:e5:d1:1b:39:a4:a2:93:01:
         c8:0c:88:81:5f:b0:c2:05:a5:4d:f3:e8:d0:83:86:d7:2c:40:
         10:fd:3e:d2:de:27:3c:99:73:0b:a6:21:f4:90:cc:6a:f6:84:
         b1:09:89:1f:1a:27:28:c1:54:d8:1a:ee:81:bd:a5:4e:5f:d7:
         84:25:97:87:a8:fb:0e:ed:bc:67:20:b5:46:37:86:82:37:36:
         89:22:cd:08:29:ef:65:6e:f0:0b:6e:f6:4f:97:23:48:bc:2a:
         33:46:0b:a0:53:95:6f:d3:a4:74:5a:8e:39:8c:b3:15:1b:d5:
         82:91:ba:11:a6:b5:0b:a6:4c:d3:7b:af:fa:c8:ed:77:af:7a:
         09:a6:63:68:8f:81:98:69:0c:e4:6e:96:20:ce:93:2d:1f:1b:
         2a:e3:1a:f8:cb:06:d1:a1:36:1b:99:38:58:b8:0b:a9:e3:a1:
         0e:d2:80:7a:83:20:83:d5:70:09:bf:f4:f4:01:84:46:9a:90:
         45:89:8a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:33 2024 by rpki-client on console-ams.rpki-client.org