Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa
File:                     3133382e33362e32302e302f32322d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          7ZktlfQs2jMi70YyrV14ZU/u0KHKz8vwVh+ayObUxrs=
Subject key identifier:   45:E9:9D:5C:DB:4E:9F:3C:77:83:A6:02:62:0C:31:42:26:F9:29:AE
Certificate issuer:       /CN=5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651
Certificate serial:       469A204E2F76C40CB211F87A04D871FCDDA8F12E
Authority key identifier: 5C:8F:22:FE:BA:C6:13:37:7D:5A:07:68:B2:DE:6D:D8:1E:3C:D6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa
Signing time:             Wed 07 Aug 2024 19:31:01 +0000
ROA not before:           Wed 07 Aug 2024 19:26:01 +0000
ROA not after:            Wed 06 Aug 2025 19:31:01 +0000
asID:                     263026
IP address blocks:        138.36.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.crl
                          rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9a:20:4e:2f:76:c4:0c:b2:11:f8:7a:04:d8:71:fc:dd:a8:f1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651
        Validity
            Not Before: Aug  7 19:26:01 2024 GMT
            Not After : Aug  6 19:31:01 2025 GMT
        Subject: CN=45E99D5CDB4E9F3C7783A602620C314226F929AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2e:22:c5:04:ec:74:72:13:76:48:97:96:66:
                    41:fa:26:fb:ef:0c:ed:c4:42:e5:35:62:79:ce:ff:
                    c4:d1:cb:c9:bb:ab:27:a5:35:51:98:21:b3:92:3e:
                    de:08:9a:71:25:21:a5:c5:27:3c:66:d0:16:9d:d5:
                    94:84:c0:e2:b8:5c:a0:e7:1a:0a:96:37:69:3e:29:
                    85:a9:38:09:fe:be:4e:cd:ad:bd:b5:45:bd:ce:5b:
                    9c:bd:ad:0f:10:d5:10:42:b8:ab:1f:38:d4:0f:05:
                    a0:14:06:97:07:71:98:4d:9f:41:d4:67:86:4f:38:
                    1e:fb:2c:54:66:82:b0:a7:b4:e9:d6:25:af:4a:91:
                    46:7e:a2:93:71:17:0c:50:6b:27:d5:36:59:48:8d:
                    3a:0d:56:75:d1:55:79:a4:c6:33:fc:0c:27:14:ff:
                    e9:c4:97:db:c7:ad:58:3d:c4:01:ed:e8:0e:3a:c0:
                    8f:ef:ae:13:fc:2a:4c:29:01:25:6f:73:fe:15:9a:
                    9f:a1:0c:65:dc:05:33:40:eb:5d:13:90:5b:95:ab:
                    ca:6a:e0:b9:33:9c:30:e0:72:19:ba:3e:73:8f:4b:
                    9d:32:88:82:24:af:b2:d0:fc:7b:ba:87:31:a5:70:
                    84:13:9d:68:a7:17:1b:81:3b:1b:ab:0e:4a:df:b5:
                    ff:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E9:9D:5C:DB:4E:9F:3C:77:83:A6:02:62:0C:31:42:26:F9:29:AE
            X509v3 Authority Key Identifier:
                keyid:5C:8F:22:FE:BA:C6:13:37:7D:5A:07:68:B2:DE:6D:D8:1E:3C:D6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C8F22FEBAC613377D5A0768B2DE6DD81E3CD651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:9f:f3:e3:74:f2:95:46:c8:03:b0:bd:1e:f1:f4:ce:e7:
         f0:13:38:1f:20:fc:b1:df:00:51:48:83:e0:be:47:65:a5:e1:
         3f:f7:86:e5:f8:49:8b:2a:35:bd:18:e0:89:26:23:94:af:74:
         68:46:03:21:e1:45:cd:be:5c:1f:d3:62:92:57:8f:03:e6:21:
         ae:94:d9:ec:1b:83:3a:1b:4a:dd:39:e3:1b:b1:b2:51:a7:c8:
         96:ef:f0:73:94:5c:cd:46:19:2c:4b:43:56:81:ad:c8:63:08:
         c4:ac:2a:94:e1:e8:0f:13:ff:77:60:99:01:f8:0b:4e:83:c7:
         6f:c3:df:ef:a1:bb:7b:e6:5d:d2:47:dc:c0:19:0d:47:64:5a:
         33:a4:f6:4a:6c:95:62:26:9d:89:4e:65:54:92:f0:a9:9d:ff:
         58:d3:f2:88:e9:ba:43:14:6f:85:26:0b:0c:ec:c8:52:4e:a9:
         cb:2e:df:bd:8e:57:07:51:9a:20:a7:65:49:44:7a:0f:12:20:
         6f:8d:bc:56:f2:09:3b:b1:66:11:a9:5c:07:90:c7:93:79:b4:
         87:a2:e6:9e:6d:aa:b9:07:82:b5:4e:c8:e0:7e:67:e2:07:e5:
         84:11:3e:0d:e4:40:76:b6:19:46:03:f5:4d:f3:ec:75:91:cd:
         ab:bd:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:49:49 2024 by rpki-client on console-fra.rpki-client.org