Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e302e302f32332d3233203d3e20323633393530.roa
File:                     3133382e3235352e302e302f32332d3233203d3e20323633393530.roa (raw, json)
Hash identifier:          Rc9a7xRMxwEN5wA1yMXOI4KvW3jwPTHOPetl0SHumYw=
Subject key identifier:   0A:AA:2E:73:63:4F:8C:B6:FF:15:F1:C2:75:46:37:33:2B:F3:D0:F1
Certificate issuer:       /CN=FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02
Certificate serial:       50636FC4C7929AB2F554B41B43F841B8E8B9FF71
Authority key identifier: FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e302e302f32332d3233203d3e20323633393530.roa
Signing time:             Thu 04 Apr 2024 04:42:23 +0000
ROA not before:           Thu 04 Apr 2024 04:37:23 +0000
ROA not after:            Thu 03 Apr 2025 04:42:23 +0000
asID:                     263950
IP address blocks:        138.255.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.crl
                          rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:63:6f:c4:c7:92:9a:b2:f5:54:b4:1b:43:f8:41:b8:e8:b9:ff:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02
        Validity
            Not Before: Apr  4 04:37:23 2024 GMT
            Not After : Apr  3 04:42:23 2025 GMT
        Subject: CN=0AAA2E73634F8CB6FF15F1C2754637332BF3D0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:00:09:84:08:29:39:6d:4d:4e:50:02:86:
                    a1:34:6b:08:39:ea:63:ba:4e:fd:cc:0c:dd:1a:a0:
                    fc:22:a8:fb:53:d1:a8:87:d9:c1:18:c8:3d:1d:50:
                    e5:de:c9:91:ab:58:ac:4c:9a:56:9e:2e:c6:2f:0b:
                    e1:5c:6f:8c:96:1e:32:ae:af:d0:fc:0d:d7:ee:78:
                    d6:47:cb:d4:07:c4:33:90:0b:ff:12:c1:69:62:49:
                    62:97:5b:f8:ce:63:ee:ba:60:82:11:cf:3f:33:26:
                    17:fd:c0:a7:6a:17:18:f4:d7:67:12:2e:4f:b0:fd:
                    aa:9c:af:b7:c9:c6:05:b0:14:a2:b9:5c:70:9c:b2:
                    dc:be:ac:88:d2:16:e1:f3:88:85:5a:24:eb:9d:28:
                    dc:78:49:45:17:4f:9d:ff:bd:69:3f:d3:75:3d:1f:
                    9e:62:93:0c:24:ec:9c:29:9f:28:50:8f:89:72:0e:
                    85:aa:3b:1c:d5:16:b5:e5:c0:98:ca:83:d9:ac:9c:
                    ce:ea:a5:20:b9:33:60:15:1e:d1:16:99:e4:d9:3e:
                    36:47:43:ce:fb:19:88:5f:3e:7c:5e:af:2b:00:48:
                    a5:21:36:ab:78:47:08:ad:b4:0a:56:b5:6c:cb:95:
                    b7:68:8c:25:89:ff:61:af:31:98:87:85:34:64:cb:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:2E:73:63:4F:8C:B6:FF:15:F1:C2:75:46:37:33:2B:F3:D0:F1
            X509v3 Authority Key Identifier:
                keyid:FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e302e302f32332d3233203d3e20323633393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:20:70:30:85:91:ab:fc:ac:46:53:d7:ec:8b:4d:dc:cb:bd:
         c0:5e:87:64:55:78:5c:72:91:5a:07:f2:6e:2a:05:ce:7d:16:
         42:04:9e:f0:98:00:dd:f3:ff:b5:ab:db:8d:00:72:63:90:a6:
         a1:26:f1:93:6a:2e:11:f6:23:93:e2:7a:b4:48:2b:9c:1d:07:
         9c:91:17:0a:46:ea:67:3a:7d:16:cb:6f:04:30:eb:0a:a7:93:
         7a:8c:bd:e2:f0:da:d6:70:1e:86:3e:7c:65:b7:fc:7f:be:ac:
         e6:38:b7:8d:4e:3e:31:a8:14:4c:22:8e:ab:80:f6:0d:97:a2:
         9e:77:2f:66:c1:d6:8c:09:d8:ec:99:ac:b2:0a:90:f3:d7:0b:
         2f:d2:60:b1:4e:4f:04:55:a9:66:89:63:8b:5b:9f:82:86:94:
         5f:86:4d:eb:c3:2e:e3:25:73:c6:ce:b8:1e:6b:0f:d1:79:b6:
         99:1e:97:a1:0b:08:f2:78:c7:f3:fa:6d:6a:46:9a:6a:79:b8:
         05:b9:dc:5b:c1:89:e9:de:71:45:6c:5b:e7:1a:89:55:ad:4d:
         de:42:87:66:72:05:07:c9:f8:67:83:16:7c:03:cb:a6:1f:f6:
         0f:b8:fc:39:bc:1f:2b:1d:9f:2d:53:78:28:aa:17:86:7b:f8:
         34:a1:db:02
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUUGNvxMeSmrL1VLQbQ/hBuOi5/3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJDOUQxRTZFODgzOEM2M0U1RjI3QURGMjIyNkVBMUU2
MUM5MUYwMjAeFw0yNDA0MDQwNDM3MjNaFw0yNTA0MDMwNDQyMjNaMDMxMTAvBgNV
BAMTKDBBQUEyRTczNjM0RjhDQjZGRjE1RjFDMjc1NDYzNzMzMkJGM0QwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGewAJhAgpOW1NTlAChqE0awg5
6mO6Tv3MDN0aoPwiqPtT0aiH2cEYyD0dUOXeyZGrWKxMmlaeLsYvC+Fcb4yWHjKu
r9D8DdfueNZHy9QHxDOQC/8SwWliSWKXW/jOY+66YIIRzz8zJhf9wKdqFxj012cS
Lk+w/aqcr7fJxgWwFKK5XHCcsty+rIjSFuHziIVaJOudKNx4SUUXT53/vWk/03U9
H55ikwwk7JwpnyhQj4lyDoWqOxzVFrXlwJjKg9msnM7qpSC5M2AVHtEWmeTZPjZH
Q877GYhfPnxerysASKUhNqt4RwittApWtWzLlbdojCWJ/2GvMZiHhTRky/CPAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUCqouc2NPjLb/FfHCdUY3Myvz0PEwHwYDVR0j
BBgwFoAU+8nR5uiDjGPl8nrfIibqHmHJHwIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xcmtybXU0NG82NndBUHZZQzgxR21xMnVFMzdZRnY0Z1JaQ05ib2l5RDNj
LzEvRkJDOUQxRTZFODgzOEM2M0U1RjI3QURGMjIyNkVBMUU2MUM5MUYwMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GQkM5RDFFNkU4ODM4QzYzRTVG
MjdBREYyMjI2RUExRTYxQzkxRjAyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
cmtybXU0NG82NndBUHZZQzgxR21xMnVFMzdZRnY0Z1JaQ05ib2l5RDNjLzEvMzEz
MzM4MmUzMjM1MzUyZTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMzMzkz
NTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBiv8AMA0GCSqGSIb3DQEBCwUAA4IBAQCYIHAwhZGr/KxG
U9fsi03cy73AXodkVXhccpFaB/JuKgXOfRZCBJ7wmADd8/+1q9uNAHJjkKahJvGT
ai4R9iOT4nq0SCucHQeckRcKRupnOn0Wy28EMOsKp5N6jL3i8NrWcB6GPnxlt/x/
vqzmOLeNTj4xqBRMIo6rgPYNl6Kedy9mwdaMCdjsmayyCpDz1wsv0mCxTk8EValm
iWOLW5+ChpRfhk3rwy7jJXPGzrgeaw/RebaZHpehCwjyeMfz+m1qRppqebgFudxb
wYnp3nFFbFvnGolVrU3eQodmcgUHyfhngxZ8A8umH/YPuPw5vB8rHZ8tU3goqheG
e/g0odsC
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:51:14 2024 by rpki-client on console-fra.rpki-client.org