Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e312e302f32342d3234203d3e20323633393530.roa
File:                     3133382e3235352e312e302f32342d3234203d3e20323633393530.roa (raw, json)
Hash identifier:          dGdIHjbRb7gZu+yq2YvTGVSHiz5UI9YFpqMfPNPqp4U=
Subject key identifier:   55:AB:8B:3E:5B:75:4D:CF:9F:8D:D9:98:85:8B:2D:5F:70:E8:9C:88
Certificate issuer:       /CN=FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02
Certificate serial:       07377DFA83051FA50A91444F821CC264243EFEC7
Authority key identifier: FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e312e302f32342d3234203d3e20323633393530.roa
Signing time:             Thu 04 Apr 2024 04:42:22 +0000
ROA not before:           Thu 04 Apr 2024 04:37:22 +0000
ROA not after:            Thu 03 Apr 2025 04:42:22 +0000
asID:                     263950
IP address blocks:        138.255.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.crl
                          rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:37:7d:fa:83:05:1f:a5:0a:91:44:4f:82:1c:c2:64:24:3e:fe:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02
        Validity
            Not Before: Apr  4 04:37:22 2024 GMT
            Not After : Apr  3 04:42:22 2025 GMT
        Subject: CN=55AB8B3E5B754DCF9F8DD998858B2D5F70E89C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:ea:ef:c7:cf:f0:5d:3d:38:9a:e5:5d:70:
                    32:a8:e1:57:01:97:4d:be:92:57:57:18:f1:cf:27:
                    55:fd:99:40:48:50:f7:08:37:44:7d:55:af:6a:a9:
                    61:7e:4f:fe:6a:65:3d:c4:85:cc:56:0e:81:b7:2b:
                    54:cb:66:b2:71:7e:81:51:a4:03:e3:6d:ca:e1:53:
                    8d:39:2f:2a:c1:ad:29:3e:74:0c:3f:63:c2:03:2a:
                    8f:73:84:31:4b:e7:a2:3c:0a:de:a3:12:0f:39:d2:
                    5f:88:2d:ad:78:f2:dd:f9:5f:52:56:d5:6d:cb:fd:
                    4d:48:51:db:4a:73:ec:8b:f9:81:71:d2:fd:97:4d:
                    c5:a2:4a:99:44:19:6d:f9:54:59:82:09:cc:70:55:
                    bb:db:05:44:c6:b3:c2:40:33:39:73:eb:55:06:cd:
                    7e:92:60:8e:97:a8:e7:37:cd:ac:7b:67:2f:2e:ed:
                    c6:73:1d:d6:4a:49:aa:63:f6:47:81:b2:57:a7:04:
                    85:6a:c2:7c:0f:5b:3e:50:d2:26:6e:65:0c:5a:14:
                    f6:12:69:5b:07:a1:19:35:63:cb:88:90:ef:4b:2e:
                    55:23:ac:e4:70:90:ff:26:67:40:0e:25:e0:67:1d:
                    c5:ff:3f:5a:c8:7d:de:b6:b5:2d:c3:35:05:5c:ed:
                    50:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AB:8B:3E:5B:75:4D:CF:9F:8D:D9:98:85:8B:2D:5F:70:E8:9C:88
            X509v3 Authority Key Identifier:
                keyid:FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e312e302f32342d3234203d3e20323633393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:6c:c2:71:ee:80:76:c6:e6:7c:7a:bb:76:74:67:94:aa:f3:
         09:39:cb:4a:d3:cb:16:a5:67:65:5c:d7:dc:81:50:de:b5:37:
         1e:04:35:f6:62:32:1b:d6:51:64:69:40:cb:39:20:b7:ef:0f:
         d5:15:3f:71:cb:c3:32:3e:36:26:55:ed:5d:7f:e4:9a:d0:13:
         85:4d:35:02:cb:09:bd:c4:cc:84:7e:8e:a7:96:5c:4f:f4:25:
         b5:1f:6f:9d:6a:e4:58:d1:27:43:63:ae:c3:57:20:91:07:4a:
         6e:88:9f:5e:12:e6:4c:00:8f:1a:b2:b3:36:0b:c6:f2:a8:ad:
         ae:5a:bc:f6:9d:47:77:20:0f:2c:9c:dd:ad:83:4f:d3:19:63:
         43:91:5e:5a:ea:e5:16:ab:5b:e4:d3:b4:03:47:55:9a:00:0b:
         a6:b7:58:67:11:de:4b:c1:40:e4:6d:b7:39:48:e5:d1:6e:38:
         87:fc:34:84:89:09:fd:81:c9:a3:31:61:74:19:d0:2a:7b:b9:
         c7:18:f1:8a:db:aa:db:19:e3:0f:75:13:4f:6e:aa:16:dc:70:
         8a:54:02:75:03:be:ec:9d:74:aa:64:4d:af:b9:7a:9b:5a:35:
         45:24:6c:c3:1c:f4:09:e6:df:32:cf:bb:32:71:f9:06:54:49:
         f2:15:6b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:52 2024 by rpki-client on console-ams.rpki-client.org