Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e332e302f32342d3234203d3e20323633393530.roa
File:                     3133382e3235352e332e302f32342d3234203d3e20323633393530.roa (raw, json)
Hash identifier:          /TgYmwq59dN+7cgwm1WQSJLi/8/jTgWXhUHuanpWXzg=
Subject key identifier:   51:A7:5B:0A:C2:31:25:37:42:E2:90:E0:40:11:DF:B5:F0:18:DF:00
Certificate issuer:       /CN=FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02
Certificate serial:       2FF2DAA1BBB4F076E9000BE8F99CFC0FDB20B020
Authority key identifier: FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e332e302f32342d3234203d3e20323633393530.roa
Signing time:             Thu 04 Apr 2024 04:42:22 +0000
ROA not before:           Thu 04 Apr 2024 04:37:22 +0000
ROA not after:            Thu 03 Apr 2025 04:42:22 +0000
asID:                     263950
IP address blocks:        138.255.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.crl
                          rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f2:da:a1:bb:b4:f0:76:e9:00:0b:e8:f9:9c:fc:0f:db:20:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02
        Validity
            Not Before: Apr  4 04:37:22 2024 GMT
            Not After : Apr  3 04:42:22 2025 GMT
        Subject: CN=51A75B0AC231253742E290E04011DFB5F018DF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:f6:55:bc:be:2c:c7:a4:57:2c:6b:24:c9:
                    5b:40:6c:ad:b1:ce:f0:97:d2:03:a1:c1:4c:22:35:
                    11:18:68:91:e2:62:10:81:f6:6a:03:31:db:ee:45:
                    91:9f:29:10:75:56:80:61:d3:10:eb:f9:fe:0e:d3:
                    04:b4:1e:fc:10:86:5d:95:46:c8:29:43:13:7b:4e:
                    43:96:81:02:5c:86:47:23:04:ef:d3:23:e8:66:b9:
                    65:a7:65:7d:e3:2f:17:19:8d:f1:fe:37:4e:9c:b4:
                    14:1a:26:30:f5:43:30:51:cd:01:88:5c:11:1d:65:
                    d7:bc:24:b2:c0:ef:b4:8f:c4:e3:b3:4f:db:4a:2d:
                    61:e4:30:8c:23:a4:3f:92:84:30:e3:a1:99:ed:0d:
                    09:6f:6b:64:dd:a2:a2:44:ac:0e:ad:d6:43:81:33:
                    02:9f:b1:cb:c9:73:57:65:ae:9f:3a:ed:b0:fd:0a:
                    c3:3f:ef:46:cd:c2:b2:bc:ec:4f:07:bc:07:3f:6a:
                    67:3e:15:7a:fd:7e:ec:25:ec:b5:ac:f8:50:c3:ee:
                    2c:4d:60:42:21:9a:b2:59:13:c6:4c:9b:fa:19:12:
                    18:5f:f1:ca:98:f1:6d:44:03:8c:f3:aa:75:22:6d:
                    7e:a7:3b:8d:4d:9c:47:50:7a:ad:16:74:32:68:af:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A7:5B:0A:C2:31:25:37:42:E2:90:E0:40:11:DF:B5:F0:18:DF:00
            X509v3 Authority Key Identifier:
                keyid:FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e332e302f32342d3234203d3e20323633393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:97:0a:f4:ea:2f:6c:dd:0a:65:50:b7:60:e9:8e:ed:d5:82:
         23:f6:01:e4:f0:41:24:04:7a:79:b8:a9:24:50:5f:26:a9:bd:
         fe:fc:35:3f:f2:8f:13:c1:9a:88:34:b7:f2:d1:54:4d:80:26:
         26:48:f3:d3:bb:b4:db:1a:b3:0b:4d:80:19:fa:b7:be:18:5e:
         88:f8:38:d6:68:bc:80:d1:d9:25:47:83:37:d9:89:20:7c:d5:
         bb:9e:67:02:ae:0d:a1:81:ab:5f:a2:c2:88:2b:12:f1:2d:43:
         b1:87:31:4b:ca:7d:56:80:db:54:bf:ab:70:a5:ec:a8:8f:ce:
         f3:6b:68:22:fd:06:60:ae:c3:2f:46:52:2f:53:da:4d:c4:82:
         f6:74:c5:a1:fc:e4:1f:37:9c:38:2e:e5:ad:4b:fa:ef:9a:01:
         c2:4b:fb:c6:35:c6:36:a6:53:c1:51:b8:3a:61:22:57:f8:ed:
         6b:87:c0:2c:51:87:c3:05:41:1c:1a:ae:30:e2:24:53:7e:e4:
         ff:ae:14:ec:5c:3f:22:af:59:aa:b2:4c:e1:c4:bd:1c:6c:3b:
         1c:ca:4a:e2:4d:4a:b5:b8:20:30:4c:5d:2d:ef:6e:e8:38:93:
         fd:25:e2:9a:99:ae:fc:86:46:28:3f:40:70:f2:ed:cc:70:f6:
         92:3f:04:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:52 2024 by rpki-client on console-ams.rpki-client.org