Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/3133382e39342e38382e302f32322d3234203d3e20323634313532.roa
File:                     3133382e39342e38382e302f32322d3234203d3e20323634313532.roa (raw, json)
Hash identifier:          5OqUbLZ5aAJJE0ppH6WvRQwg2F8+NZEyyh05RK3pnc8=
Subject key identifier:   57:AB:1A:FA:D6:F7:10:6E:9C:AD:42:B4:6B:70:7F:36:51:80:9C:16
Certificate issuer:       /CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
Certificate serial:       449B7B45AD147A14275C704EEC8B86A3500C446E
Authority key identifier: F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/3133382e39342e38382e302f32322d3234203d3e20323634313532.roa
Signing time:             Wed 03 Apr 2024 18:32:21 +0000
ROA not before:           Wed 03 Apr 2024 18:27:21 +0000
ROA not after:            Wed 02 Apr 2025 18:32:21 +0000
asID:                     264152
IP address blocks:        138.94.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl
                          rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9b:7b:45:ad:14:7a:14:27:5c:70:4e:ec:8b:86:a3:50:0c:44:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A6A07CCBE742530F38EEDD455AC59480FDA110
        Validity
            Not Before: Apr  3 18:27:21 2024 GMT
            Not After : Apr  2 18:32:21 2025 GMT
        Subject: CN=3082010A0282010100ACBC1036E6664FC6268314A80770E4BBDD1480F0AAA97BCC6D2EC01E1CF611E44621FF63823155E60E269AB3EA72EEACC8ED48148598E34BEC60979AB0562EC530425F323F89C270D593A09525D7B30489A6621735A881D862D7BAA9280022778A9C44E5A103ADDC47E8357621F90311BC27CE29B952C3CD670BB6289E28201CE2BF51ECD1DD98DC90563EDC216CA9F83124527AF38D02348141DE0A3CCDE284CEC5F39D3A9EE06191FB8A4A2FBEF65CF0C101D471FAF44AA6EC901CA4C37CAD398293C35B5D838550621D812C211CE363BE4D1825BC893D9FF7D7D55286884AAA57D73AE307A32C186476008584B90E6CA0EFF0D9CE9C802F21A2A7D8795AB30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:10:36:e6:66:4f:c6:26:83:14:a8:07:70:
                    e4:bb:dd:14:80:f0:aa:a9:7b:cc:6d:2e:c0:1e:1c:
                    f6:11:e4:46:21:ff:63:82:31:55:e6:0e:26:9a:b3:
                    ea:72:ee:ac:c8:ed:48:14:85:98:e3:4b:ec:60:97:
                    9a:b0:56:2e:c5:30:42:5f:32:3f:89:c2:70:d5:93:
                    a0:95:25:d7:b3:04:89:a6:62:17:35:a8:81:d8:62:
                    d7:ba:a9:28:00:22:77:8a:9c:44:e5:a1:03:ad:dc:
                    47:e8:35:76:21:f9:03:11:bc:27:ce:29:b9:52:c3:
                    cd:67:0b:b6:28:9e:28:20:1c:e2:bf:51:ec:d1:dd:
                    98:dc:90:56:3e:dc:21:6c:a9:f8:31:24:52:7a:f3:
                    8d:02:34:81:41:de:0a:3c:cd:e2:84:ce:c5:f3:9d:
                    3a:9e:e0:61:91:fb:8a:4a:2f:be:f6:5c:f0:c1:01:
                    d4:71:fa:f4:4a:a6:ec:90:1c:a4:c3:7c:ad:39:82:
                    93:c3:5b:5d:83:85:50:62:1d:81:2c:21:1c:e3:63:
                    be:4d:18:25:bc:89:3d:9f:f7:d7:d5:52:86:88:4a:
                    aa:57:d7:3a:e3:07:a3:2c:18:64:76:00:85:84:b9:
                    0e:6c:a0:ef:f0:d9:ce:9c:80:2f:21:a2:a7:d8:79:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AB:1A:FA:D6:F7:10:6E:9C:AD:42:B4:6B:70:7F:36:51:80:9C:16
            X509v3 Authority Key Identifier:
                keyid:F8:A6:A0:7C:CB:E7:42:53:0F:38:EE:DD:45:5A:C5:94:80:FD:A1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A6A07CCBE742530F38EEDD455AC59480FDA110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2b3XPVB7JRMqA1ZBLrGGbzkUtGSX4fCBr28drgSGM7Xv/1/3133382e39342e38382e302f32322d3234203d3e20323634313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:2c:9e:63:21:dd:5d:1b:3f:64:13:45:a8:ce:d3:94:2a:a8:
         1a:1f:3d:3c:15:d9:dc:f7:7d:77:03:8a:91:c1:18:8b:c1:72:
         b9:54:48:c0:fe:56:b5:8a:b9:f1:24:8b:e9:12:4e:a4:25:c7:
         26:b6:2a:c2:57:aa:4a:78:c4:40:46:bc:68:4d:9f:94:32:10:
         e7:23:f2:1f:93:5a:8c:81:d3:06:5d:89:f3:f0:83:4c:75:13:
         d8:51:f6:65:0d:e6:23:12:dd:e0:74:da:49:4e:cb:c1:c4:66:
         19:7e:78:61:3a:ca:58:3c:95:8d:d8:9c:60:d8:71:76:53:f3:
         0c:10:00:41:0f:8f:58:83:ab:8e:f0:18:26:63:cb:2f:3a:a8:
         f8:34:db:72:f6:1a:1d:49:3b:cc:b4:b3:64:ef:aa:d4:60:a8:
         9b:64:66:49:5b:31:f0:ab:c8:b8:bf:0b:85:0d:64:c2:9b:9a:
         94:db:e0:77:cd:f5:16:d1:30:65:31:e3:68:04:f2:68:63:44:
         e3:90:95:70:37:b1:2a:bb:3b:a3:29:22:24:9a:7d:8a:fa:12:
         46:bd:51:76:e9:3e:36:07:54:2a:4e:2d:40:06:7c:4c:9a:7f:
         16:19:14:a8:f3:7d:6e:ce:be:76:42:4d:d4:c8:82:87:0b:3a:
         56:d1:e6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org