Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232362e302f32332d3233203d3e20323633393839.roa
File:                     3133382e3235352e3232362e302f32332d3233203d3e20323633393839.roa (raw, json)
Hash identifier:          xHEFwq22/Drj1JPYIFuOW+1xc9B17H0iMoWlFwyNf6Q=
Subject key identifier:   02:2D:C3:58:6D:AB:2C:D7:01:76:08:AA:46:85:9D:96:A5:09:5F:B0
Certificate issuer:       /CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
Certificate serial:       3BF50A30E17A71266B2187FC3F2FF57F3A582EF0
Authority key identifier: 6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232362e302f32332d3233203d3e20323633393839.roa
Signing time:             Wed 03 Apr 2024 18:52:11 +0000
ROA not before:           Wed 03 Apr 2024 18:47:11 +0000
ROA not after:            Wed 02 Apr 2025 18:52:11 +0000
asID:                     263989
IP address blocks:        138.255.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl
                          rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f5:0a:30:e1:7a:71:26:6b:21:87:fc:3f:2f:f5:7f:3a:58:2e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2CFADE0DB965B830D4C92D2183921AE113D2A2
        Validity
            Not Before: Apr  3 18:47:11 2024 GMT
            Not After : Apr  2 18:52:11 2025 GMT
        Subject: CN=022DC3586DAB2CD7017608AA46859D96A5095FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:c8:50:65:d5:92:d9:fa:42:f8:bc:a2:01:
                    f0:83:e2:ec:0d:ef:1d:8e:26:6a:21:3b:07:ae:27:
                    13:25:39:3a:9b:f6:96:72:27:50:35:4d:6b:6d:94:
                    ee:d2:13:32:ca:35:ce:aa:fc:d6:94:44:ae:65:76:
                    68:d0:c1:40:44:e5:32:1c:05:98:b9:83:76:06:3c:
                    09:94:38:34:3b:5a:de:0d:a4:04:ab:73:08:b2:02:
                    09:32:8b:48:65:98:78:37:1e:22:15:b3:e2:7f:9b:
                    10:95:05:61:81:1c:9b:23:cb:85:d8:52:20:18:e2:
                    3d:65:1a:8f:0a:16:5e:69:3d:26:01:6f:e5:e5:ef:
                    d1:40:83:a1:1e:26:a9:0f:0b:c1:72:1a:b8:b7:0e:
                    44:e7:d9:70:cd:8e:5c:a6:c2:2e:3d:b0:e0:29:eb:
                    4d:d1:f6:2a:32:24:95:29:cf:71:b9:3f:b9:51:30:
                    10:ee:f1:44:9e:e6:da:ff:88:b3:96:78:57:57:e6:
                    5a:74:31:ac:fc:c7:01:ec:c1:d7:e8:7d:f0:b3:c8:
                    24:b9:1b:1b:08:8e:a5:64:7c:f5:70:54:68:3a:5d:
                    66:a8:cc:56:3b:98:75:40:30:6c:63:26:fa:39:49:
                    b6:08:1b:39:0a:22:a7:6c:fe:4b:f6:c8:31:cd:3b:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2D:C3:58:6D:AB:2C:D7:01:76:08:AA:46:85:9D:96:A5:09:5F:B0
            X509v3 Authority Key Identifier:
                keyid:6E:2C:FA:DE:0D:B9:65:B8:30:D4:C9:2D:21:83:92:1A:E1:13:D2:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2CFADE0DB965B830D4C92D2183921AE113D2A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/36zjJi97xvGXYEJ2WsArtg8NwtMu72rRSDgkaRvARR8o/1/3133382e3235352e3232362e302f32332d3233203d3e20323633393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dd:6c:64:eb:bb:07:ae:64:e5:b9:17:d0:43:d6:31:75:e5:c6:
         5f:04:4c:3a:aa:7f:ce:18:b8:59:4f:17:00:bd:a7:da:51:9d:
         fb:ca:60:e1:04:11:f3:a5:d5:1f:de:b1:87:de:e0:cb:ac:60:
         af:13:5e:03:1d:de:f0:1c:f8:c6:27:a4:39:23:ef:0d:33:e1:
         75:47:0d:c1:c7:fa:3a:33:88:b3:f6:ad:14:82:5a:aa:e7:f4:
         eb:c4:40:e2:30:bb:c8:73:2f:b1:43:86:5d:e7:7b:67:90:fd:
         a2:be:95:3d:55:34:2a:a9:5f:9e:f0:6b:58:6c:c1:69:d3:a8:
         f2:d2:dd:37:e4:a2:3b:5c:d3:5b:ee:69:c4:52:57:7d:38:ab:
         1d:10:81:68:17:9e:fc:36:dd:4d:29:4a:5d:c9:30:54:eb:e1:
         fc:4d:7e:28:62:fa:5b:01:45:c9:97:33:81:bd:f4:1e:a0:86:
         61:ca:b0:dd:c1:94:32:b9:c8:53:00:ed:5a:93:ca:37:1e:cc:
         cb:1e:a7:18:f9:37:40:44:0a:0f:cd:ba:0d:80:6e:2d:19:dd:
         81:fc:60:6f:d3:a7:90:2c:2e:d8:e2:07:bb:4e:19:2a:38:b5:
         97:2e:5a:77:72:15:40:03:48:b7:68:dd:67:79:85:a6:85:85:
         5a:24:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:52 2024 by rpki-client on console-ams.rpki-client.org