Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263864.roa
File:                     AS263864.roa (raw, json)
Hash identifier:          TfabEZTuInf5u1tM/1kWTEEVb5l34tA2K8AF02xtGRI=
Subject key identifier:   77:44:FF:BD:78:78:61:3C:F1:9D:1C:2C:73:0F:CA:05:AA:6E:73:2A
Certificate issuer:       /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial:       4F8563340D1D956880CB6136DDA2E0ED60AC0768
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263864.roa
Signing time:             Mon 25 Nov 2024 16:59:39 +0000
ROA not before:           Mon 25 Nov 2024 16:54:39 +0000
ROA not after:            Mon 24 Nov 2025 16:59:39 +0000
asID:                     263864
IP address blocks:        138.186.164.0/22 maxlen: 24
                          170.79.220.0/22 maxlen: 24
                          2804:26ec::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 09:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:85:63:34:0d:1d:95:68:80:cb:61:36:dd:a2:e0:ed:60:ac:07:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
        Validity
            Not Before: Nov 25 16:54:39 2024 GMT
            Not After : Nov 24 16:59:39 2025 GMT
        Subject: CN=7744FFBD7878613CF19D1C2C730FCA05AA6E732A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:a3:cc:e2:0e:c1:33:71:f4:a0:2a:14:72:
                    c8:1a:af:aa:53:89:c4:59:6f:ea:8d:4d:82:52:f9:
                    eb:94:3a:91:60:3b:62:92:8b:e6:af:f2:43:af:e4:
                    bd:b6:1a:e0:5e:03:1c:c8:23:b0:fb:c8:fa:9d:75:
                    d0:35:a1:2f:28:c2:cf:f8:a0:cd:b5:56:74:0a:01:
                    9d:d7:55:2e:e8:c2:2e:73:88:0d:c8:7a:a4:87:b6:
                    03:41:76:7f:a5:9c:fb:34:f0:df:ae:9b:ea:39:7a:
                    c6:60:20:d4:b0:00:cc:52:01:ae:e5:a6:2a:be:28:
                    cc:b2:be:3c:3e:2a:d9:16:2e:94:0b:b1:12:9a:41:
                    fa:b4:f8:53:80:89:e4:05:5c:ab:ed:e5:18:22:99:
                    2d:1b:b0:af:30:9d:e0:fa:80:98:d7:67:47:48:88:
                    69:39:d0:05:51:ac:38:e4:48:b7:f0:3f:cc:ef:5a:
                    8e:0c:27:81:67:f9:b3:31:0d:6f:d7:42:63:b6:b6:
                    e8:93:3e:e5:8e:7c:25:12:1d:7d:bf:14:8c:3e:5c:
                    56:14:6f:6d:31:eb:ca:68:bf:6c:c1:7d:0a:22:ae:
                    ad:40:12:4e:42:09:24:33:65:10:7a:30:86:21:9d:
                    6b:01:c9:30:29:08:3d:c2:e6:13:72:d2:81:9f:3e:
                    15:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:44:FF:BD:78:78:61:3C:F1:9D:1C:2C:73:0F:CA:05:AA:6E:73:2A
            X509v3 Authority Key Identifier:
                keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263864.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.164.0/22
                  170.79.220.0/22
                IPv6:
                  2804:26ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:2f:67:53:83:33:4b:b4:31:ab:74:7c:01:a5:c9:89:17:33:
         39:f6:56:c9:f8:b0:35:15:a6:2e:d6:da:ef:ef:98:65:d3:4a:
         24:a2:8e:a9:5b:e5:61:ab:61:c8:0b:5b:26:f2:a5:a5:e6:82:
         84:2e:30:1e:f5:73:95:8f:19:70:a2:73:17:50:71:5d:42:ae:
         b4:e2:6a:41:56:ef:2f:08:41:e8:53:7a:2b:27:09:0b:03:36:
         f1:01:29:6a:39:b9:63:c0:25:e0:8f:6f:c5:0a:cf:0f:79:93:
         e8:03:58:2e:b4:3c:e3:63:a1:12:d7:a9:cf:17:e0:c1:ac:04:
         f7:e3:19:e6:38:4a:b7:f9:36:43:44:f9:64:08:1b:13:ac:73:
         7c:c5:6f:1a:4a:dc:08:94:ba:82:2d:29:a5:0c:90:b8:fd:57:
         aa:fe:56:3f:06:58:f0:d3:7b:af:d5:64:38:87:1e:48:f9:0a:
         65:e4:dc:0a:ab:dd:0b:8c:46:c9:2b:19:fe:99:3f:ef:11:9b:
         9b:c4:bc:72:4b:f4:5e:2c:1a:9a:7c:cd:91:c5:e0:2c:71:5c:
         8f:3c:bb:99:6f:bd:15:c1:a9:70:7f:88:19:80:77:ad:b7:e6:
         09:5b:96:63:2d:33:b3:c1:5f:bb:c5:cb:9d:84:b5:29:09:fa:
         ff:b8:2b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 10:53:29 2024 by rpki-client on console-ams.rpki-client.org