Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa
File:                     3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa (raw, json)
Hash identifier:          zeppCNW+d/nuS5ycesTJtO06DdBWPEiE2BYTAbAtOXg=
Subject key identifier:   2B:E9:70:EF:52:EE:B5:96:E7:4E:DA:FF:69:15:7D:06:04:01:C0:3D
Certificate issuer:       /CN=27310550B38DD3FF2221506599F0AD73C48542C0
Certificate serial:       73AAB0F8715A54AC08FC4D4FAF51B2779484C63D
Authority key identifier: 27:31:05:50:B3:8D:D3:FF:22:21:50:65:99:F0:AD:73:C4:85:42:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27310550B38DD3FF2221506599F0AD73C48542C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa
Signing time:             Fri 04 Oct 2024 06:40:28 +0000
ROA not before:           Fri 04 Oct 2024 06:35:28 +0000
ROA not after:            Fri 03 Oct 2025 06:40:28 +0000
asID:                     263905
IP address blocks:        138.204.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/27310550B38DD3FF2221506599F0AD73C48542C0.crl
                          rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/27310550B38DD3FF2221506599F0AD73C48542C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27310550B38DD3FF2221506599F0AD73C48542C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 08:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:aa:b0:f8:71:5a:54:ac:08:fc:4d:4f:af:51:b2:77:94:84:c6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27310550B38DD3FF2221506599F0AD73C48542C0
        Validity
            Not Before: Oct  4 06:35:28 2024 GMT
            Not After : Oct  3 06:40:28 2025 GMT
        Subject: CN=2BE970EF52EEB596E74EDAFF69157D060401C03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:79:e4:93:2d:b7:5b:ec:ee:af:91:63:d5:
                    f9:0c:07:63:ea:02:26:34:bc:24:9b:ae:94:8a:58:
                    af:5b:8d:a0:4b:0a:b9:16:41:e2:ca:11:e0:2b:aa:
                    7d:5f:59:be:47:46:23:f7:6b:43:f2:9c:9b:dc:21:
                    8f:2e:a7:e5:9b:7b:74:7a:ee:5b:d5:68:ac:ec:4e:
                    7a:f4:45:60:57:5f:04:0d:75:06:b7:7c:3f:ec:fe:
                    a9:e4:3e:31:04:f0:0a:58:90:a4:ef:48:f3:ab:f2:
                    d9:c9:41:c8:41:b7:dd:bf:51:66:05:30:6d:68:39:
                    e9:50:63:6a:90:e0:7c:85:fc:34:85:c1:35:b5:6b:
                    8b:95:fc:6d:b6:38:e5:5a:73:9c:52:93:1a:b3:00:
                    05:cf:64:1b:11:78:61:e6:5a:00:c0:5b:aa:68:f6:
                    0d:ee:b6:c9:07:d4:ee:53:8b:99:7c:10:06:80:e4:
                    9e:02:2a:5f:9a:64:a4:1f:c9:f8:10:87:d8:56:b9:
                    6d:d2:bf:43:5b:87:29:72:44:74:37:bd:4c:8d:98:
                    24:78:5b:3b:7f:3c:80:71:3d:30:3d:45:1f:a0:25:
                    d1:56:d4:99:fd:44:2a:1b:60:aa:a7:3d:ee:32:7e:
                    dd:17:d3:cb:27:fa:25:7f:3b:ec:94:79:51:ac:6b:
                    18:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E9:70:EF:52:EE:B5:96:E7:4E:DA:FF:69:15:7D:06:04:01:C0:3D
            X509v3 Authority Key Identifier:
                keyid:27:31:05:50:B3:8D:D3:FF:22:21:50:65:99:F0:AD:73:C4:85:42:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/27310550B38DD3FF2221506599F0AD73C48542C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27310550B38DD3FF2221506599F0AD73C48542C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3234203d3e20323633393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:78:f2:50:a4:07:f8:2a:53:5c:d4:8a:d4:f7:30:02:7a:7b:
         4f:30:ea:f7:04:37:19:ca:75:53:e6:67:8e:c4:18:a4:61:6f:
         23:57:9f:2d:ab:dc:79:6c:4e:0d:c7:59:6b:4c:29:f6:1d:5c:
         40:74:87:1d:9c:7d:ea:0a:d3:7c:9f:9b:c0:9c:05:4c:c9:21:
         6f:d0:76:4b:a0:91:44:5e:e8:d5:13:11:b2:8f:b7:a6:a1:99:
         ab:66:b3:ce:b5:d5:02:e8:c1:8c:26:4d:e2:ac:92:c5:95:43:
         1c:2b:ba:7f:6e:52:f4:d6:32:4c:8e:76:19:81:b8:b6:78:c3:
         dc:3b:e6:a9:6d:ff:5d:bd:fc:9e:79:ce:e8:52:df:f3:4c:9b:
         62:4e:91:41:6b:07:8f:e8:1f:5d:e3:3c:f1:ec:e8:aa:e1:17:
         b7:95:a3:b3:14:fe:f1:c0:8f:cf:45:ff:2c:97:4a:a8:34:8d:
         35:8e:62:52:86:5c:d6:a5:2d:c4:87:4e:5b:f8:18:b6:6c:ea:
         42:df:db:a5:6d:4c:33:48:3b:25:11:81:d1:1b:dd:9e:a9:fd:
         3d:52:fb:5a:ed:23:10:89:9e:77:10:3d:32:37:cb:a4:1d:89:
         3b:fd:d9:1a:d3:20:c8:52:1d:dc:5f:31:ad:44:71:02:af:3b:
         2a:7c:af:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:13 2024 by rpki-client on console-ams.rpki-client.org