Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32322d3232203d3e20323632383638.roa
File:                     3133382e3235352e3139362e302f32322d3232203d3e20323632383638.roa (raw, json)
Hash identifier:          ekf1KAGaN48Om+yjvvNmk14Ued5y1BODPTynofVUw48=
Subject key identifier:   16:88:23:41:E9:D7:E5:B6:DE:D0:22:21:27:49:1F:70:6B:26:88:26
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       06F2AED032EA7B64D7A16E77F5A95A41069E1D3E
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32322d3232203d3e20323632383638.roa
Signing time:             Thu 04 Apr 2024 11:06:51 +0000
ROA not before:           Thu 04 Apr 2024 11:01:51 +0000
ROA not after:            Thu 03 Apr 2025 11:06:51 +0000
asID:                     262868
IP address blocks:        138.255.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f2:ae:d0:32:ea:7b:64:d7:a1:6e:77:f5:a9:5a:41:06:9e:1d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Apr  4 11:01:51 2024 GMT
            Not After : Apr  3 11:06:51 2025 GMT
        Subject: CN=16882341E9D7E5B6DED0222127491F706B268826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:1b:ec:a9:ed:17:0f:0b:d1:13:2c:fe:1f:
                    a3:d2:98:ec:89:6f:64:0b:e4:ff:f9:fd:3d:bc:cc:
                    2c:15:19:35:76:f8:0f:62:6b:98:4b:f9:1f:53:58:
                    d8:1e:31:37:39:14:60:43:5e:83:7a:4f:34:6c:cb:
                    59:05:6e:83:fb:6d:65:79:da:e4:2f:8b:22:59:19:
                    98:d6:48:94:57:96:a8:b0:72:62:b2:e3:8e:56:00:
                    c5:8d:a3:7e:98:4c:9c:75:d4:a9:e7:fc:a5:1a:d4:
                    05:2b:b0:3e:e2:68:51:75:f9:c5:c8:aa:12:24:75:
                    15:86:10:e8:aa:af:ac:04:92:d2:8a:a3:68:7b:7e:
                    b0:19:fe:27:33:e0:9f:cd:f4:b8:ed:d9:b5:c7:7e:
                    91:2e:6b:d6:7a:b0:6c:43:64:f1:fb:5c:54:c4:8a:
                    eb:52:90:a4:eb:b0:8b:9d:e2:99:0c:6b:91:1c:57:
                    89:c1:04:99:79:fe:91:ee:80:99:dc:05:86:25:80:
                    2b:20:79:b2:1f:11:19:e2:0a:7a:11:5f:19:d6:51:
                    41:63:b2:99:85:0c:06:5b:c4:ed:94:4a:99:17:43:
                    ba:76:1c:30:9a:68:5d:09:b4:f7:97:17:33:ba:42:
                    65:89:00:fd:e4:9b:6f:6c:50:19:05:ba:99:e4:51:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:88:23:41:E9:D7:E5:B6:DE:D0:22:21:27:49:1F:70:6B:26:88:26
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3133382e3235352e3139362e302f32322d3232203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:62:05:bd:4e:e8:33:10:cb:8d:aa:94:6e:7a:70:6b:61:f1:
         cf:1b:25:a2:14:b7:8b:9d:22:7c:98:5a:0c:30:fc:b9:98:29:
         e5:b8:0a:62:2e:e3:72:56:70:86:9e:ee:85:ad:39:2d:cb:ee:
         83:fc:7d:ea:06:83:34:4f:e0:8f:a7:7e:bc:56:f8:42:87:f3:
         c7:47:3b:45:a9:a2:af:32:e1:cb:67:b6:01:98:85:f8:6b:ed:
         e1:7e:81:7f:10:36:fb:49:f6:0e:47:c2:d6:1e:8f:e8:8b:5e:
         d5:96:c5:3c:5f:9d:5a:ef:4d:22:78:20:cd:53:22:26:bb:67:
         6f:a0:22:97:b1:13:ca:c0:47:dd:79:b9:21:71:0d:be:07:a6:
         81:09:ce:ac:ec:ca:23:54:9f:2a:f0:d2:ea:12:0c:ec:c3:e4:
         8f:ef:85:eb:ad:7f:ce:3e:a2:0a:47:f2:68:c9:5d:7d:b3:12:
         47:d2:5e:49:8c:4b:f7:ea:6d:e1:b9:2b:97:c4:76:08:1f:79:
         c2:96:06:50:90:12:6b:7a:32:7f:cf:cf:23:f4:97:9c:68:87:
         f5:65:0e:bc:7b:1c:75:24:53:2f:0e:82:32:e6:97:a4:22:11:
         9b:28:1e:af:80:7f:0f:c0:7d:4a:9f:d2:4f:da:39:fe:9c:d7:
         12:04:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:53 2024 by rpki-client on console-ams.rpki-client.org