Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa
File:                     3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa (raw, json)
Hash identifier:          fJ7x5Su4IyHk65DceBytvAOmwZB6J+vlusHnN2WOhOg=
Subject key identifier:   44:85:78:E2:AB:27:AB:0E:C2:15:89:F1:1F:80:31:D4:56:29:50:A2
Certificate issuer:       /CN=AE1C058909826E8EDF13C554CAA858EC59CA1455
Certificate serial:       2813432669F24EE2DDF5C855389FABEAB5CD8DE5
Authority key identifier: AE:1C:05:89:09:82:6E:8E:DF:13:C5:54:CA:A8:58:EC:59:CA:14:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa
Signing time:             Thu 04 Apr 2024 08:00:25 +0000
ROA not before:           Thu 04 Apr 2024 07:55:25 +0000
ROA not after:            Thu 03 Apr 2025 08:00:25 +0000
asID:                     263903
IP address blocks:        138.204.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.crl
                          rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:13:43:26:69:f2:4e:e2:dd:f5:c8:55:38:9f:ab:ea:b5:cd:8d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1C058909826E8EDF13C554CAA858EC59CA1455
        Validity
            Not Before: Apr  4 07:55:25 2024 GMT
            Not After : Apr  3 08:00:25 2025 GMT
        Subject: CN=448578E2AB27AB0EC21589F11F8031D4562950A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:70:d5:c5:7b:68:39:23:68:97:38:ec:35:
                    cb:49:a2:8d:aa:5d:1f:dc:cf:6f:7f:66:57:51:40:
                    f1:fc:5b:d5:bb:a0:53:55:81:93:bd:b5:c2:4f:6d:
                    ff:43:88:26:84:4d:67:96:bf:ab:e8:c8:a6:48:f4:
                    d9:77:f9:28:a0:04:5c:e4:2c:9d:18:d9:a0:3d:de:
                    b8:0a:0d:1d:ea:ac:b8:96:1d:78:fd:a9:25:59:7e:
                    e1:ee:c1:bb:2e:26:e1:5d:14:e7:59:23:15:9a:73:
                    a4:d4:46:6d:d2:75:66:0c:c4:59:bf:c0:53:bb:f2:
                    b2:d1:40:30:a3:63:8a:8b:9b:c9:cf:61:df:08:44:
                    e1:2a:0c:a9:63:03:be:37:88:e1:04:fd:8b:63:c1:
                    1b:22:27:c1:ae:75:6a:0c:cc:4c:af:b1:a1:a5:39:
                    cc:f9:f3:27:46:ef:49:e2:48:c4:8d:83:46:ef:84:
                    2b:07:49:eb:69:55:63:ae:00:48:19:d0:2f:e2:08:
                    b8:2a:fe:b0:09:9a:60:70:40:1d:4a:7c:27:5b:14:
                    03:3f:d5:23:fe:0e:2c:47:e5:6b:56:3b:76:f6:28:
                    f7:1d:50:1e:c7:28:f2:d8:42:22:0c:da:ed:99:4c:
                    79:58:b2:b8:74:b8:e8:0a:8d:3b:3a:d5:bd:48:f0:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:85:78:E2:AB:27:AB:0E:C2:15:89:F1:1F:80:31:D4:56:29:50:A2
            X509v3 Authority Key Identifier:
                keyid:AE:1C:05:89:09:82:6E:8E:DF:13:C5:54:CA:A8:58:EC:59:CA:14:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE1C058909826E8EDF13C554CAA858EC59CA1455.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/1/3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:21:0a:95:77:b8:07:5f:51:45:f6:42:91:10:d3:e3:f8:f6:
         dc:90:b3:4d:fb:1a:4e:0b:bd:86:62:fe:95:09:c8:51:84:50:
         91:31:8e:82:be:58:23:e1:6b:75:b2:fb:ae:78:fe:08:56:45:
         d6:cd:04:b0:9a:0b:ff:0e:6d:d7:02:b1:cf:08:60:70:ba:c5:
         1c:d1:3c:35:ce:9b:8a:80:c8:70:c0:95:1d:77:02:6d:af:eb:
         b7:f1:43:dc:5b:72:44:3e:40:67:60:a8:89:ac:f4:89:0b:19:
         85:4f:9b:7a:3b:07:70:00:a2:44:b2:27:14:f8:5c:5e:b0:1d:
         ef:ef:51:d1:61:a0:76:b2:a0:42:43:22:e2:0e:b0:cb:18:d9:
         28:31:65:1c:10:a6:ff:a6:64:5c:74:e2:37:58:6d:30:cf:f9:
         e4:12:96:d2:46:92:c6:cf:35:f2:90:34:67:b0:20:cd:4d:a6:
         21:9b:d5:0a:4d:df:83:aa:11:bf:99:c2:ab:5e:ca:47:f4:78:
         e1:d4:b0:50:e3:70:1c:b2:ab:52:1c:c5:4a:c1:94:45:22:10:
         86:32:c2:99:f0:34:b8:89:4d:e6:5a:c8:d6:42:57:f9:87:32:
         0c:0a:ef:45:db:f0:a3:b6:95:d2:61:bb:09:b4:2a:c1:53:c0:
         5b:43:07:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:27 2024 by rpki-client on console-fra.rpki-client.org