Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3133382e3131382e3234342e302f32322d3235203d3e20323634323730.roa
File:                     3133382e3131382e3234342e302f32322d3235203d3e20323634323730.roa (raw, json)
Hash identifier:          fsUzcP4LQXmlGvOPvR1qsEPuzH7kG161HYUUUZXQfjE=
Subject key identifier:   8E:A6:C0:DB:BD:15:06:67:0C:35:A2:4E:1B:CB:17:3B:27:C5:FC:F7
Certificate issuer:       /CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
Certificate serial:       4BB76858C866DF90C13D0DFE5C1C334E6444279B
Authority key identifier: B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3133382e3131382e3234342e302f32322d3235203d3e20323634323730.roa
Signing time:             Mon 15 Apr 2024 19:20:02 +0000
ROA not before:           Mon 15 Apr 2024 19:15:02 +0000
ROA not after:            Mon 14 Apr 2025 19:20:02 +0000
asID:                     264270
IP address blocks:        138.118.244.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl
                          rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b7:68:58:c8:66:df:90:c1:3d:0d:fe:5c:1c:33:4e:64:44:27:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
        Validity
            Not Before: Apr 15 19:15:02 2024 GMT
            Not After : Apr 14 19:20:02 2025 GMT
        Subject: CN=8EA6C0DBBD1506670C35A24E1BCB173B27C5FCF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:8c:f8:06:2f:3e:99:cf:f7:f3:75:6b:b0:
                    eb:79:d2:72:66:9a:73:78:02:a3:03:92:93:9f:70:
                    f2:50:eb:96:de:ce:ec:31:14:4c:02:a9:99:26:3d:
                    3b:ef:1a:29:0e:f6:08:8e:a9:2b:7c:3b:85:18:9e:
                    7c:32:9b:a0:1e:e0:c0:85:16:58:24:4d:ab:e0:87:
                    a7:0d:82:8f:70:99:f5:f7:02:8a:c8:a2:3f:26:21:
                    cf:8e:36:29:fb:e8:f7:ef:1a:8a:01:5c:00:44:bf:
                    31:47:b6:cf:9d:c9:cc:f9:d0:96:7d:42:db:a4:4f:
                    f1:4b:6b:09:95:b4:06:42:f5:d9:ee:86:ed:67:13:
                    c0:da:50:6e:e8:3f:fe:10:41:f3:37:0a:43:e0:f0:
                    f4:c7:f0:f4:37:48:d0:21:aa:52:d8:8e:3e:e8:55:
                    8d:ce:61:95:66:23:50:95:4c:80:28:55:2a:90:06:
                    cc:40:7b:06:00:22:80:b7:df:ca:7d:41:cb:37:0d:
                    a2:93:93:65:13:58:e4:d0:d3:7d:c6:4b:cf:34:4d:
                    ae:23:98:e2:ca:8b:ec:87:68:22:e1:a4:f8:f0:47:
                    0a:b3:98:2f:7c:e4:98:7e:b4:9b:b4:44:8b:05:1b:
                    f1:a6:ba:f0:97:a2:10:03:e7:26:01:ae:f8:73:49:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:C0:DB:BD:15:06:67:0C:35:A2:4E:1B:CB:17:3B:27:C5:FC:F7
            X509v3 Authority Key Identifier:
                keyid:B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3133382e3131382e3234342e302f32322d3235203d3e20323634323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:e7:1a:34:79:55:2c:56:4f:20:5e:75:c6:cb:d1:5e:7c:63:
         e4:78:a6:fe:90:ba:2e:76:b7:1e:62:13:26:8d:e0:87:a2:13:
         ee:b6:e4:e9:b1:84:f7:83:c8:b8:24:87:5d:ca:a3:dd:3b:b1:
         95:ca:d8:e2:a6:dd:a5:d5:d4:75:9a:d4:94:f2:57:ad:07:9f:
         f1:de:1b:d3:f2:c2:58:62:08:4b:de:1e:19:fd:13:d4:13:66:
         f7:20:50:2e:47:c8:ad:a6:c6:2b:9b:ea:0f:b9:11:11:09:19:
         62:b5:1d:be:6b:7e:b3:bb:cc:ee:b1:35:14:43:4c:35:c7:98:
         0a:56:e8:a7:b6:42:76:5b:0b:cf:32:29:88:39:ee:85:3b:14:
         e4:ab:5e:d2:3b:e4:75:5a:f4:bc:9e:03:85:09:d2:8d:45:48:
         b5:46:56:9c:f3:96:62:09:d2:16:3d:37:74:97:d9:a4:4f:26:
         e9:a1:24:57:7a:cb:fc:62:47:dc:36:9c:24:e4:af:83:f8:69:
         d9:c6:df:0a:98:28:5f:2b:db:cc:2c:0a:ab:92:cc:57:4f:1b:
         6a:84:85:da:06:7c:86:bd:4b:8d:5f:38:97:b9:20:c1:02:6d:
         84:f6:09:81:e3:af:76:de:c7:98:98:68:c5:d3:c9:1a:80:82:
         00:ee:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:34 2024 by rpki-client on console-fra.rpki-client.org