Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3138352e39362e302f32322d3232203d3e203238323130.roa
File:                     3133382e3138352e39362e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          KExINloeYsFpjfJqBl5S9YiI1zeYeW3K2C0TaZtDNnA=
Subject key identifier:   FC:6F:46:79:F3:58:EF:2D:F9:06:DB:8A:15:68:41:66:0A:0D:F5:7C
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       3A2168A76EF67FB41A5F324A45EBB005BB549065
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3138352e39362e302f32322d3232203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:50 +0000
ROA not before:           Thu 04 Apr 2024 04:32:50 +0000
ROA not after:            Thu 03 Apr 2025 04:37:50 +0000
asID:                     28210
IP address blocks:        138.185.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:21:68:a7:6e:f6:7f:b4:1a:5f:32:4a:45:eb:b0:05:bb:54:90:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:50 2024 GMT
            Not After : Apr  3 04:37:50 2025 GMT
        Subject: CN=FC6F4679F358EF2DF906DB8A156841660A0DF57C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:a6:b1:dc:f4:6d:4f:42:32:bd:6c:9a:16:
                    6d:2a:2c:d9:a4:7d:a7:39:91:4f:84:7a:95:b5:f7:
                    2e:47:af:f8:55:fa:5f:73:32:36:ce:e3:21:8d:1b:
                    58:78:61:b9:c1:4e:b0:f9:55:b3:33:46:61:03:16:
                    84:4d:12:8e:d0:ef:90:b6:52:55:80:eb:8f:33:e0:
                    a0:75:3a:1d:dd:7f:68:24:bb:d0:09:e8:52:d4:29:
                    ae:d6:67:cc:06:0d:a3:6e:37:45:53:0f:71:57:4a:
                    5f:58:ac:d8:96:d5:3d:4d:c5:dd:b1:15:50:0d:11:
                    f5:e9:99:31:de:ca:f1:aa:bd:bc:fb:c3:a3:87:01:
                    d5:6e:4d:d0:fb:92:bf:b5:90:58:8e:9f:ac:bb:7f:
                    e4:d7:29:dd:bb:73:af:df:e9:4b:43:31:9f:6e:a9:
                    04:2d:17:94:83:67:b8:1b:d7:1b:47:43:1b:20:ac:
                    4c:87:f6:2e:9d:2c:bc:54:79:d1:49:e5:d9:2a:48:
                    f8:5f:60:44:9c:a2:44:96:d4:0c:27:85:2f:e6:e8:
                    44:18:41:98:3c:8b:0c:6d:9c:fa:36:0f:5b:e6:92:
                    8b:9d:a8:85:52:46:be:ab:91:1a:a9:f1:e9:df:1a:
                    af:22:eb:3d:89:86:f4:e5:ec:4c:2b:29:87:2e:43:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6F:46:79:F3:58:EF:2D:F9:06:DB:8A:15:68:41:66:0A:0D:F5:7C
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133382e3138352e39362e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:70:37:4d:34:b7:43:ee:c9:fd:9a:8b:b9:6d:1b:b3:b5:30:
         b4:b9:87:6e:54:97:be:5a:78:d0:b0:10:58:32:5f:1a:a9:84:
         c9:27:07:52:36:9e:41:91:ad:67:47:e1:15:34:97:66:43:f7:
         1c:8d:cd:55:05:c4:07:f6:a5:b1:0a:19:02:ba:e0:50:41:8c:
         c9:17:30:18:e3:59:75:26:f4:5d:25:40:de:92:40:23:ac:36:
         75:7c:01:90:f1:b0:9e:82:79:5a:27:24:34:8b:aa:68:31:26:
         50:53:d3:e0:37:6b:d6:08:df:2e:d3:95:03:5a:4d:5f:77:dd:
         f6:67:f6:65:05:8f:49:1d:98:0a:8a:ff:1c:6a:3e:42:6e:f2:
         56:78:d1:c2:42:d1:0d:4a:95:21:f7:4c:e3:7c:28:01:bf:39:
         5c:5d:40:60:c6:28:ab:a5:06:b2:eb:17:ce:ed:ac:43:46:ee:
         1f:ac:98:4f:75:4d:45:24:6f:86:a2:58:03:17:da:32:28:de:
         57:e2:4b:27:d7:d5:ef:24:21:22:cb:8e:df:1c:b9:a5:fb:fd:
         df:d7:1f:7e:fa:b2:ce:73:37:9d:09:b8:2f:ef:08:ae:55:c7:
         aa:6e:6a:6d:94:6b:5a:ad:80:78:83:13:f6:ec:9a:00:1f:a9:
         3b:33:a8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org