Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132362e302f32342d3234203d3e20323633383430.roa
File:                     3133382e3138352e3132362e302f32342d3234203d3e20323633383430.roa (raw, json)
Hash identifier:          FydMaew4agxPEhNbLRtInofNBPO0Q4CTY4vl80Fevds=
Subject key identifier:   44:F6:92:3F:DD:69:11:E2:1A:58:16:1E:E4:6E:4B:19:65:C9:11:B4
Certificate issuer:       /CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
Certificate serial:       1C75CB805E6B826A3AC83C9C61FE229EDE65F7EF
Authority key identifier: B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132362e302f32342d3234203d3e20323633383430.roa
Signing time:             Tue 28 May 2024 14:40:20 +0000
ROA not before:           Tue 28 May 2024 14:35:20 +0000
ROA not after:            Tue 27 May 2025 14:40:20 +0000
asID:                     263840
IP address blocks:        138.185.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl
                          rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:75:cb:80:5e:6b:82:6a:3a:c8:3c:9c:61:fe:22:9e:de:65:f7:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE
        Validity
            Not Before: May 28 14:35:20 2024 GMT
            Not After : May 27 14:40:20 2025 GMT
        Subject: CN=44F6923FDD6911E21A58161EE46E4B1965C911B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:59:af:88:b7:23:13:e9:8c:9c:03:fc:91:
                    e2:8f:76:5f:29:4b:2d:21:7b:70:47:19:f0:51:29:
                    7c:9d:6a:ba:68:25:30:65:90:92:dc:a9:ae:6b:77:
                    1e:d9:23:79:6f:4b:33:d7:a0:bd:7b:a9:03:3c:eb:
                    84:03:fc:93:a8:bc:64:5b:87:eb:8f:a5:a5:88:bf:
                    82:3b:90:86:e4:f8:2e:e8:a0:81:64:58:6f:88:43:
                    db:79:8e:40:52:18:0d:6b:69:ae:ac:22:43:a1:9c:
                    63:64:4d:ff:5d:8d:8c:4b:f5:29:36:a4:f5:95:19:
                    29:08:e1:e2:30:bf:6d:dc:04:eb:2e:d2:4c:21:4b:
                    cc:9a:41:1f:4d:ec:4b:4c:25:fd:f6:6d:64:22:69:
                    d1:39:15:78:fe:78:97:5e:0b:54:f8:f7:d7:c4:b7:
                    3d:95:c8:10:84:8a:71:11:9c:e4:0a:3b:4a:91:65:
                    db:29:c0:71:6a:e6:5c:74:21:0a:8f:81:18:83:91:
                    bc:6b:8e:8d:7b:da:dc:03:22:ae:82:e9:b0:52:e3:
                    4b:f5:eb:e7:3c:a6:d1:cd:15:2e:82:55:fe:1e:20:
                    56:a0:67:e5:35:ed:74:c1:f7:c4:76:17:98:a8:f7:
                    26:5d:f9:a5:1b:3c:ea:24:f1:b0:d2:a5:52:da:c7:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F6:92:3F:DD:69:11:E2:1A:58:16:1E:E4:6E:4B:19:65:C9:11:B4
            X509v3 Authority Key Identifier:
                keyid:B6:52:7C:B6:A3:B1:2B:9F:9A:B2:1D:CC:B0:50:B5:90:A8:DF:5B:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6527CB6A3B12B9F9AB21DCCB050B590A8DF5BFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132362e302f32342d3234203d3e20323633383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:98:e2:9a:09:b3:08:0f:cd:46:1a:91:bf:1f:6f:ac:c8:df:
         71:b8:a0:70:f9:4e:4a:11:81:94:a3:a1:3c:1f:d9:3c:60:80:
         c2:10:53:8f:6c:7d:00:08:ba:be:3b:0c:6c:9b:01:2e:c9:33:
         ca:02:b8:a9:11:03:8e:a6:c3:9d:2f:c7:a7:07:d8:91:b8:60:
         4a:d2:45:22:69:cc:f8:22:51:76:8f:da:bf:33:cb:92:04:a1:
         30:c9:96:51:30:d4:62:55:29:bf:3f:64:60:e6:08:d5:57:4e:
         64:12:86:38:ec:47:b9:b9:e7:6c:83:3f:52:f9:e6:58:a1:d6:
         c6:98:dc:14:a2:b5:68:17:b8:01:be:ac:f4:8a:72:43:68:9e:
         a9:e9:5a:51:96:9c:a5:f9:81:72:f2:af:39:54:fc:25:d7:c5:
         0f:80:0a:1f:f8:a6:2d:98:6c:98:55:0f:46:4e:f0:37:b2:d4:
         e3:79:14:ba:1e:af:61:6a:7a:51:df:1a:1c:32:0a:92:c0:21:
         88:fc:45:be:b3:b4:dd:0c:6e:9a:55:9c:f4:ad:92:0a:f4:bd:
         5c:b5:30:85:f4:19:dc:34:69:8c:36:c6:8b:35:c1:5b:8b:53:
         9b:db:e9:c3:1a:bd:a6:d6:1f:e2:93:19:63:9d:a8:71:33:c0:
         05:9a:26:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:15 2024 by rpki-client on console-ams.rpki-client.org