Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131322e302f32332d3233203d3e20323633383937.roa
File:                     3133382e3230342e3131322e302f32332d3233203d3e20323633383937.roa (raw, json)
Hash identifier:          nZ9XZwgs/Z6o6fJyP0+24b8ywxNLoecQ0Z2NYjmLC6o=
Subject key identifier:   B9:65:B4:60:B4:91:4F:30:99:AA:F3:46:2C:AE:CF:DD:65:B5:F9:17
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       4669690740905405D74B053806BB2E5D8AA563E2
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131322e302f32332d3233203d3e20323633383937.roa
Signing time:             Thu 04 Apr 2024 21:01:01 +0000
ROA not before:           Thu 04 Apr 2024 20:56:01 +0000
ROA not after:            Thu 03 Apr 2025 21:01:01 +0000
asID:                     263897
IP address blocks:        138.204.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:69:69:07:40:90:54:05:d7:4b:05:38:06:bb:2e:5d:8a:a5:63:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Apr  4 20:56:01 2024 GMT
            Not After : Apr  3 21:01:01 2025 GMT
        Subject: CN=B965B460B4914F3099AAF3462CAECFDD65B5F917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:f6:22:2f:71:79:0f:1b:f2:c1:4d:70:42:
                    3a:4b:7b:21:da:9e:77:c6:a5:dd:9f:3c:e9:17:0f:
                    bb:02:35:fb:48:dd:f5:92:10:f0:b1:fc:62:92:4a:
                    61:89:16:ac:95:dd:df:69:90:1b:c8:fe:c8:31:7c:
                    89:2e:5f:f8:4e:6a:68:bb:2e:a1:d5:1d:b0:b6:e3:
                    d2:f1:6a:e9:16:f5:21:38:13:61:28:8d:b5:d8:6f:
                    81:1b:1f:eb:63:1c:0f:7a:71:c0:2b:1e:1b:c5:9c:
                    42:9e:94:30:92:92:c3:fe:b0:e6:57:70:07:39:e8:
                    19:b7:be:ee:c3:5f:d1:be:a3:ad:64:46:72:2b:9d:
                    b8:5a:37:f7:cc:a6:87:22:5a:c8:c5:dd:3e:77:5e:
                    64:38:47:4a:57:cc:5f:05:40:d9:03:3a:05:fe:a3:
                    6e:4f:06:ce:58:d3:bc:dc:85:f6:dc:17:18:dd:c4:
                    95:18:ae:5c:b7:b8:2f:48:f3:45:8b:c0:62:20:89:
                    bd:7b:8b:86:0b:db:9b:dd:82:a5:2c:a7:30:f2:82:
                    60:61:fd:56:20:99:ef:6b:1e:ea:ea:6c:58:01:3e:
                    36:1b:68:37:b2:44:84:13:3e:2e:ab:46:65:59:9e:
                    3b:04:7a:30:be:e9:b4:a6:61:3e:b2:f9:0b:54:99:
                    ca:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:65:B4:60:B4:91:4F:30:99:AA:F3:46:2C:AE:CF:DD:65:B5:F9:17
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131322e302f32332d3233203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:85:39:6f:45:d5:ca:3f:68:20:e2:98:d5:09:6b:ce:9b:f7:
         7d:a0:fe:5c:8f:77:a7:dd:86:cc:4d:47:02:12:af:8e:de:16:
         29:86:02:e3:e2:42:23:89:a9:40:b0:c4:70:c7:e8:f6:97:d7:
         e3:41:e4:a0:49:0d:a0:ac:f1:38:fd:87:a5:0a:d6:d2:68:0d:
         33:70:50:b2:39:ce:31:c6:d9:02:9f:c1:98:e9:71:ed:53:84:
         93:61:3e:86:a0:02:58:ad:43:f9:22:92:f2:5c:b8:ca:1b:0d:
         64:57:aa:a4:de:15:81:4d:e6:82:fa:7b:32:41:13:0a:8c:7f:
         aa:f4:b7:cf:cd:c5:77:63:43:c6:2b:21:48:c6:b8:c6:93:25:
         b7:40:84:d3:15:f8:ac:f9:5c:cc:d0:fb:6b:d8:69:47:8f:00:
         75:59:2c:3d:61:f8:09:09:cf:71:f6:6d:ba:99:d0:61:8b:d8:
         1d:79:04:d7:a3:d4:ef:0e:a9:dd:69:8b:84:2c:de:4c:7f:f5:
         60:39:e0:d0:15:b8:a4:0b:31:62:73:fb:44:5c:29:78:bf:32:
         52:d7:be:68:a2:d7:26:47:0d:6c:35:3c:3c:35:0f:a1:62:74:
         5b:62:16:ec:77:61:6d:6e:2d:33:76:87:91:1c:27:eb:a8:1c:
         4e:21:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:24 2024 by rpki-client on console-ams.rpki-client.org