Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131322e302f32342d3234203d3e20323633383937.roa
File:                     3133382e3230342e3131322e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier:          UWeTn98J2I8Wi0zardPcGz/eaWGofzZnJi1TZUJEMMs=
Subject key identifier:   5E:E5:AB:CA:95:02:24:4A:5C:A1:CA:D8:F2:6B:B9:6E:9B:A7:44:55
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       7D7D9FDD515809A2C66E68D550FF768A0524B3A0
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131322e302f32342d3234203d3e20323633383937.roa
Signing time:             Thu 04 Apr 2024 21:00:59 +0000
ROA not before:           Thu 04 Apr 2024 20:55:59 +0000
ROA not after:            Thu 03 Apr 2025 21:00:59 +0000
asID:                     263897
IP address blocks:        138.204.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7d:9f:dd:51:58:09:a2:c6:6e:68:d5:50:ff:76:8a:05:24:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Apr  4 20:55:59 2024 GMT
            Not After : Apr  3 21:00:59 2025 GMT
        Subject: CN=5EE5ABCA9502244A5CA1CAD8F26BB96E9BA74455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ce:4a:bb:40:00:97:05:8a:f8:2d:fb:27:cc:
                    b4:f5:fb:74:34:15:18:dd:80:a0:a0:b1:2e:98:c0:
                    15:5d:72:29:a2:db:7a:6d:51:24:70:1c:5a:62:0f:
                    32:ef:fc:bc:5c:05:47:38:88:34:98:12:57:e8:b9:
                    f8:0c:a3:a2:14:b2:1f:52:8c:16:98:6b:4d:0d:34:
                    60:40:6f:45:92:76:74:c4:01:81:26:57:42:03:cd:
                    ee:58:95:a1:ba:af:bf:ee:1b:a2:7e:80:7a:82:c3:
                    de:f3:ae:4f:b1:47:72:7d:d1:22:d3:a8:29:b0:db:
                    8c:35:69:a1:f7:81:65:48:c6:d0:e5:82:9d:88:6a:
                    ff:b2:46:fc:68:21:85:10:e5:31:51:84:70:3a:ab:
                    65:bc:3c:5a:02:a2:6e:d2:e9:51:93:55:d2:8e:8d:
                    42:bd:1c:dd:e9:72:ef:64:19:09:b1:60:0f:45:a8:
                    b4:7a:90:fa:8c:b5:1e:43:0e:25:9a:b8:c4:10:bd:
                    37:96:28:dc:32:76:2e:e2:e0:89:49:fc:4a:38:3a:
                    be:e3:07:e1:06:48:3a:61:82:35:b7:1f:20:56:0c:
                    55:bf:39:3f:38:77:53:37:d1:53:20:89:c4:04:f3:
                    f4:25:93:c3:75:33:91:ff:b0:46:b6:9a:e1:20:56:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E5:AB:CA:95:02:24:4A:5C:A1:CA:D8:F2:6B:B9:6E:9B:A7:44:55
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131322e302f32342d3234203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:88:c8:ef:fc:af:2b:7b:73:f2:38:37:8d:1c:9b:70:0c:f9:
         c2:d8:b9:2e:c1:8b:e8:f9:be:9d:36:f6:16:16:e2:9a:04:89:
         4b:a8:2a:6a:78:e5:91:51:5d:1c:38:8e:15:d9:72:3c:04:07:
         81:37:c2:35:fe:ac:d9:d5:44:32:7d:bd:68:0b:12:7b:6c:92:
         4c:e7:80:c8:0c:26:c2:28:9b:60:e0:94:98:8f:ca:69:ae:d1:
         11:ad:fc:63:79:8e:4f:29:62:09:2e:5b:ee:41:e5:86:1d:5d:
         89:90:19:11:07:a2:d7:7b:cc:92:39:68:6a:1a:3d:11:95:bf:
         ff:e3:dc:4d:9f:a9:8a:68:88:bf:36:b8:20:5a:37:21:de:ae:
         21:c8:9d:72:15:af:1e:a7:56:25:d8:48:a8:1e:88:5f:e0:0b:
         2a:81:ed:20:e6:ea:fd:0f:85:d8:ff:e1:2b:5b:44:6e:5c:cc:
         de:5b:8e:7d:f1:47:a0:61:a1:64:93:21:ab:0e:9b:05:5a:46:
         4e:93:4e:1c:e6:18:d7:05:c4:45:f6:fa:66:4f:af:1f:0c:76:
         bb:31:cf:f5:23:06:82:5e:df:43:be:59:20:c1:80:ab:3d:63:
         a2:af:3c:72:b0:5d:df:a7:49:4f:09:4f:40:83:69:fe:9a:0a:
         aa:a2:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:19 2024 by rpki-client on console-fra.rpki-client.org