Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa
File:                     3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier:          BUiyfft1IFtoL313wpB2CwaSDT7elJjwdPVwLVQEIB0=
Subject key identifier:   9B:56:C9:BF:7C:07:A9:73:E8:5D:9B:CF:24:60:28:8A:84:41:9E:A0
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       5463F84CD356A44FA34CDD9E9D6AEBBCBD661A7A
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa
Signing time:             Thu 04 Apr 2024 21:00:58 +0000
ROA not before:           Thu 04 Apr 2024 20:55:58 +0000
ROA not after:            Thu 03 Apr 2025 21:00:58 +0000
asID:                     263897
IP address blocks:        138.204.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:63:f8:4c:d3:56:a4:4f:a3:4c:dd:9e:9d:6a:eb:bc:bd:66:1a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Apr  4 20:55:58 2024 GMT
            Not After : Apr  3 21:00:58 2025 GMT
        Subject: CN=9B56C9BF7C07A973E85D9BCF2460288A84419EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:71:9e:d3:e7:d2:ec:9a:a5:c3:cc:db:20:
                    44:95:9e:af:0d:6b:f4:7f:b7:67:65:bf:61:e3:01:
                    e6:ca:48:26:4f:9c:76:ae:c5:05:89:5d:fa:7f:de:
                    01:8d:6d:3d:6d:5d:aa:ed:6b:a5:3e:69:d4:11:22:
                    bf:69:01:69:7c:f1:f7:cd:7f:33:c4:99:30:fc:58:
                    0d:c3:3a:0a:d9:72:74:dd:9a:df:02:b4:be:dd:e6:
                    6b:e7:a5:83:0e:e0:b1:17:2e:82:d6:3b:f0:3c:db:
                    3c:08:c4:14:51:d9:b2:18:f9:84:93:b4:3e:c6:a7:
                    c4:5e:74:65:80:2a:b9:f2:75:39:8a:46:e9:21:f7:
                    a0:79:92:bb:35:14:7e:dd:6e:e0:35:6c:14:1d:89:
                    c1:02:3b:c4:c3:d1:78:ec:c6:1f:50:02:a6:a5:bc:
                    30:dc:c5:08:7a:b9:74:e3:ec:f4:e9:2b:bd:2d:5b:
                    61:8c:c2:d0:e0:90:7e:fa:b7:ca:59:5e:41:d0:e5:
                    0f:6b:28:c4:9b:42:10:7f:12:54:e1:8b:c5:37:07:
                    4f:c5:a5:ba:4b:22:d7:96:d3:d8:f6:a9:ba:32:9f:
                    87:9a:36:08:00:c4:cb:ec:bf:df:00:bc:10:00:74:
                    14:74:e4:69:7a:3f:06:d0:45:51:3c:d9:58:df:d7:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:56:C9:BF:7C:07:A9:73:E8:5D:9B:CF:24:60:28:8A:84:41:9E:A0
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:86:09:dc:54:90:24:b2:67:d8:83:d7:22:df:a1:30:fa:ed:
         42:73:cf:fe:65:19:aa:9f:14:60:5a:fd:77:3e:93:fe:0e:ec:
         d6:7d:1c:fc:c6:29:66:21:35:02:03:e6:08:ac:21:66:7c:16:
         35:37:7a:55:19:36:7d:d4:f3:16:3a:ea:ac:85:ee:14:31:97:
         f9:8d:de:60:18:d4:25:20:ba:bb:6d:d9:16:b1:72:ea:3e:d5:
         8a:7c:4a:0c:c5:a3:89:4d:f6:d9:d7:f3:a7:6b:c6:6a:f2:ec:
         b8:6c:fa:25:49:d6:05:ff:f9:e4:48:6e:56:db:73:7c:3e:98:
         e4:53:9d:29:19:b7:fa:3e:06:8d:85:07:89:b7:2a:11:6a:d3:
         c1:4d:f4:84:c0:5a:54:5b:a3:5b:70:a7:31:4b:03:30:c9:d1:
         b4:30:9e:ad:75:03:7d:4f:eb:a9:70:10:71:a0:80:46:c2:53:
         70:c0:19:e6:1f:8c:00:18:f5:f2:2d:11:53:14:cd:76:38:64:
         a0:9d:42:3e:35:69:66:01:22:b9:86:01:9c:61:5d:b0:13:75:
         c2:d8:57:fc:25:a4:b6:a7:89:b1:35:49:0a:ab:fb:46:3f:88:
         e3:c5:2b:f4:23:e3:51:c4:bf:69:4f:a5:6d:37:70:b7:b6:c3:
         f5:5b:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:24 2024 by rpki-client on console-ams.rpki-client.org