Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa
File:                     3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier:          z62FKvCB+po9ivzV7Yd1/Bu917NdJCSTVOs+fYk0qc8=
Subject key identifier:   E3:24:CB:33:E3:E8:E7:F2:8B:0B:DD:28:79:08:22:56:33:3B:70:19
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       732DE7CDE346324DD957AC15E6C32DD891E622BF
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa
Signing time:             Thu 04 Apr 2024 21:01:03 +0000
ROA not before:           Thu 04 Apr 2024 20:56:03 +0000
ROA not after:            Thu 03 Apr 2025 21:01:03 +0000
asID:                     263897
IP address blocks:        138.204.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:2d:e7:cd:e3:46:32:4d:d9:57:ac:15:e6:c3:2d:d8:91:e6:22:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Apr  4 20:56:03 2024 GMT
            Not After : Apr  3 21:01:03 2025 GMT
        Subject: CN=E324CB33E3E8E7F28B0BDD2879082256333B7019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ad:e8:6b:0a:a6:b7:f0:e0:29:ec:1a:f4:7f:
                    94:2e:32:84:92:2d:62:44:28:08:c7:f3:59:73:14:
                    db:8f:bd:14:dc:b3:e8:b6:c2:bd:af:a4:f1:6f:54:
                    3e:b9:3c:a6:cc:63:f8:e5:18:27:2f:22:34:df:21:
                    ce:80:a3:83:98:fb:90:3a:40:fb:10:8a:31:24:5e:
                    b5:d4:05:fa:6c:ab:c8:a2:02:7a:db:d6:40:d1:eb:
                    68:8e:d4:84:33:8f:32:c9:8e:ee:e8:5f:20:22:e5:
                    39:c7:71:fa:ed:44:b3:ba:46:6d:9e:d0:9e:15:70:
                    b7:30:c4:6b:7b:7b:b2:70:c2:2f:c8:1e:04:2b:0d:
                    64:03:f8:f3:de:d3:ea:56:7e:1b:70:69:16:be:95:
                    5c:10:72:1b:e0:9f:0a:75:e5:4d:2a:cc:f4:41:ea:
                    98:25:0d:90:b7:6a:46:d3:80:d1:ec:78:62:a2:75:
                    aa:ce:49:ea:69:9e:c1:fa:6c:35:fb:ce:4b:87:67:
                    ac:d0:c4:de:90:b9:52:3a:4e:96:d0:37:0f:f5:20:
                    f6:88:41:8a:3d:75:51:72:97:e9:dc:f9:a6:0b:a0:
                    6f:c7:8b:db:b9:4e:55:67:2f:3d:3c:7b:67:a8:f7:
                    7e:d5:dd:26:7e:a1:4c:d4:fe:f8:82:a7:e8:e2:06:
                    99:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:CB:33:E3:E8:E7:F2:8B:0B:DD:28:79:08:22:56:33:3B:70:19
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f3:a9:2a:ce:24:68:ed:1f:d0:dd:75:92:32:88:0a:a9:64:
         75:99:04:4c:76:31:66:78:04:6c:25:c1:f6:10:05:ec:0c:4c:
         d7:b3:49:70:5a:18:01:35:c4:38:39:a6:1f:d9:97:3d:1d:0d:
         3d:d9:21:fa:12:ba:ad:f3:b3:0e:4d:37:bb:e5:d8:69:ca:cf:
         a0:c0:c9:eb:70:cf:5d:89:e2:b0:f6:8f:f9:6f:32:52:0a:ca:
         60:6c:dc:ef:0b:19:96:ef:cb:ef:a8:56:dd:30:a0:3c:6d:79:
         e4:53:95:0d:b7:c8:ff:3b:20:b6:51:6b:74:b6:9a:00:87:ef:
         93:35:14:20:76:c0:c5:ff:96:1f:c1:b4:7d:90:bf:8c:7b:21:
         86:d7:7b:8c:95:29:e5:66:4f:13:93:66:5a:53:f5:c3:09:cd:
         21:0a:8f:c2:ac:aa:be:07:49:83:7f:75:93:31:b0:96:53:f2:
         3a:9c:0e:10:5b:47:ff:5a:bd:d5:ce:0c:92:00:8c:a8:b8:d3:
         5b:be:a8:d0:e4:75:52:a8:0e:2a:fd:d6:29:82:70:d4:79:21:
         12:12:57:2d:97:2c:18:92:b4:8a:75:62:7f:f3:ab:83:ce:fc:
         62:15:28:42:8c:e5:9b:02:3b:1a:f5:b1:e4:7d:68:14:2d:4c:
         c5:b4:c4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:19 2024 by rpki-client on console-fra.rpki-client.org