Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/3133382e39392e36382e302f32322d3232203d3e20323634313630.roa
File:                     3133382e39392e36382e302f32322d3232203d3e20323634313630.roa (raw, json)
Hash identifier:          KbmIIno3SfPbrMGLcFL3GH8HdQTQdzA2R96hwuT5yuM=
Subject key identifier:   EA:FF:CA:72:AA:8B:3B:FD:3E:5C:0A:CE:1D:B4:F0:00:BF:14:6B:03
Certificate issuer:       /CN=D80B6511B8BED418F67049DBA7A902EA0E950AD0
Certificate serial:       474F7F8B6F8137ED8739B218E95E9CDD0015A15B
Authority key identifier: D8:0B:65:11:B8:BE:D4:18:F6:70:49:DB:A7:A9:02:EA:0E:95:0A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/3133382e39392e36382e302f32322d3232203d3e20323634313630.roa
Signing time:             Thu 04 Apr 2024 18:39:52 +0000
ROA not before:           Thu 04 Apr 2024 18:34:52 +0000
ROA not after:            Thu 03 Apr 2025 18:39:52 +0000
asID:                     264160
IP address blocks:        138.99.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.crl
                          rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4f:7f:8b:6f:81:37:ed:87:39:b2:18:e9:5e:9c:dd:00:15:a1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80B6511B8BED418F67049DBA7A902EA0E950AD0
        Validity
            Not Before: Apr  4 18:34:52 2024 GMT
            Not After : Apr  3 18:39:52 2025 GMT
        Subject: CN=EAFFCA72AA8B3BFD3E5C0ACE1DB4F000BF146B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:8a:e4:38:64:e4:9d:b2:44:c6:3d:cb:09:
                    06:05:a8:95:6c:b5:72:d4:57:69:67:26:7d:88:36:
                    2a:a6:ad:f2:a4:ac:23:c3:44:f2:ff:a4:82:aa:12:
                    6f:97:96:78:a8:f4:a4:9d:ae:11:ce:ea:f1:71:cc:
                    7d:d1:57:21:01:df:c6:c4:90:73:7b:f5:86:9d:ef:
                    c6:8f:74:d2:19:8c:1a:39:f9:e5:d0:06:68:10:cf:
                    99:c8:bc:3f:3a:54:3e:6a:5a:d6:77:35:c8:9d:ca:
                    45:eb:cd:0e:f4:55:f3:d5:d8:84:e5:a4:3e:a4:8d:
                    d4:49:a6:9c:d4:a6:99:9f:f9:9f:52:ab:dd:58:97:
                    b1:27:70:31:e8:f4:6f:df:a8:07:96:53:fc:2e:6a:
                    cf:4f:27:ae:77:34:9a:fe:70:6f:d5:07:25:50:e5:
                    7c:59:e3:fc:4f:c2:ae:bf:83:fa:1a:f2:ff:d4:c6:
                    32:41:d6:6e:4e:4b:b2:f4:bb:06:99:1b:3e:88:60:
                    3d:59:b1:56:8e:74:24:a7:47:ec:80:f8:fa:40:40:
                    8f:43:89:1b:fb:e3:a2:a2:21:7d:a2:cc:75:bf:6c:
                    02:28:75:55:21:e7:16:1b:92:37:8d:f0:14:99:1d:
                    32:53:da:a7:d6:fe:07:05:52:40:4d:69:3a:47:76:
                    17:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FF:CA:72:AA:8B:3B:FD:3E:5C:0A:CE:1D:B4:F0:00:BF:14:6B:03
            X509v3 Authority Key Identifier:
                keyid:D8:0B:65:11:B8:BE:D4:18:F6:70:49:DB:A7:A9:02:EA:0E:95:0A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/3133382e39392e36382e302f32322d3232203d3e20323634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:e1:25:60:63:12:db:9e:93:14:0e:f3:a4:5a:8b:80:a8:a4:
         5b:56:62:90:3e:15:2c:be:35:41:6f:6b:27:46:d5:7e:78:15:
         d6:2f:9f:97:91:fb:8a:8a:d3:0c:f0:79:83:60:fd:e0:0f:43:
         a2:b7:ac:4a:43:bf:bd:bd:9d:56:46:bc:58:de:c2:04:d2:a9:
         81:c8:f8:92:d7:0f:e4:72:d3:78:c3:d0:f5:1b:e2:dc:b4:22:
         7d:d7:24:ee:66:8d:e3:0c:45:b7:39:9f:6c:34:fb:ee:48:46:
         28:93:20:27:5c:21:d1:25:47:64:67:b8:8f:f6:51:23:96:06:
         fc:b0:bf:73:9b:3c:57:9a:07:6d:bb:79:1c:6f:7c:83:2f:e6:
         ae:f5:99:5e:2f:ca:9c:59:ac:55:f5:f3:3d:be:94:75:4f:0b:
         ea:d8:af:53:b0:d5:61:d2:f3:ce:2c:14:eb:bf:02:15:72:da:
         0d:1c:fc:aa:a0:42:bc:3b:91:16:61:d1:6e:8e:24:69:ba:8c:
         05:eb:74:19:08:38:5e:21:50:41:9e:62:98:e5:d5:09:fe:8c:
         88:8e:e6:33:ef:59:75:ce:d6:93:35:6f:67:2b:85:14:47:32:
         5e:0d:39:3a:41:36:59:c0:b7:30:0c:01:2a:76:d2:ec:e0:15:
         92:4e:5a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:08 2024 by rpki-client on console-fra.rpki-client.org