Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139362e302f32332d3233203d3e20323633383437.roa
File:                     3133382e3138352e3139362e302f32332d3233203d3e20323633383437.roa (raw, json)
Hash identifier:          V9K9CNnADslJnaJYWOIBlFUvmKpcpsAt4ZE5NfFCW2w=
Subject key identifier:   5C:10:60:75:54:90:20:9C:F6:16:BC:B5:22:A9:08:89:00:86:53:B7
Certificate issuer:       /CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
Certificate serial:       6D5810550C1F74EA65680B10203743FA693BBC17
Authority key identifier: 70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139362e302f32332d3233203d3e20323633383437.roa
Signing time:             Fri 30 Aug 2024 04:58:15 +0000
ROA not before:           Fri 30 Aug 2024 04:53:15 +0000
ROA not after:            Fri 29 Aug 2025 04:58:15 +0000
asID:                     263847
IP address blocks:        138.185.196.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl
                          rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:58:10:55:0c:1f:74:ea:65:68:0b:10:20:37:43:fa:69:3b:bc:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
        Validity
            Not Before: Aug 30 04:53:15 2024 GMT
            Not After : Aug 29 04:58:15 2025 GMT
        Subject: CN=5C1060755490209CF616BCB522A90889008653B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:b1:94:5d:ee:f4:9a:49:c2:8d:d4:10:52:
                    c6:2d:d0:8c:3e:29:56:a8:ee:2c:bc:9a:24:58:46:
                    21:2a:61:07:69:48:ca:23:7f:19:08:f9:61:b6:67:
                    eb:71:30:b5:10:26:fb:b2:e4:93:cd:73:0a:47:76:
                    88:34:24:2e:11:3a:a5:7f:45:e5:68:8d:8d:1d:71:
                    ab:14:d1:eb:f7:01:9a:2c:2f:68:76:c6:a8:59:11:
                    ea:a0:e4:c4:ce:3f:db:bd:0d:dc:70:03:46:f0:99:
                    bf:e4:12:47:a2:70:95:6d:8a:00:0b:08:a6:c0:eb:
                    da:37:51:dd:90:17:a2:f8:fe:86:74:b7:f6:64:4c:
                    da:63:f6:1c:90:8c:fa:26:de:7f:a7:4a:3f:1f:06:
                    f3:57:dd:3e:42:8e:9c:b7:b9:3b:31:cd:9d:09:3c:
                    2f:a8:66:84:df:98:48:cb:66:80:47:9a:6f:de:18:
                    08:ae:7b:71:cc:63:2d:75:27:89:b6:c8:ee:22:64:
                    47:9e:e3:e4:af:5a:ee:b5:9e:ba:d0:04:8c:c0:f7:
                    23:55:66:06:fe:80:18:a1:25:ee:86:df:cc:4d:82:
                    9d:f5:67:1f:40:f1:ab:02:4a:8f:f5:00:c2:09:db:
                    69:fe:49:a2:34:89:c9:43:2b:33:fd:d6:3b:c7:c7:
                    bf:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:10:60:75:54:90:20:9C:F6:16:BC:B5:22:A9:08:89:00:86:53:B7
            X509v3 Authority Key Identifier:
                keyid:70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139362e302f32332d3233203d3e20323633383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:05:ee:21:ca:94:c8:88:e4:ae:71:bc:2d:df:48:76:44:f9:
         9d:45:f8:c7:03:e6:be:52:97:29:82:fc:02:15:58:7f:49:57:
         ec:c4:71:a9:c7:0a:3f:37:3f:ef:57:c2:a3:3c:54:d6:d4:c8:
         01:a6:df:3f:6f:18:57:f7:9a:f0:12:c6:1b:68:1d:4a:28:20:
         58:9d:8e:d6:20:5c:92:5a:36:1a:d6:b1:d7:9c:59:91:5f:e4:
         b2:e4:14:59:9c:05:21:52:76:a8:00:d3:39:6d:53:9a:dd:bf:
         e7:4e:51:6e:89:5f:b5:14:62:02:af:92:41:e0:b6:97:46:98:
         d1:2b:11:ac:2d:fe:b1:f2:40:20:8c:27:a7:09:b1:75:59:34:
         f6:4d:15:6d:32:9f:b1:a3:09:6e:ff:3c:f3:ab:0e:31:8f:da:
         a4:7a:61:94:e8:78:0d:99:4d:c2:da:be:0b:6f:4a:6c:b6:12:
         e6:be:de:f2:8a:af:ca:86:6d:5c:b3:28:65:c7:b3:72:69:10:
         3b:97:ef:6b:53:19:58:ac:4f:7e:6a:fc:ee:6d:c3:2c:a1:9d:
         c7:f7:f5:29:e1:18:42:ec:51:21:01:9b:1b:78:ff:6a:b2:63:
         06:00:4b:32:a8:fb:1f:c0:a9:73:ec:4a:4b:fc:a4:c2:67:ee:
         a8:e7:15:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:10 2024 by rpki-client on console-fra.rpki-client.org