Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139382e302f32332d3233203d3e20323633383437.roa
File:                     3133382e3138352e3139382e302f32332d3233203d3e20323633383437.roa (raw, json)
Hash identifier:          +o3i+RkEBwS6gNhxS7XVLcejWkc8phx4kgtsYuABNvo=
Subject key identifier:   5B:1F:FF:94:61:24:C7:DA:E4:49:4B:09:B2:36:FE:A6:CF:C9:C2:BF
Certificate issuer:       /CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
Certificate serial:       62905DFCBB1C11ECDB6491FD34FBCA3CDF6FFB57
Authority key identifier: 70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139382e302f32332d3233203d3e20323633383437.roa
Signing time:             Fri 30 Aug 2024 04:58:17 +0000
ROA not before:           Fri 30 Aug 2024 04:53:17 +0000
ROA not after:            Fri 29 Aug 2025 04:58:17 +0000
asID:                     263847
IP address blocks:        138.185.198.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl
                          rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:90:5d:fc:bb:1c:11:ec:db:64:91:fd:34:fb:ca:3c:df:6f:fb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
        Validity
            Not Before: Aug 30 04:53:17 2024 GMT
            Not After : Aug 29 04:58:17 2025 GMT
        Subject: CN=5B1FFF946124C7DAE4494B09B236FEA6CFC9C2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1b:4d:ed:3f:ae:95:0f:e4:70:01:0e:cc:4d:
                    21:f5:41:a4:89:50:bb:8f:e8:ee:21:b9:de:95:d3:
                    b9:72:6e:10:58:71:dd:45:47:4c:9e:1c:87:0e:f4:
                    e9:84:c7:9f:cc:af:ea:7f:ba:ed:e3:2b:d7:55:4d:
                    be:dc:8d:c8:f9:5f:65:e6:ef:30:a1:6b:b0:7b:a3:
                    1c:8d:87:ce:27:a4:74:3b:86:f7:39:af:dd:e6:dd:
                    28:84:a4:ca:fa:45:54:86:a1:51:c4:3f:11:f4:d7:
                    65:43:dd:e7:b0:2f:43:67:c6:da:0c:65:ac:18:43:
                    cf:5e:90:8f:67:8b:c3:9c:48:1e:60:30:26:0f:c9:
                    71:40:2f:de:25:64:52:6a:2c:e9:39:02:35:92:d4:
                    81:77:42:f8:b4:d7:19:2e:c4:a0:69:9a:c2:68:8d:
                    8e:25:49:66:3d:d6:ae:1c:12:df:8c:58:eb:e0:6d:
                    1b:20:9c:42:50:2d:43:b3:2f:d5:b7:14:84:62:8c:
                    26:84:bb:9b:51:88:a8:dc:b8:16:c0:e5:62:c0:bc:
                    25:d1:b7:ee:ce:31:47:03:b1:3c:75:af:62:83:13:
                    3f:05:ec:be:41:6a:95:18:d9:f1:cf:69:b5:27:79:
                    10:60:09:bd:cd:c1:c7:16:31:95:2f:3d:54:c2:ed:
                    88:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1F:FF:94:61:24:C7:DA:E4:49:4B:09:B2:36:FE:A6:CF:C9:C2:BF
            X509v3 Authority Key Identifier:
                keyid:70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139382e302f32332d3233203d3e20323633383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:4d:00:60:35:00:28:6c:e8:b5:19:48:15:a7:cf:ca:4b:86:
         96:81:19:27:f7:d7:f2:e5:2b:0e:0b:37:52:84:56:87:bb:77:
         e0:d3:22:d1:0d:c0:c0:10:99:38:c7:c3:02:72:81:94:fa:4d:
         0f:bb:52:72:37:b3:b8:79:24:c2:ed:f6:2e:a1:e5:10:8c:3c:
         e9:e8:14:a7:c7:e8:c7:de:c5:a4:b7:97:e3:a3:52:62:56:f8:
         4c:3e:89:33:00:76:d3:53:0d:3f:b0:5e:54:3d:d1:f8:8a:75:
         be:2b:23:05:2e:e3:1c:06:86:ab:73:ab:73:30:91:c9:d3:66:
         76:26:6c:c3:ad:65:13:04:19:b9:a7:e3:90:d9:d1:3d:4a:da:
         94:67:18:18:e1:5b:ff:54:ed:b5:9a:28:81:48:b4:bb:cd:75:
         ac:92:f4:8d:e5:76:f8:4d:85:36:35:7b:48:d3:4a:08:1c:8f:
         60:77:32:49:a7:91:89:c6:97:f4:7e:76:64:38:8d:44:e7:45:
         1f:1e:3e:01:aa:13:ef:21:69:73:88:e6:d9:a8:e2:b4:b4:a8:
         f1:67:b5:37:8a:00:e0:9a:1c:58:bb:10:e8:a3:38:93:d5:c5:
         a6:a1:03:1a:f8:1d:e1:ba:cd:72:de:f7:12:8b:d5:3b:6b:a9:
         fd:b9:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:10 2024 by rpki-client on console-fra.rpki-client.org