Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139382e302f32342d3234203d3e20323633383437.roa
File:                     3133382e3138352e3139382e302f32342d3234203d3e20323633383437.roa (raw, json)
Hash identifier:          mmJ2wCCiudcomB2GCJ2qqB1PKLnRgCAl1k6D8YNmHBY=
Subject key identifier:   06:40:17:8E:BA:91:74:15:F1:B4:8D:3F:34:BE:62:CA:16:AE:3A:67
Certificate issuer:       /CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
Certificate serial:       1CE4F7F85D42EF2B0CBF268AC52A0788DCFA4658
Authority key identifier: 70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139382e302f32342d3234203d3e20323633383437.roa
Signing time:             Fri 30 Aug 2024 04:58:19 +0000
ROA not before:           Fri 30 Aug 2024 04:53:19 +0000
ROA not after:            Fri 29 Aug 2025 04:58:19 +0000
asID:                     263847
IP address blocks:        138.185.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl
                          rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e4:f7:f8:5d:42:ef:2b:0c:bf:26:8a:c5:2a:07:88:dc:fa:46:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704458CDC57956D96E4187B18CAF8B9BC27FC4EF
        Validity
            Not Before: Aug 30 04:53:19 2024 GMT
            Not After : Aug 29 04:58:19 2025 GMT
        Subject: CN=0640178EBA917415F1B48D3F34BE62CA16AE3A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0f:6d:ed:00:ef:39:e8:19:2d:28:82:68:2f:
                    f1:74:90:03:11:90:83:07:ae:67:33:32:52:84:5d:
                    2e:18:60:d6:b1:34:95:21:b0:37:fa:b7:7f:21:4b:
                    7f:6d:a1:0a:32:6b:62:40:e4:be:b3:2f:f3:dd:95:
                    56:33:e7:37:cc:79:9c:c1:5a:91:74:b6:cb:1a:64:
                    86:65:00:57:0b:a1:d4:11:d2:2f:f0:54:62:05:cc:
                    3b:ce:6a:d0:95:00:6a:ad:5d:a6:8b:5b:fc:c8:85:
                    77:99:a3:fa:ea:4b:57:0e:b1:99:d9:bb:af:3c:7a:
                    35:aa:75:a3:1a:e1:8d:5e:c6:39:94:21:34:9e:2f:
                    e0:f9:b3:01:01:62:a3:d2:15:73:0a:5f:a8:e5:b4:
                    45:1c:aa:80:cc:ab:5f:6d:be:fa:99:1a:d3:fb:12:
                    ca:e9:c0:d2:64:12:de:43:1b:0f:23:cf:cc:bd:7a:
                    63:ee:dc:68:9d:ce:e9:32:b0:3a:11:1d:11:c0:7c:
                    25:7b:33:19:58:ff:23:62:fe:1d:43:f4:92:61:7e:
                    24:c7:76:35:d1:7d:37:93:c7:c2:5f:d1:4f:74:73:
                    46:95:82:db:06:07:ad:74:6a:81:78:d5:8a:f8:4e:
                    50:21:be:eb:67:75:56:d9:15:58:12:d3:54:4d:e3:
                    79:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:17:8E:BA:91:74:15:F1:B4:8D:3F:34:BE:62:CA:16:AE:3A:67
            X509v3 Authority Key Identifier:
                keyid:70:44:58:CD:C5:79:56:D9:6E:41:87:B1:8C:AF:8B:9B:C2:7F:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704458CDC57956D96E4187B18CAF8B9BC27FC4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/0/3133382e3138352e3139382e302f32342d3234203d3e20323633383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:3b:c2:50:bd:f4:2a:3e:9f:8d:c3:a4:5a:f5:cd:bd:95:
         86:74:d6:3c:ac:23:66:56:f3:95:a5:06:aa:6c:41:20:d7:88:
         de:8c:f5:47:d9:2d:79:fe:c9:a7:8d:14:5b:1b:df:16:c7:a3:
         b2:d7:49:63:00:8c:17:9f:e7:09:a9:c3:9c:22:02:b2:ce:a4:
         bb:8c:32:88:a7:e5:b1:59:5a:01:1f:5e:de:65:94:1a:28:95:
         af:c9:8c:64:72:7e:2d:62:07:f5:08:23:7f:be:d3:12:dd:18:
         3d:29:9c:30:c8:cf:91:b3:22:4c:59:bc:af:be:f9:67:7c:21:
         0d:71:ad:a4:e5:e8:41:d7:bc:f8:73:24:1d:f0:d1:df:ef:e0:
         14:8f:0b:2b:b6:59:af:54:73:08:f5:fe:35:ae:fd:e2:1f:69:
         4f:a3:ec:4e:64:b7:af:72:da:fe:11:87:32:d4:27:91:37:26:
         d2:2e:e1:1a:2e:12:2b:83:e9:33:7c:f2:d6:07:0e:fd:fd:d7:
         44:a6:65:2f:af:af:7c:ec:07:83:95:17:14:27:7a:d5:a1:7f:
         1a:78:9f:c2:40:05:bd:12:80:71:7d:e1:b7:1d:7b:65:c4:4e:
         33:95:65:d3:ce:c4:f6:dc:e1:38:a5:60:da:9c:9f:62:68:1f:
         55:93:80:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:42 2024 by rpki-client on console-ams.rpki-client.org