Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa
File:                     3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa (raw, json)
Hash identifier:          YMZ8SgZ+6XW7+OisZqFJF6uxAsWTZuRXcqwpN11C6IQ=
Subject key identifier:   EE:6A:2E:6A:3A:47:1C:60:D2:75:AB:70:F7:6D:F0:26:68:4D:7A:2A
Certificate issuer:       /CN=FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B
Certificate serial:       20F95646831150D8553ACA2901D906DF84CC2BDD
Authority key identifier: FD:75:03:3B:F4:CE:BF:8C:EC:76:22:95:C0:AE:89:B5:A3:94:6B:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa
Signing time:             Thu 04 Apr 2024 03:46:27 +0000
ROA not before:           Thu 04 Apr 2024 03:41:27 +0000
ROA not after:            Thu 03 Apr 2025 03:46:27 +0000
asID:                     263968
IP address blocks:        138.255.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.crl
                          rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f9:56:46:83:11:50:d8:55:3a:ca:29:01:d9:06:df:84:cc:2b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B
        Validity
            Not Before: Apr  4 03:41:27 2024 GMT
            Not After : Apr  3 03:46:27 2025 GMT
        Subject: CN=EE6A2E6A3A471C60D275AB70F76DF026684D7A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:68:60:87:98:a1:ff:14:f7:a4:1f:65:2d:c4:
                    3e:70:69:42:50:c5:a2:d9:08:fa:96:f6:6b:2c:fd:
                    b6:3a:2a:0b:32:b1:a6:52:aa:a8:72:a2:c2:de:73:
                    42:75:38:18:58:43:cd:6a:84:ae:ad:62:e3:06:f8:
                    1c:fe:17:fc:d3:41:12:5e:77:3a:b1:ad:45:51:a7:
                    5a:ea:a9:1a:2d:6e:41:d6:cc:8a:09:62:07:5b:00:
                    27:39:8b:57:c3:fb:aa:b4:73:70:86:67:1b:bc:50:
                    30:b0:7f:c6:92:ab:e0:bc:b7:71:96:a6:d4:18:9f:
                    6f:4a:1b:d5:c8:b1:f9:a9:f1:b5:cc:25:b8:28:b3:
                    4b:f2:27:55:30:10:10:51:03:5b:51:60:bd:3d:08:
                    65:84:ba:19:26:3a:ea:53:8f:c2:9d:73:af:51:11:
                    a7:35:c3:ec:8a:19:25:a1:62:f3:41:ed:ad:c0:21:
                    59:ab:4c:31:45:35:cf:25:ad:48:9e:16:32:25:60:
                    c6:cc:5a:76:d4:db:dd:58:16:15:e8:b4:0e:5b:f4:
                    19:97:99:cd:a5:ec:2c:d3:e4:ac:3a:00:ab:50:b5:
                    17:bf:63:3a:69:a6:17:15:4c:ab:38:2c:c0:0d:56:
                    8d:79:4f:51:2a:2a:72:81:8d:de:50:a7:7f:91:19:
                    54:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6A:2E:6A:3A:47:1C:60:D2:75:AB:70:F7:6D:F0:26:68:4D:7A:2A
            X509v3 Authority Key Identifier:
                keyid:FD:75:03:3B:F4:CE:BF:8C:EC:76:22:95:C0:AE:89:B5:A3:94:6B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD75033BF4CEBF8CEC762295C0AE89B5A3946B7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9YdGA45H71ReSAdywWXT5MCJqGXk9LeGPjVrTtKwjEX/1/3133382e3235352e3131322e302f32322d3234203d3e20323633393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:1c:33:5b:86:9e:58:52:1f:2b:61:cc:99:4b:8d:6b:e7:2a:
         ab:4e:ab:70:f4:81:64:cb:ea:f1:4d:e1:8e:1b:5d:51:cc:68:
         1d:9e:ec:9c:39:c5:40:27:49:c2:be:07:f8:34:c8:3e:2d:66:
         65:2d:25:46:2d:55:a9:8e:2f:88:5c:25:f7:c4:76:8c:03:c6:
         e1:0a:54:e7:e6:7e:c5:69:e2:cc:52:8a:47:d6:a9:a7:6f:c4:
         46:78:1e:a0:38:52:32:ff:cb:97:2e:48:ff:8e:e1:af:23:e0:
         13:59:b4:47:23:16:eb:c0:c4:2e:dc:b1:5a:07:16:1c:67:ce:
         f9:fd:15:49:2f:8b:0a:3b:a6:9c:b7:e5:08:74:89:af:4d:dc:
         ed:38:8e:7e:1d:c3:32:f4:4b:3a:73:19:33:37:59:56:e1:a0:
         de:d2:06:80:78:d2:06:15:5b:62:5c:62:88:70:5a:48:99:d2:
         18:a0:8b:0a:89:e6:00:b1:40:d7:4a:b6:d3:0a:75:aa:66:3a:
         5a:ac:3c:f0:1a:3d:65:c2:74:3c:84:15:55:04:fa:31:13:f1:
         bb:e0:51:fd:f9:c4:d9:b9:4c:80:3f:8f:30:6d:28:f6:5c:bf:
         02:3c:05:02:57:54:0f:4e:4d:21:95:bb:f6:fc:37:88:cb:52:
         9a:96:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 00:20:55 2024 by rpki-client on console-ams.rpki-client.org