Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/3138362e3235312e33382e302f32342d3234203d3e203532393130.roa
File:                     3138362e3235312e33382e302f32342d3234203d3e203532393130.roa (raw, json)
Hash identifier:          8DeICP4FF3jQujyak6gJWVw7WL3y+fZYiXM99bQQofQ=
Subject key identifier:   E5:BB:56:5B:07:12:FD:C8:C6:91:B2:D9:FF:C2:F3:E9:B2:E2:BD:61
Certificate issuer:       /CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
Certificate serial:       04B693761D7AE5590A50E9F69613DC5D4DB2EEC5
Authority key identifier: FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/3138362e3235312e33382e302f32342d3234203d3e203532393130.roa
Signing time:             Wed 03 Jul 2024 12:11:22 +0000
ROA not before:           Wed 03 Jul 2024 12:06:22 +0000
ROA not after:            Wed 02 Jul 2025 12:11:22 +0000
asID:                     52910
IP address blocks:        186.251.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl
                          rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b6:93:76:1d:7a:e5:59:0a:50:e9:f6:96:13:dc:5d:4d:b2:ee:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894
        Validity
            Not Before: Jul  3 12:06:22 2024 GMT
            Not After : Jul  2 12:11:22 2025 GMT
        Subject: CN=E5BB565B0712FDC8C691B2D9FFC2F3E9B2E2BD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:a9:82:95:90:70:19:97:dc:25:90:c3:2c:
                    4c:e3:5c:e9:0a:db:8f:f6:e9:4e:11:2b:25:2d:c3:
                    1b:6c:6c:ff:0f:be:49:4c:c9:f5:61:6b:2f:1a:e2:
                    e0:a0:87:bc:8c:c8:b9:18:56:02:d0:2d:2a:77:40:
                    72:ad:48:d5:ba:b0:3f:65:fa:66:26:df:19:ca:6b:
                    68:ec:84:fa:65:d1:c4:4e:c9:e0:7f:f0:07:89:a1:
                    2a:8d:8a:e1:38:b5:c1:1c:e3:67:69:41:b3:b5:f9:
                    ce:49:a4:1e:ca:be:3b:74:87:b6:1b:ca:a5:bc:cf:
                    e1:50:39:b1:02:dd:27:82:db:7b:45:46:f9:64:41:
                    15:29:47:0a:1b:54:48:ea:7e:12:b5:b3:f9:21:0b:
                    28:a1:09:7b:d1:0c:3f:f0:c0:1b:70:c4:d4:1e:fb:
                    72:a4:27:5e:24:67:c6:57:ad:bf:ec:37:49:e4:b1:
                    40:8e:7e:24:c5:ec:5d:11:26:cd:0e:b0:b4:57:ae:
                    bd:e8:9b:e4:2f:25:b1:20:2a:b6:76:31:70:66:42:
                    a4:e1:e2:0a:37:f9:a1:ec:5b:b4:bd:c5:64:5a:37:
                    e5:b6:13:3d:62:6e:7a:be:ee:d8:a7:69:26:2f:8e:
                    ec:f3:56:a2:68:47:71:f5:ae:cf:1d:20:84:d4:ab:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BB:56:5B:07:12:FD:C8:C6:91:B2:D9:FF:C2:F3:E9:B2:E2:BD:61
            X509v3 Authority Key Identifier:
                keyid:FA:ED:B0:9B:70:5F:EF:6A:6E:14:D8:F6:8D:6E:E4:4B:C2:F1:28:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FAEDB09B705FEF6A6E14D8F68D6EE44BC2F12894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBnFmsEnVphfJmiaCbbJ6fKRTK7LPBFkBpARLNu9XKMP/0/3138362e3235312e33382e302f32342d3234203d3e203532393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:0a:24:38:64:5e:5d:64:e8:91:49:77:38:22:48:54:7f:b1:
         74:76:8a:98:65:44:80:95:6d:e5:51:bc:46:22:52:43:b0:a2:
         63:d6:8a:76:d7:50:9a:bb:e3:bb:47:c9:a2:9a:ec:26:53:04:
         5b:d2:e1:7a:3e:e0:48:3f:e5:b3:37:fb:65:f2:fa:48:2b:e4:
         b7:b9:ec:31:0c:25:c8:96:ce:0a:cb:92:c7:72:7e:d4:91:31:
         d5:50:4d:ac:4b:dc:c5:1d:f4:32:28:41:4d:8e:57:33:b6:7b:
         78:6e:65:c2:bf:69:bb:dd:f9:de:4f:45:96:ce:ce:18:ff:93:
         9f:49:e5:b3:19:92:aa:7b:61:12:cc:94:a1:9a:86:f2:01:14:
         06:61:52:b8:f4:e3:cd:32:53:bf:b7:e8:20:49:9b:99:0e:50:
         f5:b3:94:44:15:04:21:04:93:00:73:0e:fa:0d:c8:3f:3b:fd:
         9d:c6:29:36:b9:7a:a2:7f:73:cd:2b:aa:4a:29:7b:1e:92:c0:
         10:e3:c4:59:c0:db:29:de:ef:c6:66:27:3e:72:14:3b:c3:5a:
         0c:3f:71:a6:a9:83:b0:97:80:7b:68:3e:0c:69:ec:8e:9e:e9:
         99:fa:a1:ed:3c:53:1c:09:ff:cc:cd:3d:e2:a4:08:6c:cf:7a:
         cf:29:95:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:44 2024 by rpki-client on console-ams.rpki-client.org