Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138382e302f32322d3232203d3e20323634323732.roa
File:                     3133382e3131382e3138382e302f32322d3232203d3e20323634323732.roa (raw, json)
Hash identifier:          4hHDql2i28YShCV9W7y6L0Z4AIbrgDrsW81CFmPCNdI=
Subject key identifier:   25:BF:BE:A6:84:5C:AE:33:50:21:83:DF:60:56:64:11:71:91:26:34
Certificate issuer:       /CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
Certificate serial:       785FF1052020796D7EA2C1C76F31130F0F9223E3
Authority key identifier: FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138382e302f32322d3232203d3e20323634323732.roa
Signing time:             Wed 03 Apr 2024 23:43:16 +0000
ROA not before:           Wed 03 Apr 2024 23:38:16 +0000
ROA not after:            Wed 02 Apr 2025 23:43:16 +0000
asID:                     264272
IP address blocks:        138.118.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl
                          rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5f:f1:05:20:20:79:6d:7e:a2:c1:c7:6f:31:13:0f:0f:92:23:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
        Validity
            Not Before: Apr  3 23:38:16 2024 GMT
            Not After : Apr  2 23:43:16 2025 GMT
        Subject: CN=25BFBEA6845CAE33502183DF6056641171912634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6c:d4:d9:e3:ab:2d:ec:83:f9:f4:17:db:c0:
                    8a:6d:0c:07:2f:ea:05:dd:19:4b:31:4d:92:67:74:
                    69:b6:10:79:a0:fe:a6:33:f0:09:12:b9:53:aa:cd:
                    9e:2f:b6:ec:fa:de:3e:af:6f:b1:1d:26:66:4a:f5:
                    a7:d3:a6:af:d4:ad:28:bc:0a:75:41:c3:dc:eb:c9:
                    d7:97:41:08:d1:a1:11:a9:ca:a7:4f:29:89:10:00:
                    39:3f:2b:c8:83:18:cd:f3:e2:2a:bd:64:40:5a:d5:
                    83:e5:87:a3:6f:ae:6a:f4:a7:48:0a:63:c9:06:6e:
                    38:b8:4a:ff:13:a7:2b:2f:d5:4c:ef:f4:4d:e3:d5:
                    1d:a5:03:b4:89:27:df:76:11:c8:59:63:aa:31:c5:
                    32:6c:e5:53:65:3f:99:f8:df:d2:c6:ea:11:a9:ee:
                    01:e0:6e:c3:5b:f4:f5:24:a5:d6:2f:1e:a9:94:93:
                    bb:58:9b:83:f5:79:fd:f0:dc:05:5c:26:d8:28:8c:
                    d7:68:42:98:74:a6:1d:19:9a:0d:6e:aa:19:99:60:
                    4e:5d:41:c6:61:69:8d:39:89:ea:1d:3a:f6:4b:15:
                    48:4d:18:ae:20:ed:b0:dc:ee:4e:06:e6:76:9a:4d:
                    32:3d:5b:32:e1:a8:4b:d8:83:c6:97:ab:c9:62:3e:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BF:BE:A6:84:5C:AE:33:50:21:83:DF:60:56:64:11:71:91:26:34
            X509v3 Authority Key Identifier:
                keyid:FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138382e302f32322d3232203d3e20323634323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:8e:38:1e:9f:44:e0:c2:c3:f5:a0:b9:c2:1d:ae:99:e5:11:
         87:33:3b:13:cf:66:de:91:96:2d:74:74:3e:85:4a:a1:d5:88:
         c3:d5:1c:6f:00:6d:1a:1d:0f:76:4a:cf:e1:e4:25:b4:d9:78:
         66:75:3e:46:b9:c3:17:85:cc:0b:5f:07:4c:c1:91:35:32:38:
         1b:f2:26:7b:1b:d5:a8:59:02:3b:b6:47:83:4d:40:15:77:4c:
         96:13:f6:94:9a:99:02:83:38:e3:4f:d6:8e:52:d1:de:6d:a6:
         85:14:38:31:13:44:46:ff:2d:8a:e2:4a:36:50:d1:83:f1:34:
         e8:cf:03:6f:21:87:9b:66:bf:6e:9c:12:74:9d:4f:d4:4a:ef:
         e7:e2:f8:32:dc:5f:b0:32:fc:73:76:36:50:bd:77:0d:2d:9f:
         80:34:b0:ba:a6:14:bd:7f:d0:dc:c5:65:98:ec:68:17:98:53:
         6f:5c:28:e6:77:ea:7b:b2:cb:d2:7a:69:9d:95:e4:55:22:d7:
         8f:15:91:c1:5e:79:e9:f0:24:67:0d:f4:93:00:3b:85:87:f0:
         f4:d8:a9:a0:92:e4:32:fa:21:32:a3:ae:34:e1:23:18:5a:f0:
         06:f0:40:3d:df:55:2f:35:ca:1c:6d:f1:10:94:42:70:ac:89:
         b4:2b:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org