Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138382e302f32332d3233203d3e20323634323732.roa
File:                     3133382e3131382e3138382e302f32332d3233203d3e20323634323732.roa (raw, json)
Hash identifier:          hkiKCPqhawTm88mWDxSCdbkUHchyGIRsEwwAxDZPsJI=
Subject key identifier:   32:45:74:4B:EC:71:40:43:00:4C:AD:F8:FD:15:EA:63:02:17:64:6E
Certificate issuer:       /CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
Certificate serial:       249BA9F2A764B9EAA99AC1F339A289D28E3840B7
Authority key identifier: FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138382e302f32332d3233203d3e20323634323732.roa
Signing time:             Wed 03 Apr 2024 23:43:16 +0000
ROA not before:           Wed 03 Apr 2024 23:38:16 +0000
ROA not after:            Wed 02 Apr 2025 23:43:16 +0000
asID:                     264272
IP address blocks:        138.118.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl
                          rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9b:a9:f2:a7:64:b9:ea:a9:9a:c1:f3:39:a2:89:d2:8e:38:40:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
        Validity
            Not Before: Apr  3 23:38:16 2024 GMT
            Not After : Apr  2 23:43:16 2025 GMT
        Subject: CN=3245744BEC714043004CADF8FD15EA630217646E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:38:27:38:97:b9:3d:0b:b1:69:1a:ca:a3:
                    88:e3:48:1f:40:79:3c:47:22:10:ad:3e:bc:67:45:
                    87:2a:b8:23:79:ad:53:e9:3a:37:d2:82:5c:44:88:
                    57:73:90:41:e6:4f:dc:95:39:83:38:19:90:19:6a:
                    71:cc:f5:db:02:94:66:f3:8b:0e:e1:fb:53:15:e3:
                    f9:1d:3a:1d:d6:37:94:b9:5a:df:ad:4d:3b:e7:be:
                    53:fd:fc:5f:c6:2c:24:d8:b8:83:e6:31:a7:f4:4b:
                    9b:f8:16:e3:e6:2d:87:10:2a:0b:f1:79:e8:f5:ad:
                    41:a6:af:e0:91:7a:2d:73:2b:78:ca:2e:c7:7d:a1:
                    f2:bf:4b:59:dc:1b:74:80:e7:4b:fa:e4:7c:08:cf:
                    39:03:15:77:ed:d6:ba:75:3e:ae:d7:fc:5b:9a:e8:
                    b8:5d:b5:f3:4c:78:0b:b5:78:9c:b1:9a:19:4e:5f:
                    d8:2b:90:fa:37:9b:77:bc:a3:00:a4:b1:57:2c:1b:
                    94:cc:eb:ef:4c:82:a9:1a:a1:ec:a5:46:35:5f:12:
                    ab:71:d3:5b:1f:82:bc:06:46:ba:c9:32:74:35:de:
                    a8:4a:dd:60:6b:18:ab:5d:63:8e:10:0a:05:a1:02:
                    33:95:ca:cc:fe:54:d6:9f:8e:76:1f:e4:13:f8:a8:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:45:74:4B:EC:71:40:43:00:4C:AD:F8:FD:15:EA:63:02:17:64:6E
            X509v3 Authority Key Identifier:
                keyid:FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138382e302f32332d3233203d3e20323634323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:f8:4f:e1:61:e6:2b:96:cf:2f:7b:39:b9:b8:5b:34:bd:aa:
         47:51:7e:70:2b:6e:31:21:22:6f:ad:32:a3:51:59:d5:86:b3:
         5d:9f:87:8e:ec:16:e0:65:d7:e8:0f:13:72:3e:67:f8:e1:f4:
         94:ed:75:52:b8:bc:97:87:97:ad:b6:ea:04:5a:ff:c6:fc:71:
         fb:c9:34:f9:92:af:19:b9:d6:a9:a4:ce:49:fd:a4:1f:7d:b5:
         aa:e7:f9:93:29:67:de:70:f2:b6:61:c9:9b:72:33:de:54:25:
         2c:5d:f0:ea:cb:1f:ea:c4:5d:3a:72:b1:c5:fd:33:72:ab:c2:
         8d:15:13:16:77:7f:f9:ae:3e:34:8b:ad:97:b2:9a:84:b5:f6:
         7e:e2:14:e0:60:d9:d4:f9:44:66:87:bc:4d:73:f0:52:2d:dd:
         94:53:1f:0b:96:35:32:59:1f:f1:bb:4e:8a:d8:be:bf:70:ef:
         bd:73:5d:54:8f:b8:7a:b5:8a:3c:f6:e4:dd:e0:94:45:f7:34:
         6f:eb:d9:a6:cb:73:6f:42:d8:eb:e7:7d:47:4b:2d:42:98:44:
         38:f8:e5:a5:29:eb:44:3f:cc:06:0e:57:a3:de:79:1c:a5:2a:
         78:ac:88:91:c9:1c:fe:9e:d9:7d:bb:45:73:00:46:0f:95:a0:
         06:c6:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org