Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138382e302f32342d3234203d3e20323634323732.roa
File:                     3133382e3131382e3138382e302f32342d3234203d3e20323634323732.roa (raw, json)
Hash identifier:          1VQ1d2zIIdZhiwf9uEP8yNIJk07l+GsW2X1uMC9J74s=
Subject key identifier:   77:BF:B5:83:1F:15:3B:9B:AA:CF:A8:C0:C8:0D:97:1E:FB:BA:25:C6
Certificate issuer:       /CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
Certificate serial:       1616C02258CD3236EECA9E508DE02B3CBAD54570
Authority key identifier: FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138382e302f32342d3234203d3e20323634323732.roa
Signing time:             Wed 03 Apr 2024 23:43:16 +0000
ROA not before:           Wed 03 Apr 2024 23:38:16 +0000
ROA not after:            Wed 02 Apr 2025 23:43:16 +0000
asID:                     264272
IP address blocks:        138.118.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl
                          rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:16:c0:22:58:cd:32:36:ee:ca:9e:50:8d:e0:2b:3c:ba:d5:45:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
        Validity
            Not Before: Apr  3 23:38:16 2024 GMT
            Not After : Apr  2 23:43:16 2025 GMT
        Subject: CN=77BFB5831F153B9BAACFA8C0C80D971EFBBA25C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b9:b6:4f:9a:d1:31:18:0a:9a:58:0d:d4:a8:
                    4d:1b:f2:3a:34:cb:1c:32:0c:e5:02:b9:41:55:15:
                    6a:3d:dd:b1:f8:cc:bf:88:72:7c:cc:ac:04:74:b2:
                    8a:e2:37:9a:77:a1:8e:45:11:7e:ae:e7:da:d8:28:
                    7c:a7:56:60:cf:da:bd:7b:ed:f6:d2:cc:59:46:47:
                    f6:57:25:43:ac:80:a8:d5:d6:5f:0c:d7:2f:e9:07:
                    2c:88:ad:73:7c:6d:e2:81:3d:fc:86:ef:cd:8f:98:
                    c6:1e:d8:d9:9e:de:20:96:1f:a9:44:4d:7d:62:b9:
                    d3:32:c9:8f:af:76:c8:02:ab:ef:4c:61:54:72:2b:
                    50:2f:3b:0b:b4:e9:c2:88:54:0b:b7:c3:95:1b:d3:
                    df:c7:76:ff:9e:72:fa:6b:8d:b9:38:ae:5e:28:d8:
                    9f:dd:61:fd:44:b0:95:2e:31:ae:38:fe:25:05:66:
                    bf:b1:41:b3:7b:dd:43:ed:82:ba:c2:fb:79:14:ba:
                    ab:a7:1e:44:24:6d:ec:f2:a5:5f:90:08:ef:63:d7:
                    e6:08:f7:eb:32:be:3b:a5:b3:40:25:d8:c4:7f:73:
                    0e:40:6b:db:fd:1a:a3:f8:e6:10:15:cf:cb:2a:d6:
                    e3:33:9e:18:e0:cf:3a:ce:d7:2c:e4:64:43:27:cd:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BF:B5:83:1F:15:3B:9B:AA:CF:A8:C0:C8:0D:97:1E:FB:BA:25:C6
            X509v3 Authority Key Identifier:
                keyid:FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138382e302f32342d3234203d3e20323634323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f5:1b:c7:b2:28:a1:8e:5d:a2:8e:4c:04:d7:e4:c4:12:a4:
         db:59:ee:b9:9d:b4:c4:f2:5b:67:c8:8d:01:73:3a:c3:ff:b9:
         f2:36:15:c6:57:91:ed:4a:0c:6e:ac:cd:c7:b7:e7:70:ad:d8:
         a5:5a:f4:6b:28:27:1e:78:c9:d3:12:30:9e:50:6e:0b:a6:c2:
         0c:5a:ae:a6:7b:c3:92:89:0f:4f:41:a8:08:2b:c7:95:b6:d1:
         de:75:97:fe:63:97:40:ed:f7:3d:0e:b4:ba:16:fa:60:d5:a9:
         fe:ec:ed:84:e5:68:29:12:be:ca:5c:d2:a4:08:0a:8f:a9:4e:
         27:80:82:f2:58:03:ef:9d:96:b2:c4:ca:ac:10:51:1c:d8:61:
         90:93:05:a7:df:5f:c5:e0:e7:8e:01:45:e6:1b:86:ce:83:90:
         ad:15:ff:9c:9c:17:02:2c:59:4e:ac:e2:e6:5f:b2:2a:98:21:
         c7:70:02:eb:c7:41:46:d2:75:83:84:d5:61:9a:2d:eb:70:5f:
         58:9f:9c:dd:88:3b:6f:ca:57:43:7b:d8:c4:14:54:04:f4:de:
         33:8c:bf:d6:ee:eb:f0:92:2a:97:59:92:ba:c7:cc:6b:91:43:
         69:7a:02:07:37:8f:36:5d:70:df:21:3a:24:ca:82:6a:c6:93:
         a6:d9:6d:60
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFhbAIljNMjbuyp5QjeArPLrVRXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE3NTBDM0I2NUJFMTcyNTlBMUJERkQwOUZBRkJBQUNE
QzkxOUIxRTAeFw0yNDA0MDMyMzM4MTZaFw0yNTA0MDIyMzQzMTZaMDMxMTAvBgNV
BAMTKDc3QkZCNTgzMUYxNTNCOUJBQUNGQThDMEM4MEQ5NzFFRkJCQTI1QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaubZPmtExGAqaWA3UqE0b8jo0
yxwyDOUCuUFVFWo93bH4zL+IcnzMrAR0soriN5p3oY5FEX6u59rYKHynVmDP2r17
7fbSzFlGR/ZXJUOsgKjV1l8M1y/pByyIrXN8beKBPfyG782PmMYe2Nme3iCWH6lE
TX1iudMyyY+vdsgCq+9MYVRyK1AvOwu06cKIVAu3w5Ub09/Hdv+ecvprjbk4rl4o
2J/dYf1EsJUuMa44/iUFZr+xQbN73UPtgrrC+3kUuqunHkQkbezypV+QCO9j1+YI
9+syvjuls0Al2MR/cw5Aa9v9GqP45hAVz8sq1uMznhjgzzrO1yzkZEMnzRTVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUd7+1gx8VO5uqz6jAyA2XHvu6JcYwHwYDVR0j
BBgwFoAU+nUMO2W+FyWaG9/Qn6+6rNyRmx4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURERVRrWUhtRDVuNUx6eGlNQ25MejZnaThHcFI4NkdzeXdiWUNvN0Jt
WWMvMS9GQTc1MEMzQjY1QkUxNzI1OUExQkRGRDA5RkFGQkFBQ0RDOTE5QjFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBNzUwQzNCNjVCRTE3MjU5
QTFCREZEMDlGQUZCQUFDREM5MTlCMUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEREVUa1lIbUQ1bjVMenhpTUNuTHo2Z2k4R3BSODZHc3l3YllDbzdCbVljLzEv
MzEzMzM4MmUzMTMxMzgyZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp2vDANBgkqhkiG9w0BAQsFAAOCAQEAofUb
x7IooY5doo5MBNfkxBKk21nuuZ20xPJbZ8iNAXM6w/+58jYVxleR7UoMbqzNx7fn
cK3YpVr0aygnHnjJ0xIwnlBuC6bCDFqupnvDkokPT0GoCCvHlbbR3nWX/mOXQO33
PQ60uhb6YNWp/uzthOVoKRK+ylzSpAgKj6lOJ4CC8lgD752WssTKrBBRHNhhkJMF
p99fxeDnjgFF5huGzoOQrRX/nJwXAixZTqzi5l+yKpghx3AC68dBRtJ1g4TVYZot
63BfWJ+c3Yg7b8pXQ3vYxBRUBPTeM4y/1u7r8JIql1mSusfMa5FDaXoCBzePNl1w
3yE6JMqCasaTptltYA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org