Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138392e302f32342d3234203d3e20323634323732.roa
File:                     3133382e3131382e3138392e302f32342d3234203d3e20323634323732.roa (raw, json)
Hash identifier:          K4Xz1eS9AsUlSvE4CqTJO8lUCsh2wYX5l6bw+OynGYg=
Subject key identifier:   EA:BD:35:A6:B6:5A:D7:D5:CB:43:84:1E:E4:2A:C3:93:67:B8:38:9E
Certificate issuer:       /CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
Certificate serial:       21F16CDA91EB11C544CE2B5CC2CADD9729D754DA
Authority key identifier: FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138392e302f32342d3234203d3e20323634323732.roa
Signing time:             Wed 03 Apr 2024 23:43:16 +0000
ROA not before:           Wed 03 Apr 2024 23:38:16 +0000
ROA not after:            Wed 02 Apr 2025 23:43:16 +0000
asID:                     264272
IP address blocks:        138.118.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl
                          rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f1:6c:da:91:eb:11:c5:44:ce:2b:5c:c2:ca:dd:97:29:d7:54:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
        Validity
            Not Before: Apr  3 23:38:16 2024 GMT
            Not After : Apr  2 23:43:16 2025 GMT
        Subject: CN=EABD35A6B65AD7D5CB43841EE42AC39367B8389E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:43:4a:53:6b:a8:40:11:08:45:75:e1:ed:
                    7c:5a:a5:59:40:c0:11:37:be:10:c5:68:bd:05:36:
                    75:eb:01:7e:53:78:51:64:a5:fa:b2:61:84:51:95:
                    4a:9b:ea:7a:d0:1c:39:6c:6d:3f:a0:68:9d:c9:83:
                    79:e7:e4:c4:56:9c:ab:a7:0e:43:6b:7c:a3:8e:da:
                    85:ce:37:f9:b6:18:77:3e:6f:12:0f:27:7f:5f:16:
                    0d:12:4e:3a:10:af:95:84:eb:95:3d:c6:b4:78:b6:
                    42:f2:31:70:21:eb:96:69:3d:ba:b2:27:83:df:21:
                    a7:a8:65:8e:b5:5b:87:c8:ca:5a:08:f8:07:ee:79:
                    f6:5c:59:93:23:84:11:97:cf:d5:c3:78:bd:5b:47:
                    ce:15:1d:ba:fb:7e:9f:9e:2b:07:49:b8:af:29:e7:
                    37:89:14:32:4c:be:72:c1:e7:f9:db:82:32:1b:52:
                    83:91:54:c4:f1:f1:2e:de:24:61:5e:20:18:50:d0:
                    7c:86:78:2a:ae:8a:23:50:7d:cd:3d:8d:48:04:42:
                    22:68:24:52:a7:97:ef:3c:85:72:be:b8:3b:17:2d:
                    5e:ce:73:3f:2a:8b:e0:0f:49:25:96:d1:e6:94:14:
                    d9:96:79:0a:72:64:18:06:fb:76:90:6d:af:7b:d7:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BD:35:A6:B6:5A:D7:D5:CB:43:84:1E:E4:2A:C3:93:67:B8:38:9E
            X509v3 Authority Key Identifier:
                keyid:FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3138392e302f32342d3234203d3e20323634323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:b9:96:2c:54:fd:41:9e:ab:40:72:6c:cb:b0:72:08:c0:b5:
         20:09:e1:2c:57:c0:ae:8f:cb:7e:ab:a6:44:ee:61:96:6a:9c:
         f6:a5:0f:fd:ab:8b:ee:31:44:73:38:cf:ed:97:5f:3c:43:ff:
         30:15:99:6a:de:43:e4:7b:6d:bd:e2:0d:87:1b:3b:38:ec:54:
         cc:47:00:01:48:f8:5e:62:11:09:dd:fd:db:dd:e0:ae:6b:00:
         e4:29:09:f2:5d:ab:fb:31:ae:3c:42:df:6a:12:01:be:36:4b:
         8d:bf:9d:3a:61:0a:18:ed:f6:fc:2a:74:fb:12:a0:5b:57:16:
         cc:d0:01:b8:d0:ab:c2:0b:7f:ee:b2:ec:24:06:64:ae:48:10:
         fe:5d:94:de:43:da:6f:3c:e3:60:26:63:0f:d8:92:af:b4:56:
         3d:fe:af:0b:f7:26:b6:9c:2b:b4:03:5c:45:b2:12:17:f7:f4:
         10:32:14:11:57:04:3c:86:1b:f4:56:17:fa:b3:b1:75:59:5a:
         ca:f2:18:ef:95:5f:e5:b5:80:e5:d1:15:13:96:71:f9:cf:46:
         cd:16:b1:ed:32:75:eb:3d:b2:76:59:28:da:dd:25:08:f1:91:
         06:38:19:90:80:8d:02:bb:e8:46:d5:c6:04:fd:39:2b:96:d6:
         b6:00:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:04:03 2024 by rpki-client on console-fra.rpki-client.org