Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3139302e302f32332d3233203d3e20323634323732.roa
File:                     3133382e3131382e3139302e302f32332d3233203d3e20323634323732.roa (raw, json)
Hash identifier:          rdtdWDo/wh9/6NCGOwDxRz+I/qIfiPrVXTeG7I8POGw=
Subject key identifier:   FE:F7:3F:12:94:FA:27:1C:8C:3A:CE:C6:42:C2:41:82:E4:14:39:13
Certificate issuer:       /CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
Certificate serial:       534F45D3B388B1BA41F566416C9EB97D412880E9
Authority key identifier: FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3139302e302f32332d3233203d3e20323634323732.roa
Signing time:             Wed 03 Apr 2024 23:43:17 +0000
ROA not before:           Wed 03 Apr 2024 23:38:17 +0000
ROA not after:            Wed 02 Apr 2025 23:43:17 +0000
asID:                     264272
IP address blocks:        138.118.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl
                          rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4f:45:d3:b3:88:b1:ba:41:f5:66:41:6c:9e:b9:7d:41:28:80:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E
        Validity
            Not Before: Apr  3 23:38:17 2024 GMT
            Not After : Apr  2 23:43:17 2025 GMT
        Subject: CN=FEF73F1294FA271C8C3ACEC642C24182E4143913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:45:5c:30:fd:c0:f8:ec:82:1f:d1:b5:95:
                    ce:ef:3c:2b:a0:9b:43:1f:d9:b4:e9:d8:2c:95:de:
                    2c:96:0d:1d:e2:18:a1:a4:4c:c5:9a:9c:af:40:b1:
                    42:28:f7:87:49:01:c3:b0:b3:f2:7a:9b:ab:45:df:
                    d5:a1:5d:ae:41:32:1d:a0:0b:34:11:2d:10:e1:49:
                    13:d2:86:1b:56:35:82:42:40:89:b8:2c:ab:d5:c2:
                    8a:d9:ee:0a:f8:76:c2:25:74:c6:27:bf:0c:88:7f:
                    9e:a6:ca:aa:cf:13:7a:dd:28:3e:37:cc:d8:17:4d:
                    cd:ac:6b:81:c8:a5:03:1a:83:32:95:b4:e6:db:d7:
                    e5:4a:ce:6e:6c:19:d4:58:e0:50:11:65:f0:c0:ed:
                    28:ba:03:42:0a:44:56:30:54:0e:37:f6:cb:d7:58:
                    34:81:28:9d:49:f6:89:30:c5:5b:fd:f2:30:b4:e8:
                    0a:d4:8f:31:66:79:cc:b3:bf:2f:84:c3:88:c4:0a:
                    a7:14:58:5b:d8:be:07:b2:b3:65:97:8b:9e:4a:9e:
                    39:ed:9a:3f:80:e2:fd:0f:35:4c:3e:bd:53:a3:00:
                    5a:55:d1:26:de:27:75:3a:ec:4e:e3:db:51:bb:dc:
                    df:4f:c8:da:bd:64:96:52:94:0d:c5:2d:bb:da:81:
                    21:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F7:3F:12:94:FA:27:1C:8C:3A:CE:C6:42:C2:41:82:E4:14:39:13
            X509v3 Authority Key Identifier:
                keyid:FA:75:0C:3B:65:BE:17:25:9A:1B:DF:D0:9F:AF:BA:AC:DC:91:9B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA750C3B65BE17259A1BDFD09FAFBAACDC919B1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/1/3133382e3131382e3139302e302f32332d3233203d3e20323634323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:6d:1f:a9:80:6c:91:67:86:9a:a1:a7:d8:47:d6:28:8f:6e:
         c7:3a:56:7a:67:92:71:a0:0d:b3:a6:9f:0e:83:2b:2f:80:33:
         7c:21:c3:19:9a:45:f2:a9:28:80:6a:2a:51:c2:9b:8d:a2:d6:
         6b:48:88:b0:c6:7c:65:2e:a0:0c:ed:83:ba:db:55:4f:dd:53:
         22:f4:aa:23:5c:05:2b:57:4e:9a:01:78:f7:d6:de:c0:70:8a:
         f5:50:4f:fb:27:a0:86:36:93:29:25:11:20:dc:f2:48:f4:a5:
         5d:3f:d9:73:14:1f:30:18:64:4c:02:15:1a:b2:66:3d:98:42:
         bd:90:f3:3f:5d:45:0e:fc:47:c3:7a:b1:bb:a4:a1:62:26:05:
         7f:f4:34:2d:4b:2b:e7:b7:8e:a0:68:38:8a:ab:ba:de:fe:67:
         19:5b:9d:24:a1:e6:c3:41:84:f6:48:79:4e:4b:9f:6d:2c:e3:
         9f:ea:e2:b7:b7:a1:a4:a3:e0:2e:ac:5f:a6:fa:82:95:99:27:
         2d:dd:fc:09:b3:a1:a7:03:7e:2c:d5:b1:90:7e:02:8f:7c:b6:
         c8:0d:92:99:44:61:38:92:e3:5f:2e:ea:6c:6a:f5:d2:af:68:
         a0:d6:73:eb:d7:07:7c:ec:69:16:6c:51:ad:f1:0d:1d:36:36:
         90:50:43:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org