Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/3133382e3230342e382e302f32322d3234203d3e20323633393637.roa
File:                     3133382e3230342e382e302f32322d3234203d3e20323633393637.roa (raw, json)
Hash identifier:          1Xi/pYZHqQEuyfpxqzFm8Dt4wsdjBI5QA1USFU/Cvg8=
Subject key identifier:   15:23:37:99:FC:51:4B:D3:DC:34:B7:04:A2:BF:4E:A6:35:59:3B:DA
Certificate issuer:       /CN=B224D943E8065A18929A784B51D1633209C1CC91
Certificate serial:       6035A87EF2F172995823541CA59BAC2BDC85EBE3
Authority key identifier: B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/3133382e3230342e382e302f32322d3234203d3e20323633393637.roa
Signing time:             Thu 04 Apr 2024 04:46:47 +0000
ROA not before:           Thu 04 Apr 2024 04:41:47 +0000
ROA not after:            Thu 03 Apr 2025 04:46:47 +0000
asID:                     263967
IP address blocks:        138.204.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl
                          rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:35:a8:7e:f2:f1:72:99:58:23:54:1c:a5:9b:ac:2b:dc:85:eb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224D943E8065A18929A784B51D1633209C1CC91
        Validity
            Not Before: Apr  4 04:41:47 2024 GMT
            Not After : Apr  3 04:46:47 2025 GMT
        Subject: CN=15233799FC514BD3DC34B704A2BF4EA635593BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d2:38:0e:42:89:c5:d3:cc:51:b6:df:6e:be:
                    29:40:db:df:19:dd:ba:2d:32:28:e9:29:6f:63:5d:
                    32:da:31:d5:55:0d:74:38:32:52:b1:1b:d8:1a:07:
                    82:77:28:d8:77:2f:40:c9:0d:a9:72:c3:12:71:5d:
                    5d:1d:d8:3a:06:93:00:e0:87:01:48:48:18:8a:aa:
                    48:42:11:52:ac:ff:b1:f2:fe:0a:d0:94:63:2e:74:
                    f6:61:10:e8:ef:3a:5c:af:81:88:cc:00:4c:42:e0:
                    5e:5e:dc:66:01:73:e3:7b:3a:6d:46:b5:12:f6:1f:
                    a0:5d:7e:90:8f:2c:47:64:81:70:f0:bc:d5:99:f4:
                    51:20:d3:52:96:71:cf:8b:45:56:87:fd:4b:b3:d7:
                    f6:d1:87:5a:aa:2a:5c:a4:eb:e4:d7:bf:f7:ad:f6:
                    31:f6:80:1d:14:45:c6:fa:85:dc:f7:0f:c6:83:3c:
                    d9:b1:8a:23:ab:42:83:86:89:9b:19:32:33:7a:68:
                    83:35:c6:5d:13:1f:17:1d:cc:08:a7:0e:dc:03:7d:
                    eb:94:4c:d1:98:23:ec:e2:1f:59:11:f8:28:4c:9e:
                    81:26:64:bd:d5:07:82:21:24:d7:fb:64:ef:8c:e8:
                    0b:66:0c:92:1f:87:af:c0:75:98:27:2c:86:ba:14:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:23:37:99:FC:51:4B:D3:DC:34:B7:04:A2:BF:4E:A6:35:59:3B:DA
            X509v3 Authority Key Identifier:
                keyid:B2:24:D9:43:E8:06:5A:18:92:9A:78:4B:51:D1:63:32:09:C1:CC:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/B224D943E8065A18929A784B51D1633209C1CC91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B224D943E8065A18929A784B51D1633209C1CC91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/1/3133382e3230342e382e302f32322d3234203d3e20323633393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:3a:9e:d1:a8:bb:44:19:98:5a:fe:a2:66:8f:63:b7:38:1f:
         04:9e:96:00:36:e2:e8:7d:8b:78:2a:cf:3f:17:25:26:48:88:
         68:13:01:72:ba:11:b9:e8:0c:9b:d6:b2:2b:de:05:40:20:7a:
         38:1a:2b:1d:7d:4f:80:8b:8b:74:2a:71:b1:59:cf:6a:44:6d:
         8a:47:79:b0:86:a0:df:36:d0:30:d8:3c:06:58:74:16:43:df:
         89:f3:61:02:79:f9:33:7c:42:e6:3a:90:19:3d:71:1b:3b:7d:
         a8:52:13:a6:9c:95:7e:77:61:35:1e:e5:31:b1:88:eb:01:ef:
         42:07:30:f7:e4:c3:38:39:7c:43:6d:43:ca:4c:93:cd:c5:ef:
         0b:b3:f3:3d:92:0c:a9:e2:78:03:1f:b1:6a:72:b1:48:e6:a4:
         a3:d3:09:e4:86:11:f9:3e:dc:cc:7f:0e:ac:09:7a:9a:3f:cb:
         66:b3:af:5f:25:f9:38:31:eb:62:f6:74:e0:e7:a2:6f:af:b0:
         c6:c9:33:29:54:92:c9:7b:96:03:42:ee:e8:90:96:0a:1c:05:
         a3:1e:51:e5:dd:10:33:85:87:97:97:2a:83:0c:40:f5:aa:23:
         7e:2b:49:b8:88:d1:ce:a2:60:ac:12:ae:bc:a6:ef:44:88:59:
         22:6d:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:54 2024 by rpki-client on console-fra.rpki-client.org