Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32322d3234203d3e20323730393139.roa
File:                     3133382e3138352e36382e302f32322d3234203d3e20323730393139.roa (raw, json)
Hash identifier:          4AwEbzbKHXaXtsAA5eXB4O4xodrkvtapkOr5gTM0nqY=
Subject key identifier:   6F:E3:ED:7E:FA:CE:C7:BE:8F:A3:97:87:94:6F:90:28:C0:9C:4F:B8
Certificate issuer:       /CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
Certificate serial:       1D696A9B2861D6526EE28A3433C6AF6BD58B5D79
Authority key identifier: 65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32322d3234203d3e20323730393139.roa
Signing time:             Fri 28 Jun 2024 18:28:22 +0000
ROA not before:           Fri 28 Jun 2024 18:23:22 +0000
ROA not after:            Fri 27 Jun 2025 18:28:22 +0000
asID:                     270919
IP address blocks:        138.185.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.crl
                          rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:69:6a:9b:28:61:d6:52:6e:e2:8a:34:33:c6:af:6b:d5:8b:5d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
        Validity
            Not Before: Jun 28 18:23:22 2024 GMT
            Not After : Jun 27 18:28:22 2025 GMT
        Subject: CN=6FE3ED7EFACEC7BE8FA39787946F9028C09C4FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:40:30:7e:e6:b2:7d:9c:ce:c4:b8:cd:e7:
                    ca:9e:3b:17:33:84:8d:58:7c:73:22:56:93:ad:d5:
                    28:86:3d:6a:6f:c5:f5:28:5f:51:ce:e0:54:79:ca:
                    ec:36:1c:41:ed:40:80:8a:73:e9:24:e2:e1:fc:38:
                    d6:36:06:a7:1c:b5:05:4d:54:fe:23:a0:8c:01:22:
                    53:d9:08:ce:c9:27:8f:3f:ad:9c:0f:69:15:95:13:
                    a4:f0:71:37:5a:fa:7d:93:e6:b7:a8:50:be:69:29:
                    10:06:cc:29:c7:f4:88:55:6b:af:47:bb:00:d0:6a:
                    16:4d:2e:91:35:25:c4:14:78:86:c0:76:d5:4f:89:
                    6b:65:26:21:e6:98:07:e5:bc:40:5e:ad:1d:57:a6:
                    b1:bd:f6:85:51:d0:8d:81:94:24:c4:52:5b:7f:91:
                    38:aa:92:fc:90:48:89:8e:f2:5a:01:ac:1f:83:e1:
                    8d:d3:33:ca:89:65:cf:98:65:64:a5:87:84:b5:ad:
                    d4:53:5d:f4:b7:1c:22:ce:4f:64:e4:2f:13:e0:18:
                    d7:02:98:23:08:3c:e2:43:4f:15:a5:ec:5b:fb:95:
                    8d:84:dc:92:02:7f:c1:60:72:31:23:2b:f8:95:98:
                    d1:cc:e0:dd:b8:86:c2:a2:2f:1a:98:60:6b:2b:01:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E3:ED:7E:FA:CE:C7:BE:8F:A3:97:87:94:6F:90:28:C0:9C:4F:B8
            X509v3 Authority Key Identifier:
                keyid:65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e36382e302f32322d3234203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:e0:11:ac:0a:f0:82:b4:71:85:24:66:10:1c:af:9b:5d:
         90:f2:a9:29:30:8a:84:1d:83:55:73:30:8c:36:33:1c:89:1a:
         63:42:bb:89:37:d1:22:33:d3:c5:d1:99:e2:de:72:1a:1c:08:
         27:08:1f:7b:75:ec:4d:c9:30:59:a1:3a:86:13:15:ea:06:c3:
         46:04:8d:23:9b:49:76:24:34:26:db:f3:56:cd:3b:f2:8f:83:
         aa:ce:e9:ef:76:dc:2c:e1:1f:a3:fa:af:5e:d4:51:a3:22:2e:
         aa:c8:5f:f1:41:55:1a:a5:71:69:ea:b8:9a:28:47:57:85:f5:
         15:f6:6d:0c:d5:32:21:2b:b4:1d:97:a7:b5:5c:29:d0:5d:a4:
         30:00:f1:4c:71:80:7e:36:51:1b:78:dc:33:1c:6c:3d:1e:a6:
         4a:86:57:f0:8c:9b:02:0f:7c:c5:f4:9e:29:8e:61:9f:0b:8e:
         ac:a5:c8:77:8c:4b:b3:17:57:89:03:ac:65:a6:f6:8f:d9:af:
         62:ce:c5:f3:7e:3a:35:be:d2:4a:94:2a:51:f1:43:81:95:fe:
         02:57:1d:fe:a7:71:6e:8d:db:5d:5d:18:eb:47:53:83:8a:87:
         36:c1:1e:09:87:f7:4a:e8:2e:85:35:98:5c:20:e8:04:db:77:
         22:2a:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:43 2024 by rpki-client on console-fra.rpki-client.org