Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa
File:                     3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa (raw, json)
Hash identifier:          PVh9cD/z9yvbghn+n7fKeZVSwaIIaBOoQv9ZLzzOllk=
Subject key identifier:   3D:90:88:DC:10:AC:3B:41:0A:18:99:DD:AE:B6:94:DD:6B:0E:CE:C6
Certificate issuer:       /CN=BDE303318750FBF00F09F64D0947A4B33A3EAFF9
Certificate serial:       096F20A09E02853DC18B33AE706A3AF4487E95E8
Authority key identifier: BD:E3:03:31:87:50:FB:F0:0F:09:F6:4D:09:47:A4:B3:3A:3E:AF:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa
Signing time:             Fri 21 Jun 2024 17:48:26 +0000
ROA not before:           Fri 21 Jun 2024 17:43:26 +0000
ROA not after:            Fri 20 Jun 2025 17:48:26 +0000
asID:                     263948
IP address blocks:        138.219.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.crl
                          rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6f:20:a0:9e:02:85:3d:c1:8b:33:ae:70:6a:3a:f4:48:7e:95:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE303318750FBF00F09F64D0947A4B33A3EAFF9
        Validity
            Not Before: Jun 21 17:43:26 2024 GMT
            Not After : Jun 20 17:48:26 2025 GMT
        Subject: CN=3D9088DC10AC3B410A1899DDAEB694DD6B0ECEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:7c:31:3c:9d:3b:07:ac:20:98:17:7e:2f:
                    a5:13:5b:54:a0:40:6d:42:53:ba:81:49:c8:49:67:
                    2a:b9:0e:cf:26:29:da:f2:36:58:3d:78:40:5d:36:
                    e9:d5:f4:58:51:fd:31:7c:62:f7:b2:33:d0:95:57:
                    9f:e2:12:97:0f:e3:c0:9a:00:d7:4e:73:1e:6d:b2:
                    bf:8a:50:4d:f9:b3:c2:ec:a6:a6:c7:35:38:85:fc:
                    c4:4f:cd:09:2c:9a:17:76:1c:a0:5f:29:d1:9d:48:
                    09:b2:7c:a6:33:20:b5:08:ba:81:26:eb:4e:80:e3:
                    81:bb:85:d3:9e:f3:90:33:ac:e9:08:47:db:e8:40:
                    04:7d:9a:06:bb:6f:f2:15:82:df:4d:56:dd:54:af:
                    83:3a:ad:0e:4f:67:0f:68:eb:a4:48:c1:21:5a:bd:
                    0c:92:11:b3:ce:59:c8:a2:57:ac:59:f4:c3:76:3e:
                    7f:54:c7:1f:31:fd:b4:54:a5:98:8b:d3:f9:57:46:
                    1f:42:59:87:a8:32:07:92:3a:6f:7f:26:4c:dd:b7:
                    1e:0d:1e:c5:a6:05:7d:b3:cc:00:aa:82:2d:29:a6:
                    66:59:59:e7:ee:5e:ba:01:a7:61:3e:97:94:48:25:
                    ce:6f:68:0f:70:cd:4e:ed:9f:36:e5:ed:78:16:f0:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:90:88:DC:10:AC:3B:41:0A:18:99:DD:AE:B6:94:DD:6B:0E:CE:C6
            X509v3 Authority Key Identifier:
                keyid:BD:E3:03:31:87:50:FB:F0:0F:09:F6:4D:09:47:A4:B3:3A:3E:AF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE303318750FBF00F09F64D0947A4B33A3EAFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:6d:52:58:d3:7d:50:43:2e:14:31:0a:88:af:c1:c9:ee:2e:
         0b:dc:ff:ad:c9:3c:87:a6:82:f7:e1:43:7f:84:b2:2d:ca:09:
         d0:fb:aa:64:63:cc:d5:a3:45:35:2f:8b:9d:e4:c8:5a:f9:a7:
         40:42:7b:53:28:be:e0:ea:1e:af:90:98:a5:7e:5d:e3:c3:91:
         08:1d:c6:c3:d6:f8:6e:4d:cd:f8:5c:87:63:1d:85:4c:2a:11:
         34:44:5d:dc:2a:cf:bc:19:a8:79:b9:a7:91:53:e9:2d:d4:65:
         fb:d3:2a:45:e1:70:fd:00:50:5c:92:1d:a2:0d:2e:00:fd:d9:
         e1:6f:fe:96:6d:56:8b:ab:6b:4e:da:61:68:bf:e4:aa:41:8e:
         2d:b9:00:65:7c:b0:e1:ba:e7:82:52:8e:d9:5a:71:3f:c1:a2:
         ae:d0:b8:7b:84:f4:77:38:9a:25:f1:cb:7a:5f:f2:55:3d:53:
         02:bf:a8:fb:6f:be:52:54:e3:22:55:2f:42:33:06:e0:53:5f:
         6a:63:5d:63:96:34:f8:a2:66:bb:87:67:7b:1d:58:a6:4a:de:
         10:84:ef:22:4b:e5:c4:cf:40:1e:25:bd:41:17:2c:69:6c:3b:
         f4:54:93:7d:dd:62:47:03:77:35:2e:d9:06:9a:7b:09:db:a1:
         9b:1c:53:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:43:22 2024 by rpki-client on console-fra.rpki-client.org