Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/1/3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa
File:                     3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa (raw, json)
Hash identifier:          UQQJd/deXhQKoTh9X6z+eX+nWSUuOZ0n3gM7CEarScw=
Subject key identifier:   75:FD:98:0C:3C:E6:B7:37:04:46:A2:03:E2:5F:3B:21:FC:4C:C6:74
Certificate issuer:       /CN=55194EA75A1DD805416750CBD3EEAB9439C6E207
Certificate serial:       5C8C7C2CC86030339067DA3517E649BFD666A8A4
Authority key identifier: 55:19:4E:A7:5A:1D:D8:05:41:67:50:CB:D3:EE:AB:94:39:C6:E2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55194EA75A1DD805416750CBD3EEAB9439C6E207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/1/3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa
Signing time:             Thu 04 Apr 2024 07:54:16 +0000
ROA not before:           Thu 04 Apr 2024 07:49:16 +0000
ROA not after:            Thu 03 Apr 2025 07:54:16 +0000
asID:                     264209
IP address blocks:        138.97.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/1/55194EA75A1DD805416750CBD3EEAB9439C6E207.crl
                          rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/1/55194EA75A1DD805416750CBD3EEAB9439C6E207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55194EA75A1DD805416750CBD3EEAB9439C6E207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8c:7c:2c:c8:60:30:33:90:67:da:35:17:e6:49:bf:d6:66:a8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55194EA75A1DD805416750CBD3EEAB9439C6E207
        Validity
            Not Before: Apr  4 07:49:16 2024 GMT
            Not After : Apr  3 07:54:16 2025 GMT
        Subject: CN=75FD980C3CE6B7370446A203E25F3B21FC4CC674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:4e:e7:99:38:38:21:37:33:6f:c0:5b:a5:
                    42:2a:8f:91:8b:e0:bb:ca:eb:bc:88:dd:ae:c4:8b:
                    3d:93:c1:34:81:9c:8a:d4:27:99:f5:47:67:a9:a4:
                    27:0e:e2:be:16:e4:b2:af:56:75:fb:00:4b:66:23:
                    94:53:b2:dc:b5:4e:ee:b0:8a:72:06:be:2c:2a:8d:
                    20:7c:81:a5:a8:73:9b:2c:d2:df:59:b0:28:6a:ee:
                    62:89:42:e7:78:a4:04:15:a3:61:83:6f:71:82:52:
                    0e:bc:65:6a:94:30:96:a0:26:02:6a:d0:3b:09:23:
                    27:67:7d:76:ea:8d:93:3b:34:8a:ee:5b:b0:bf:be:
                    40:b2:e4:63:d0:0c:f6:84:1c:6d:42:d0:40:ea:54:
                    2b:97:a0:2f:e2:75:b2:70:4d:c5:84:6c:26:85:a5:
                    f3:4a:82:26:90:2b:ef:4b:e2:84:b9:7f:39:fd:f2:
                    d6:88:af:f8:34:a8:55:ec:93:5a:00:ca:cb:29:4b:
                    ad:f6:3f:2d:67:e9:91:d2:f4:dd:ed:46:53:25:ef:
                    5f:da:24:d0:60:2c:64:55:0b:83:b3:d6:d8:93:15:
                    ec:29:13:e9:4f:cd:a8:9a:12:ea:7c:b8:cf:0c:e0:
                    b8:45:60:c4:a1:48:7a:1c:90:1f:45:12:9c:18:0c:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FD:98:0C:3C:E6:B7:37:04:46:A2:03:E2:5F:3B:21:FC:4C:C6:74
            X509v3 Authority Key Identifier:
                keyid:55:19:4E:A7:5A:1D:D8:05:41:67:50:CB:D3:EE:AB:94:39:C6:E2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/1/55194EA75A1DD805416750CBD3EEAB9439C6E207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55194EA75A1DD805416750CBD3EEAB9439C6E207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/1/3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:38:ff:59:db:4f:44:e0:42:b7:3c:9b:fe:8f:bb:d6:7c:aa:
         4f:65:cd:de:e7:27:52:aa:4e:46:93:bc:61:08:76:0a:d0:c3:
         3f:83:46:1b:11:b0:c8:a9:9f:25:d9:a2:0b:e3:00:b8:99:fd:
         e4:ee:50:2e:dc:d1:6f:25:fd:52:18:fa:21:53:03:cc:20:1a:
         0a:9c:27:02:f7:aa:b2:4c:dd:41:6d:ea:59:5c:82:d6:01:cb:
         27:d4:68:7c:c1:25:50:e7:c7:66:4a:2a:2f:65:0d:ae:76:39:
         bd:34:1e:a1:9f:6f:68:f1:4c:fb:4f:69:ff:95:0b:c9:e6:6c:
         51:be:7a:7d:76:a0:06:64:38:d1:7a:9f:79:dd:8c:81:5a:61:
         90:92:da:c3:0b:76:54:c0:3b:2d:64:09:85:72:04:a6:d5:2b:
         9d:42:95:4d:7a:34:61:52:f5:0d:53:2c:0c:53:82:cc:44:68:
         4f:dc:2f:f7:62:79:39:b9:1e:65:40:8c:81:04:10:36:6b:6e:
         8e:a3:73:24:4d:f1:65:ec:cf:b8:e8:e6:1a:db:7d:9a:96:da:
         5c:78:dd:5f:77:42:ac:9f:0e:bb:ad:62:c2:da:ac:46:45:36:
         03:db:0f:54:a7:12:8e:8f:c8:5e:70:02:3e:98:f6:84:16:95:
         a1:dd:93:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:52 2024 by rpki-client on console-fra.rpki-client.org