Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
File:                     3133382e39372e302e302f32322d3234203d3e20323632333436.roa (raw, json)
Hash identifier:          cuVPSasSVkUJd0P2hhdUOeAto3bXiHwvdThoubGvVdQ=
Subject key identifier:   FB:92:21:DE:96:70:A3:A0:14:26:76:67:68:BA:FC:2B:2E:B8:7F:2B
Certificate issuer:       /CN=D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE
Certificate serial:       67BCF71BF07A40FD85460E79894B0A842BF5B2C0
Authority key identifier: D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa
Signing time:             Mon 28 Oct 2024 17:08:09 +0000
ROA not before:           Mon 28 Oct 2024 17:03:09 +0000
ROA not after:            Mon 27 Oct 2025 17:08:09 +0000
asID:                     262346
IP address blocks:        138.97.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.crl
                          rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bc:f7:1b:f0:7a:40:fd:85:46:0e:79:89:4b:0a:84:2b:f5:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE
        Validity
            Not Before: Oct 28 17:03:09 2024 GMT
            Not After : Oct 27 17:08:09 2025 GMT
        Subject: CN=FB9221DE9670A3A01426766768BAFC2B2EB87F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fa:dd:d6:b3:dd:9b:28:9b:09:b9:8a:98:96:
                    fe:fe:24:d3:06:4b:8f:8b:05:54:e8:ba:53:3c:9b:
                    3e:83:bb:a3:91:8e:fb:1a:a3:94:e5:e9:c5:c2:5e:
                    9c:09:0c:dd:2e:eb:a9:91:44:8d:ac:18:f8:d5:d5:
                    5c:3a:fd:2f:99:7a:ba:44:3f:44:14:b8:5c:ba:88:
                    1c:84:39:28:cb:77:dd:d6:d3:a9:3e:f3:f5:d0:36:
                    74:9b:ba:cc:2d:b1:91:7d:e4:01:76:da:1f:c5:30:
                    fb:77:1f:1d:36:e2:54:84:67:ee:27:b3:96:30:38:
                    b4:50:a7:fd:58:86:ec:fc:36:fd:a7:34:9c:f7:d1:
                    c9:a7:08:76:7c:50:93:ae:06:2d:14:4c:57:5c:a5:
                    61:fe:72:71:c4:19:7f:f2:33:8b:2e:e3:a7:f9:d3:
                    19:a8:a0:58:fc:48:36:c8:e9:71:05:65:ae:f5:40:
                    3a:c4:f2:51:1e:ff:3d:97:b0:42:28:1b:39:7b:35:
                    0e:cb:18:a5:2c:5f:2c:70:b4:31:59:26:20:82:fb:
                    e4:5a:3c:79:57:3a:52:d5:0c:60:21:d3:40:e1:fe:
                    ec:49:33:ad:02:b4:1e:95:39:0f:e6:07:f0:3f:90:
                    d3:dc:bb:17:a5:9a:38:9c:b5:9a:9b:75:7d:2c:e3:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:92:21:DE:96:70:A3:A0:14:26:76:67:68:BA:FC:2B:2E:B8:7F:2B
            X509v3 Authority Key Identifier:
                keyid:D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3133382e39372e302e302f32322d3234203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:81:32:97:e9:57:b4:ff:fe:c6:08:68:b4:a5:b8:d5:0e:44:
         85:af:e6:cb:f6:9b:4a:1c:06:91:6c:87:df:41:a3:05:fc:7c:
         70:df:b0:ff:66:a2:91:92:a4:30:ac:7a:30:fb:70:cc:0d:4f:
         91:0b:99:92:3d:24:42:8d:fe:02:40:f4:ea:f6:7c:e4:7a:66:
         e7:f6:e4:00:5d:2b:cc:61:7f:ad:61:89:14:af:80:9d:2b:be:
         9c:93:57:50:ad:49:ba:82:70:0d:78:e7:af:31:b5:86:af:af:
         8b:ee:e4:38:f9:11:92:20:c6:c5:dc:53:ec:7a:f2:d6:19:e6:
         8f:3f:a0:90:f3:4d:15:bf:b5:59:0d:26:59:79:0b:17:48:1a:
         37:3d:ca:14:6e:56:ac:f9:a2:61:24:bf:d3:b7:ec:f4:b6:ef:
         48:b1:e0:5b:44:ec:23:1c:51:2e:b7:0e:2a:b9:c0:cc:ab:ec:
         ab:55:bb:e0:b8:77:18:e3:9a:6a:6e:f5:ca:02:3c:b9:20:ee:
         83:c0:44:5a:b7:03:02:41:da:1a:6a:30:75:fc:c9:fe:6d:7b:
         57:2c:60:e9:b7:1a:3e:81:68:3e:77:fa:04:e9:85:3b:9c:e0:
         ba:4a:51:4a:43:47:a2:4d:de:ee:9c:fd:00:b1:0c:8f:08:90:
         80:27:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:52 2024 by rpki-client on console-fra.rpki-client.org