Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/3133382e39372e3234302e302f32322d3332203d3e20323634323137.roa
File:                     3133382e39372e3234302e302f32322d3332203d3e20323634323137.roa (raw, json)
Hash identifier:          HnG1o9KKp2XzCLEYH3SZnipn3MLuez/ZSO5exOFD3C4=
Subject key identifier:   41:10:29:EA:E2:8E:11:EF:AA:8D:A1:EA:9C:50:BF:1B:F1:F6:DB:F7
Certificate issuer:       /CN=F15E472EEC88DBBC156901BE4A6E261386DFB9E3
Certificate serial:       07BC02C080A91F396BB7B78FA338FCD4F460BC18
Authority key identifier: F1:5E:47:2E:EC:88:DB:BC:15:69:01:BE:4A:6E:26:13:86:DF:B9:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/3133382e39372e3234302e302f32322d3332203d3e20323634323137.roa
Signing time:             Tue 28 May 2024 16:34:52 +0000
ROA not before:           Tue 28 May 2024 16:29:52 +0000
ROA not after:            Tue 27 May 2025 16:34:52 +0000
asID:                     264217
IP address blocks:        138.97.240.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.crl
                          rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bc:02:c0:80:a9:1f:39:6b:b7:b7:8f:a3:38:fc:d4:f4:60:bc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15E472EEC88DBBC156901BE4A6E261386DFB9E3
        Validity
            Not Before: May 28 16:29:52 2024 GMT
            Not After : May 27 16:34:52 2025 GMT
        Subject: CN=411029EAE28E11EFAA8DA1EA9C50BF1BF1F6DBF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:ef:c2:ba:62:e9:86:3b:b6:21:51:7b:f6:
                    86:34:ff:5b:1a:c9:53:e5:79:01:6a:ae:28:f6:b6:
                    ab:73:50:6e:3c:38:97:28:9c:ab:63:41:63:dc:6e:
                    2b:63:07:c0:66:26:37:1c:e2:ad:04:47:75:b8:13:
                    2e:eb:87:87:8b:8a:13:20:a2:44:ed:5c:ba:68:d6:
                    c0:0a:28:ab:7a:6b:83:78:49:f4:42:eb:f7:e6:14:
                    5c:9c:e5:4d:e1:0d:bd:ae:7a:dd:66:9d:35:bb:62:
                    13:ab:8f:e6:c8:bc:69:de:e5:5c:4c:de:b1:27:42:
                    a8:e5:83:69:61:29:c7:19:30:ce:17:e4:8d:e0:03:
                    ce:c1:84:3e:57:dd:e5:dd:e6:64:c8:da:04:b8:52:
                    0a:84:c6:c4:d6:a8:f5:b4:eb:1a:01:11:5e:e0:04:
                    f6:4e:6a:32:f8:35:16:2e:68:1a:84:d7:9d:bc:d6:
                    a0:a4:66:58:45:53:18:94:cc:cc:d2:c8:76:af:6e:
                    da:77:df:51:1f:f9:9e:94:bb:30:99:56:d0:ab:e0:
                    bd:55:ab:08:04:2a:d1:7f:bd:1c:d6:6d:c6:b1:41:
                    d7:24:8f:4e:7e:35:6d:91:49:13:3d:80:91:83:57:
                    f2:9a:2e:a5:ee:57:c8:73:69:66:cc:6b:3a:52:f7:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:10:29:EA:E2:8E:11:EF:AA:8D:A1:EA:9C:50:BF:1B:F1:F6:DB:F7
            X509v3 Authority Key Identifier:
                keyid:F1:5E:47:2E:EC:88:DB:BC:15:69:01:BE:4A:6E:26:13:86:DF:B9:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/3133382e39372e3234302e302f32322d3332203d3e20323634323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:b1:26:77:e2:e3:e1:c1:0a:f8:e4:19:70:30:2f:83:86:17:
         95:63:a8:25:18:d6:01:3b:52:45:39:0d:5d:1b:5d:2f:85:a2:
         1e:78:5e:4a:10:f0:cf:a7:f9:1f:68:bc:c0:fb:09:05:e3:e6:
         c3:ac:3e:f1:2f:a3:ff:4f:a4:05:a0:66:92:80:f6:37:58:d8:
         58:8a:99:32:59:15:3c:e1:81:a9:35:64:0f:2f:ba:ce:ef:ec:
         fd:2f:51:92:24:cc:35:02:80:5a:73:3a:dd:67:9a:8c:16:25:
         60:4a:4d:30:67:aa:ec:4b:6a:e4:12:a8:a1:35:2c:a5:bb:b0:
         87:cd:7d:c1:22:0e:7c:75:9d:a0:da:05:66:23:fd:00:20:7b:
         1a:31:13:d1:ed:25:f5:34:3e:bc:b4:c6:46:96:8f:f8:a2:66:
         86:b0:8a:67:21:1e:88:bd:27:fc:b0:dc:ea:54:d0:cb:7e:38:
         74:26:f1:8a:e9:e3:fb:3c:45:b8:4e:25:7b:88:1c:2a:e9:5b:
         bb:16:fe:36:9e:7e:fb:9c:d4:7a:9e:99:a0:8c:19:8f:26:2f:
         83:84:f4:0b:79:e7:4f:87:ad:88:3a:4a:a9:53:24:93:29:a3:
         1a:e2:97:a5:ee:a1:bc:36:63:5e:fb:84:8f:66:d4:60:6b:6b:
         42:a6:c1:ae
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUB7wCwICpHzlrt7ePozj81PRgvBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE1RTQ3MkVFQzg4REJCQzE1NjkwMUJFNEE2RTI2MTM4
NkRGQjlFMzAeFw0yNDA1MjgxNjI5NTJaFw0yNTA1MjcxNjM0NTJaMDMxMTAvBgNV
BAMTKDQxMTAyOUVBRTI4RTExRUZBQThEQTFFQTlDNTBCRjFCRjFGNkRCRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQq+/CumLphju2IVF79oY0/1sa
yVPleQFqrij2tqtzUG48OJconKtjQWPcbitjB8BmJjcc4q0ER3W4Ey7rh4eLihMg
okTtXLpo1sAKKKt6a4N4SfRC6/fmFFyc5U3hDb2uet1mnTW7YhOrj+bIvGne5VxM
3rEnQqjlg2lhKccZMM4X5I3gA87BhD5X3eXd5mTI2gS4UgqExsTWqPW06xoBEV7g
BPZOajL4NRYuaBqE15281qCkZlhFUxiUzMzSyHavbtp331Ef+Z6UuzCZVtCr4L1V
qwgEKtF/vRzWbcaxQdckj05+NW2RSRM9gJGDV/KaLqXuV8hzaWbMazpS9853AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQRAp6uKOEe+qjaHqnFC/G/H22/cwHwYDVR0j
BBgwFoAU8V5HLuyI27wVaQG+Sm4mE4bfueMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkpqMTRESHcxTEZ3TmJHS1l5VFVnbllOa2pEVFltOTduS05tTTg4NnVa
NjYvMC9GMTVFNDcyRUVDODhEQkJDMTU2OTAxQkU0QTZFMjYxMzg2REZCOUUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxNUU0NzJFRUM4OERCQkMx
NTY5MDFCRTRBNkUyNjEzODZERkI5RTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZKajE0REh3MUxGd05iR0tZeVRVZ25ZTmtqRFRZbTk3bktObU04ODZ1WjY2LzAv
MzEzMzM4MmUzOTM3MmUzMjM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKYfAwDQYJKoZIhvcNAQELBQADggEBAI6xJnfi
4+HBCvjkGXAwL4OGF5VjqCUY1gE7UkU5DV0bXS+Foh54XkoQ8M+n+R9ovMD7CQXj
5sOsPvEvo/9PpAWgZpKA9jdY2FiKmTJZFTzhgak1ZA8vus7v7P0vUZIkzDUCgFpz
Ot1nmowWJWBKTTBnquxLauQSqKE1LKW7sIfNfcEiDnx1naDaBWYj/QAgexoxE9Ht
JfU0Pry0xkaWj/iiZoawimchHoi9J/yw3OpU0Mt+OHQm8Yrp4/s8RbhOJXuIHCrp
W7sW/jaefvuc1HqemaCMGY8mL4OE9At550+HrYg6SqlTJJMpoxril6Xuobw2Y177
hI9m1GBra0Kmwa4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:23 2024 by rpki-client on console-fra.rpki-client.org