Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa
File:                     3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa (raw, json)
Hash identifier:          OVxMDWXAJB7PFllqGB4IgZMiArNi391X7BhcXiUdHAM=
Subject key identifier:   36:77:10:2A:DC:5C:6E:6D:B2:19:92:ED:20:11:5E:29:29:80:07:6B
Certificate issuer:       /CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
Certificate serial:       78B592773A4331C0CDC64DE62DB79FECFEFDF7D6
Authority key identifier: 44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa
Signing time:             Tue 25 Jun 2024 12:48:04 +0000
ROA not before:           Tue 25 Jun 2024 12:43:04 +0000
ROA not after:            Tue 24 Jun 2025 12:48:04 +0000
asID:                     263988
IP address blocks:        138.255.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl
                          rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b5:92:77:3a:43:31:c0:cd:c6:4d:e6:2d:b7:9f:ec:fe:fd:f7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
        Validity
            Not Before: Jun 25 12:43:04 2024 GMT
            Not After : Jun 24 12:48:04 2025 GMT
        Subject: CN=3677102ADC5C6E6DB21992ED20115E292980076B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:01:ed:5a:09:65:9e:c6:28:6d:90:f4:2b:
                    ee:3d:83:23:07:38:55:54:32:5c:5b:9c:f2:32:16:
                    10:55:57:d1:c6:08:36:ea:21:f8:f7:35:a5:6b:7e:
                    ab:6b:5c:58:78:01:00:7a:da:26:5f:e0:66:8c:82:
                    9c:b2:01:cd:9c:09:e5:ae:42:9d:82:6e:8b:df:e3:
                    2a:4c:15:1b:5c:10:38:af:29:88:a2:d8:e9:5f:50:
                    b3:c8:01:b6:dc:c9:40:a9:fe:8f:95:b7:6f:84:95:
                    9d:08:95:a7:6f:30:6c:e4:8a:ae:4f:34:43:b4:06:
                    b9:90:78:a6:f3:88:74:a2:5d:26:10:49:9b:fa:4e:
                    3c:d2:e2:af:16:23:41:7e:3b:9b:fb:ad:c1:2e:84:
                    18:6f:ad:a3:58:35:3d:23:44:c8:ee:ec:c0:3c:60:
                    f9:db:27:f7:68:d1:96:4a:da:d9:a3:15:05:6b:a3:
                    04:69:49:83:5d:a4:c8:0e:02:b5:a9:80:37:bf:7c:
                    63:36:a2:2d:06:ab:95:50:df:28:74:80:0d:17:77:
                    de:e6:ad:aa:e1:8d:3f:20:18:8e:9d:b9:bb:5e:15:
                    25:8c:a7:3f:80:14:a8:08:7e:b2:73:b5:79:99:ef:
                    6e:c8:70:3d:25:04:d5:9f:4d:53:ec:e6:ce:67:b1:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:77:10:2A:DC:5C:6E:6D:B2:19:92:ED:20:11:5E:29:29:80:07:6B
            X509v3 Authority Key Identifier:
                keyid:44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/3133382e3235352e3138382e302f32322d3234203d3e20323633393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:d7:e1:b1:ff:18:07:9d:28:cf:9e:a4:96:1f:65:61:18:c5:
         27:41:2f:00:ff:22:5a:41:90:8d:19:9a:73:a5:d4:4c:d8:df:
         3c:a3:ea:8f:91:8f:66:b1:90:9f:e3:c2:7a:30:4f:28:89:49:
         7b:ca:09:3a:56:31:bb:22:d1:fd:b2:8b:bf:7c:cd:0a:b1:46:
         26:74:8d:61:f7:ce:6d:93:e9:31:2f:04:8d:56:f5:17:84:b9:
         03:9b:ea:25:54:66:50:f5:fc:f2:26:f9:13:3d:a2:16:7c:e4:
         be:97:83:f1:c8:fe:60:7b:76:6a:77:38:4d:5b:31:47:f3:61:
         1b:87:9b:a5:a4:dd:1f:71:5e:92:99:81:b9:0e:97:d3:f0:53:
         bf:93:23:59:69:d8:a0:27:75:f3:1c:c6:57:c4:d3:17:87:e8:
         d2:7d:da:3c:86:96:ef:96:8e:58:fa:99:b7:14:d0:70:18:55:
         d9:32:46:8e:c0:b1:4c:f5:82:d2:71:d1:85:5f:ac:ee:06:68:
         0b:d9:65:21:8a:93:ce:66:cb:78:0c:d7:45:51:58:22:e0:8e:
         e3:6a:d4:1c:ae:fb:63:7d:de:3d:20:a5:c1:f8:40:a5:da:01:
         a1:dd:62:80:05:49:91:6e:ba:50:96:e9:31:3c:7a:6a:ab:56:
         05:4a:b1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:14 2024 by rpki-client on console-ams.rpki-client.org