Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132382e302f32342d3234203d3e20323633383837.roa
File:                     3133382e3230342e3132382e302f32342d3234203d3e20323633383837.roa (raw, json)
Hash identifier:          KpeblOUST+V7o1VLVuGhv6pEuE/Z7uVQYP6/n3Dg7fE=
Subject key identifier:   36:F0:D5:42:AF:66:E3:C3:D7:D9:D2:56:60:91:1E:A0:72:60:1F:F3
Certificate issuer:       /CN=A549402556B1273F8A3031E620C960AD6F9EF416
Certificate serial:       57F2B01CCC3C2EBECCD32FDB10E303878BA142A2
Authority key identifier: A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132382e302f32342d3234203d3e20323633383837.roa
Signing time:             Wed 02 Oct 2024 15:02:48 +0000
ROA not before:           Wed 02 Oct 2024 14:57:48 +0000
ROA not after:            Wed 01 Oct 2025 15:02:48 +0000
asID:                     263887
IP address blocks:        138.204.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.crl
                          rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f2:b0:1c:cc:3c:2e:be:cc:d3:2f:db:10:e3:03:87:8b:a1:42:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A549402556B1273F8A3031E620C960AD6F9EF416
        Validity
            Not Before: Oct  2 14:57:48 2024 GMT
            Not After : Oct  1 15:02:48 2025 GMT
        Subject: CN=36F0D542AF66E3C3D7D9D25660911EA072601FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:f5:b0:d7:7c:a8:f0:ad:e8:da:bd:4c:af:
                    f1:ff:e3:96:c9:bf:54:f5:45:f8:08:1c:be:22:a5:
                    c9:d9:a4:4d:aa:b1:c6:13:74:f6:35:1a:32:17:8f:
                    b9:35:a9:d3:32:f0:5f:29:a8:3d:01:70:59:ad:ae:
                    cf:6d:ad:69:8e:ad:c3:6c:61:e7:5d:1b:04:76:e3:
                    06:89:86:b9:47:28:cd:4b:f0:9c:58:18:d3:bb:d8:
                    20:5f:f3:dd:d9:95:59:be:02:9f:0c:fb:c6:fd:53:
                    52:c7:60:b8:0f:51:dc:a9:1f:18:e8:41:ad:b1:f1:
                    fc:cd:17:6a:6a:95:f8:f8:68:d7:2d:7f:55:49:a0:
                    a9:0a:72:cb:7c:40:e0:89:e9:c5:de:c2:00:84:6f:
                    5a:2e:b2:d3:5d:af:c2:5e:ac:27:97:f2:18:7c:cd:
                    18:fa:87:62:3f:f3:85:98:2e:b2:86:8e:7b:f4:f7:
                    62:fc:d9:1d:f7:73:10:39:0e:ff:b9:b2:6e:bf:b9:
                    94:4e:0a:35:c1:22:45:e7:61:cb:db:3a:f9:8e:70:
                    e9:82:cd:e3:94:e1:a6:99:f2:56:7d:52:be:bc:0a:
                    bd:ac:6f:92:95:f4:c0:44:71:b9:eb:94:68:a0:78:
                    94:a6:30:31:78:02:f0:0f:f4:75:79:0b:28:f3:e7:
                    c2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F0:D5:42:AF:66:E3:C3:D7:D9:D2:56:60:91:1E:A0:72:60:1F:F3
            X509v3 Authority Key Identifier:
                keyid:A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132382e302f32342d3234203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:fc:40:ec:af:27:9a:17:c5:94:9c:04:fe:4a:31:64:80:d4:
         ac:bd:65:f4:7f:09:d0:45:48:fd:83:42:b2:b2:9e:51:06:ab:
         b5:8a:63:8e:db:28:29:f8:8e:ba:3f:d8:e8:83:67:af:8f:d9:
         1e:c4:0f:e7:28:38:74:c6:fa:4f:dd:55:bd:0e:4c:15:2e:7f:
         ee:c8:13:bc:b6:06:fe:d8:0c:37:cc:4f:fb:50:94:1a:8d:50:
         ed:8e:e7:dc:15:c3:9c:99:f7:43:0a:c1:56:a2:00:11:6b:78:
         41:69:bf:07:75:e2:31:fc:de:12:09:ec:4e:33:be:93:28:57:
         a0:9a:a3:07:73:4f:c6:12:1c:72:3c:3c:aa:6a:ed:b1:b4:27:
         73:7a:ff:3f:e4:94:88:2c:98:c3:bc:ce:b3:47:c0:c2:60:68:
         e6:9f:1e:95:1b:bb:92:52:0a:e3:16:0a:03:1c:c3:46:25:6c:
         6d:f0:28:2e:71:89:d6:33:80:90:05:5b:46:2e:fe:2c:a6:e1:
         77:84:ac:f6:0a:dc:b1:18:7b:c6:cf:96:40:49:fd:78:2b:ef:
         c8:1a:7a:9c:95:f1:c9:2f:7f:d4:7c:40:9a:71:dd:df:54:c8:
         48:35:83:aa:22:da:0a:99:cf:f9:ac:0f:96:fd:c6:c9:27:d8:
         31:d1:e4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:26 2024 by rpki-client on console-ams.rpki-client.org