Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa
File:                     3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa (raw, json)
Hash identifier:          JA92KfaIpYYPKiaEEvConO977law3EjIrC6oYDaiD0U=
Subject key identifier:   1C:4D:A5:5C:29:D0:B1:B6:A1:51:9C:C7:53:05:29:1C:02:E1:C5:07
Certificate issuer:       /CN=A549402556B1273F8A3031E620C960AD6F9EF416
Certificate serial:       1A3F6C8905D03A646DAF723DC665958BE32D3B71
Authority key identifier: A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa
Signing time:             Wed 02 Oct 2024 15:02:48 +0000
ROA not before:           Wed 02 Oct 2024 14:57:48 +0000
ROA not after:            Wed 01 Oct 2025 15:02:48 +0000
asID:                     263887
IP address blocks:        138.204.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.crl
                          rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3f:6c:89:05:d0:3a:64:6d:af:72:3d:c6:65:95:8b:e3:2d:3b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A549402556B1273F8A3031E620C960AD6F9EF416
        Validity
            Not Before: Oct  2 14:57:48 2024 GMT
            Not After : Oct  1 15:02:48 2025 GMT
        Subject: CN=1C4DA55C29D0B1B6A1519CC75305291C02E1C507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:66:fb:57:55:3c:43:65:5b:e2:75:88:53:
                    10:8e:d2:41:46:01:69:14:3c:52:69:a2:31:7a:b0:
                    83:0c:59:df:68:ee:6e:96:36:10:68:3a:82:22:47:
                    40:ab:d7:bf:2c:3d:6d:ba:03:97:6d:a7:e1:83:51:
                    2f:b7:79:21:81:76:0f:24:c9:fc:b5:90:7a:d1:24:
                    19:50:b0:b4:6f:31:ab:9d:dc:16:24:b4:a9:3d:00:
                    34:32:d9:4d:3a:72:36:10:1b:d8:0f:81:a9:28:36:
                    29:42:06:5d:12:09:77:90:eb:f8:19:04:92:62:14:
                    dd:93:bd:a8:36:26:af:74:19:5b:2b:56:b9:b5:4d:
                    75:05:4f:9b:20:19:48:89:20:c9:ed:b2:76:cd:96:
                    5d:5c:74:36:7b:e6:48:1f:cc:2c:81:49:7c:6a:30:
                    f4:3d:f0:ef:ff:59:8e:cf:6d:f3:31:d4:45:06:8b:
                    92:77:66:82:9f:b3:69:b9:15:9a:31:4d:69:7b:97:
                    80:5d:1e:91:d9:a2:b0:82:50:fd:94:74:2b:8a:b8:
                    be:96:0d:42:82:2e:9d:55:b4:08:34:df:a0:6a:a7:
                    b1:85:7d:21:76:af:84:1b:3d:d3:cb:ed:ab:c3:1a:
                    d1:c7:4d:e5:27:03:24:1a:ce:8c:04:a9:80:f9:98:
                    3b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4D:A5:5C:29:D0:B1:B6:A1:51:9C:C7:53:05:29:1C:02:E1:C5:07
            X509v3 Authority Key Identifier:
                keyid:A5:49:40:25:56:B1:27:3F:8A:30:31:E6:20:C9:60:AD:6F:9E:F4:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/A549402556B1273F8A3031E620C960AD6F9EF416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A549402556B1273F8A3031E620C960AD6F9EF416.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3132392e302f32342d3234203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:2c:0a:be:0b:f1:11:3d:55:8f:2f:5f:05:99:e6:5d:54:c8:
         7b:98:b3:78:bc:3e:ac:c3:fc:9e:09:05:47:c4:c7:f0:4e:74:
         32:c8:2b:18:11:ca:af:a9:d0:19:c2:c8:71:06:96:0e:85:e7:
         d2:7b:5b:8e:41:31:c5:7e:24:e9:84:21:ad:77:0e:e1:13:da:
         2e:99:7f:f1:b4:40:19:8b:0a:07:c6:20:89:e7:70:61:2f:7a:
         86:15:07:74:44:3b:cc:f7:ff:19:09:67:58:25:7f:e8:ba:d2:
         46:cf:12:e2:c4:ce:c0:4a:5f:ec:43:2c:29:9d:e2:b0:e9:b9:
         91:bf:c6:1b:ff:10:5a:f1:7b:3c:71:4c:b0:01:69:d6:78:0d:
         8d:aa:e4:71:db:ea:8a:65:38:21:21:6f:db:0d:52:2b:9c:eb:
         35:47:d0:d5:6d:8b:d1:ba:cd:c4:04:8d:7f:86:5d:f9:1e:3d:
         24:2d:15:31:04:1f:16:3a:93:2a:6b:be:74:41:f8:f4:35:c3:
         4b:4c:53:86:bd:a9:e4:ea:c1:b7:d4:13:b7:3f:59:ce:13:28:
         16:65:f3:bb:f1:65:cd:c3:25:f1:88:16:0f:b0:dc:ad:f3:48:
         69:40:df:aa:bd:60:f7:b0:e1:4e:b8:de:fc:5e:88:23:82:68:
         fd:e7:a4:49
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGj9siQXQOmRtr3I9xmWVi+MtO3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU0OTQwMjU1NkIxMjczRjhBMzAzMUU2MjBDOTYwQUQ2
RjlFRjQxNjAeFw0yNDEwMDIxNDU3NDhaFw0yNTEwMDExNTAyNDhaMDMxMTAvBgNV
BAMTKDFDNERBNTVDMjlEMEIxQjZBMTUxOUNDNzUzMDUyOTFDMDJFMUM1MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjomb7V1U8Q2Vb4nWIUxCO0kFG
AWkUPFJpojF6sIMMWd9o7m6WNhBoOoIiR0Cr178sPW26A5dtp+GDUS+3eSGBdg8k
yfy1kHrRJBlQsLRvMaud3BYktKk9ADQy2U06cjYQG9gPgakoNilCBl0SCXeQ6/gZ
BJJiFN2Tvag2Jq90GVsrVrm1TXUFT5sgGUiJIMntsnbNll1cdDZ75kgfzCyBSXxq
MPQ98O//WY7PbfMx1EUGi5J3ZoKfs2m5FZoxTWl7l4BdHpHZorCCUP2UdCuKuL6W
DUKCLp1VtAg036Bqp7GFfSF2r4QbPdPL7avDGtHHTeUnAyQazowEqYD5mDuLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHE2lXCnQsbahUZzHUwUpHALhxQcwHwYDVR0j
BBgwFoAUpUlAJVaxJz+KMDHmIMlgrW+e9BYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlFLU3Rta1NFTUZzZGdiTFlIeHNWSkVhRmtmb1pFVkxSeTQ5eDNHb3dE
SDIvMC9BNTQ5NDAyNTU2QjEyNzNGOEEzMDMxRTYyMEM5NjBBRDZGOUVGNDE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NDk0MDI1NTZCMTI3M0Y4
QTMwMzFFNjIwQzk2MEFENkY5RUY0MTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZRS1N0bWtTRU1Gc2RnYkxZSHhzVkpFYUZrZm9aRVZMUnk0OXgzR293REgyLzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM4MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMgTANBgkqhkiG9w0BAQsFAAOCAQEAoSwK
vgvxET1Vjy9fBZnmXVTIe5izeLw+rMP8ngkFR8TH8E50MsgrGBHKr6nQGcLIcQaW
DoXn0ntbjkExxX4k6YQhrXcO4RPaLpl/8bRAGYsKB8YgiedwYS96hhUHdEQ7zPf/
GQlnWCV/6LrSRs8S4sTOwEpf7EMsKZ3isOm5kb/GG/8QWvF7PHFMsAFp1ngNjark
cdvqimU4ISFv2w1SK5zrNUfQ1W2L0brNxASNf4Zd+R49JC0VMQQfFjqTKmu+dEH4
9DXDS0xThr2p5OrBt9QTtz9ZzhMoFmXzu/FlzcMl8YgWD7DcrfNIaUDfqr1g97Dh
Trje/F6II4Jo/eekSQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:46 2024 by rpki-client on console-fra.rpki-client.org