Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa
File:                     3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa (raw, json)
Hash identifier:          ZZbfcAp+eWvx6SPlC7/DLHJPPcb5Gqh91Zh5zLrS5Yo=
Subject key identifier:   13:9B:37:1F:19:39:80:9F:30:3D:71:AF:89:B3:D1:76:98:CF:5E:A5
Certificate issuer:       /CN=0EEE5B3317779C65050CA66FEB8B4806D25713DF
Certificate serial:       704584E0E93EDBB9CC987F5CE8EE7ABD020D9579
Authority key identifier: 0E:EE:5B:33:17:77:9C:65:05:0C:A6:6F:EB:8B:48:06:D2:57:13:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa
Signing time:             Thu 04 Apr 2024 11:35:01 +0000
ROA not before:           Thu 04 Apr 2024 11:30:01 +0000
ROA not after:            Thu 03 Apr 2025 11:35:01 +0000
asID:                     263887
IP address blocks:        138.204.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.crl
                          rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:84:e0:e9:3e:db:b9:cc:98:7f:5c:e8:ee:7a:bd:02:0d:95:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EEE5B3317779C65050CA66FEB8B4806D25713DF
        Validity
            Not Before: Apr  4 11:30:01 2024 GMT
            Not After : Apr  3 11:35:01 2025 GMT
        Subject: CN=139B371F1939809F303D71AF89B3D17698CF5EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:ef:a1:70:72:a9:97:c7:51:fd:36:ef:30:
                    f2:48:0e:be:c3:76:2d:15:7e:41:7a:ff:ac:b6:d7:
                    6a:b6:69:ac:de:ae:6b:86:9c:ed:f2:7c:d0:b8:36:
                    59:61:f4:3a:5b:af:ab:81:11:9e:18:64:99:79:34:
                    07:d2:75:9f:19:8c:f2:89:96:6b:ac:2a:03:32:fa:
                    eb:7b:9e:b2:38:1c:87:d0:80:7d:4e:f6:12:d1:6d:
                    9a:0c:5d:0b:cb:b4:a8:92:4d:fe:49:48:02:48:04:
                    46:25:cf:2d:bb:b4:33:33:a8:ba:c8:8d:20:a9:f7:
                    5c:bb:b7:8d:d6:5c:2d:27:ca:b5:3f:7b:a6:07:5b:
                    2f:05:41:80:6e:4e:05:75:40:be:a8:72:bc:65:56:
                    6a:34:c2:86:e5:c2:80:42:f3:ea:83:ac:23:3c:d4:
                    c2:2b:e5:09:5d:b9:a3:64:ed:53:19:5a:2a:53:3d:
                    98:f9:21:4c:4a:c3:4c:d7:3f:a9:dc:21:df:35:08:
                    d9:e9:ae:81:16:83:88:64:f2:bb:d3:fe:c6:8a:7c:
                    3d:96:51:a5:f4:40:9d:7a:ca:c6:92:75:6c:19:61:
                    da:2f:62:8a:72:47:f0:4e:27:ba:d6:6f:62:5f:21:
                    db:43:c3:20:c7:3f:dc:7e:dd:23:a3:4e:0d:f0:32:
                    b9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9B:37:1F:19:39:80:9F:30:3D:71:AF:89:B3:D1:76:98:CF:5E:A5
            X509v3 Authority Key Identifier:
                keyid:0E:EE:5B:33:17:77:9C:65:05:0C:A6:6F:EB:8B:48:06:D2:57:13:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EEE5B3317779C65050CA66FEB8B4806D25713DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/1/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:02:07:35:d8:2b:45:1a:6a:27:08:ff:1b:41:99:62:8b:fc:
         cc:a7:a6:50:31:e8:88:6b:ae:3a:0d:de:79:f5:7f:13:11:d5:
         4d:cd:0e:bd:1c:91:0e:cb:5f:e4:b0:35:c6:58:fb:7a:5a:67:
         c4:9e:a2:ec:e8:3b:ad:31:9c:54:16:45:ba:a5:89:a9:74:07:
         47:53:aa:7a:d0:09:f1:4f:01:3d:26:d4:8f:cc:72:b0:4e:62:
         89:a4:3e:b1:96:39:ee:47:19:38:5a:b1:12:36:24:ac:02:b0:
         1c:10:4e:2b:dd:67:75:63:4d:46:db:a5:f3:58:a9:18:8f:fb:
         69:a4:a4:20:7d:c5:45:a7:66:79:10:2c:e1:21:65:67:3d:14:
         93:d7:56:df:16:6d:b7:f7:13:7f:da:a4:ac:18:fb:cf:19:7a:
         02:b8:1d:5a:25:b3:41:85:1f:8c:a2:ef:64:9f:05:8f:9b:72:
         e6:a4:7b:cf:17:2e:6f:25:20:03:ec:65:96:ad:6b:58:78:3b:
         e3:d2:04:26:55:4b:f6:1b:18:92:ed:7b:ab:73:a2:ff:19:b6:
         74:5c:d7:46:ec:b9:31:53:15:6e:6e:34:2f:86:6b:a8:e3:1f:
         bb:90:3b:df:3d:b6:e5:98:4e:a4:e6:63:06:4f:0b:3c:56:d1:
         83:4e:86:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:22:38 2024 by rpki-client on console-ams.rpki-client.org