Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa
File:                     3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa (raw, json)
Hash identifier:          cVseFBGwjhgpzYJFXL+zxnOEtzX1vSRCTahUzk8CluM=
Subject key identifier:   F2:03:E7:72:4E:45:CD:49:79:F0:3B:45:7E:12:13:6D:7B:10:63:8D
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       2045B85E1883ABD1A6F18B2C3963C8895B02FE09
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa
Signing time:             Wed 03 Apr 2024 19:05:24 +0000
ROA not before:           Wed 03 Apr 2024 19:00:24 +0000
ROA not after:            Wed 02 Apr 2025 19:05:24 +0000
asID:                     263900
IP address blocks:        138.204.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:45:b8:5e:18:83:ab:d1:a6:f1:8b:2c:39:63:c8:89:5b:02:fe:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Apr  3 19:00:24 2024 GMT
            Not After : Apr  2 19:05:24 2025 GMT
        Subject: CN=F203E7724E45CD4979F03B457E12136D7B10638D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c7:7c:ae:61:40:0d:dc:62:b2:7d:dc:ac:ed:
                    08:74:ef:79:17:4f:2c:86:2c:b5:f7:e2:1e:8d:c5:
                    6c:56:5c:7b:19:04:57:0c:7b:34:d9:e1:a2:7d:ab:
                    0c:9e:e4:56:08:36:26:6c:69:2b:1e:18:f2:2d:cb:
                    6a:7b:e9:73:05:f5:82:c2:f6:a6:a9:22:32:97:f4:
                    1a:20:27:ab:09:fe:e3:82:77:50:bc:f6:09:6b:e6:
                    a2:2d:80:a0:95:a7:a6:d7:b1:81:16:2b:c8:b3:f6:
                    b9:78:95:2e:77:bb:37:a0:d5:26:d6:2a:46:1d:c4:
                    25:4a:de:4e:80:60:34:16:aa:36:b1:52:aa:c6:ad:
                    a9:a7:39:10:99:3f:18:69:18:ed:da:97:27:20:f7:
                    60:ae:f2:3a:35:c4:0f:83:b4:1c:38:e3:44:d4:d7:
                    d5:89:d3:c7:f0:5c:ed:29:47:1a:9d:18:4a:0e:1c:
                    60:68:59:e8:23:a2:44:a7:6c:80:0f:e3:28:9e:f0:
                    f1:5d:ab:7a:e2:02:db:94:a4:61:57:4a:af:3d:49:
                    0a:0e:a9:d2:b9:92:4f:94:a5:14:ce:26:9f:82:c9:
                    63:41:ac:81:6d:49:1e:fd:ef:b2:b2:69:98:cd:c9:
                    f8:77:77:0d:46:ed:b7:a0:cf:75:bc:4b:a4:c8:f1:
                    37:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:03:E7:72:4E:45:CD:49:79:F0:3B:45:7E:12:13:6D:7B:10:63:8D
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:5b:3e:54:59:fc:3c:92:65:e5:ad:5b:75:9c:3a:63:99:
         2a:d2:5a:84:cd:a8:4d:34:9b:1d:99:c9:88:71:77:4f:f4:48:
         d8:a7:fe:01:b9:98:f7:c7:05:84:2f:fc:bb:77:31:49:e9:79:
         58:ec:5b:e0:59:b8:27:98:21:a7:b3:09:85:91:bf:88:b9:73:
         7e:fa:d7:6b:cb:6c:3e:82:be:95:5c:77:7c:25:6a:40:6b:30:
         f3:33:c0:a8:ed:28:9c:47:b8:76:69:32:ff:48:50:9c:af:f6:
         14:40:49:5a:c3:1c:e5:a1:c3:30:6b:ee:b4:fc:73:6e:e8:ab:
         39:df:f3:b4:21:ce:e9:fd:ac:08:67:2b:df:21:bd:81:0d:7f:
         3b:b7:97:ca:07:a9:b6:1e:9c:41:59:65:18:6f:9e:66:18:3e:
         8e:8a:92:69:9f:e9:d2:03:63:56:7a:75:60:a5:28:d4:2f:11:
         d6:ee:b4:d9:53:84:bf:ec:0f:13:86:27:00:60:9e:f6:58:6a:
         ec:c9:bc:df:09:93:76:92:ac:fb:a0:ff:c3:9e:e0:41:63:bf:
         f0:85:ef:79:85:93:ca:e6:be:62:8b:9d:22:b7:87:39:bf:3b:
         f8:15:46:06:4a:fb:ca:9b:84:e5:51:f6:41:08:16:37:1d:e8:
         38:64:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:52 2024 by rpki-client on console-fra.rpki-client.org