Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa
File:                     3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa (raw, json)
Hash identifier:          jvJ+6Kx3/GEDFrzthTaLy0TArSmyFVqmaFaCln7s8dc=
Subject key identifier:   50:09:1B:45:27:9C:28:96:7D:F6:C1:CF:00:B6:5F:B5:18:40:1F:E8
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       1234DE05F77DC13C473A71FB8E0078F1298E873E
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa
Signing time:             Wed 03 Apr 2024 19:05:24 +0000
ROA not before:           Wed 03 Apr 2024 19:00:24 +0000
ROA not after:            Wed 02 Apr 2025 19:05:24 +0000
asID:                     263900
IP address blocks:        138.204.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:34:de:05:f7:7d:c1:3c:47:3a:71:fb:8e:00:78:f1:29:8e:87:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Apr  3 19:00:24 2024 GMT
            Not After : Apr  2 19:05:24 2025 GMT
        Subject: CN=50091B45279C28967DF6C1CF00B65FB518401FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:4b:71:9a:b6:04:9f:11:1d:e2:80:50:0a:
                    ba:5a:a7:cb:c4:6e:72:b6:35:db:13:34:70:f0:5c:
                    8a:21:15:98:a2:ad:1a:18:f2:73:95:86:d5:79:2a:
                    5b:ef:1a:fc:f1:1d:07:c2:43:ac:ed:49:99:e8:20:
                    ab:ed:dd:13:3e:2a:3b:32:8a:e0:8c:ad:20:00:47:
                    13:2a:65:2c:08:7b:28:2e:11:43:f2:ec:01:62:48:
                    66:a7:91:94:a6:60:be:9f:3e:ae:cc:b3:5f:2e:89:
                    ca:8b:a4:c9:a1:51:87:d5:09:c8:c7:c1:7d:b3:f0:
                    fa:3d:d5:71:1e:f8:37:cb:f6:83:95:ed:4a:44:3b:
                    2b:d2:9c:22:68:72:31:95:58:85:c6:6e:f2:ae:f0:
                    93:8d:9b:0a:eb:2e:22:46:4f:0a:62:3e:20:20:4b:
                    35:2b:14:10:ab:cd:46:86:f0:22:4e:f2:46:bb:6d:
                    0c:41:58:6d:3d:fb:3c:e6:68:17:ae:6d:19:3a:aa:
                    ed:90:b6:be:95:ee:4a:cf:7d:e8:7c:1c:8a:57:a5:
                    7a:c3:04:e2:16:87:0d:4e:3d:3a:18:db:a1:3b:90:
                    9c:29:7e:92:a0:49:12:ec:db:28:71:cf:e1:eb:66:
                    24:47:65:0a:f3:27:a4:05:88:7a:33:3a:37:bc:25:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:09:1B:45:27:9C:28:96:7D:F6:C1:CF:00:B6:5F:B5:18:40:1F:E8
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:73:2f:5e:e8:70:01:72:83:57:34:ac:e0:e1:bc:d5:1b:1d:
         71:11:2b:cb:1a:ab:36:ad:35:a0:6d:23:4a:09:0e:cc:43:14:
         a8:64:8a:11:e8:5f:40:89:31:84:12:6f:c2:52:6c:56:c1:00:
         cd:21:1f:74:b7:02:4b:68:a5:86:a7:7f:a2:ea:e6:36:eb:00:
         19:a4:65:48:a2:e3:cb:cb:2f:c0:94:09:ff:fe:02:fe:d2:70:
         45:d1:b8:45:e6:0e:6a:06:1b:a0:6b:54:46:be:ce:46:e4:7a:
         67:54:50:4a:c5:ea:6d:0a:a0:81:37:6e:66:63:4f:a3:a0:b5:
         ba:c2:29:96:8a:de:77:e3:ac:4f:20:b3:30:d1:bd:20:cd:5a:
         3c:36:11:67:c5:ed:4f:b3:7b:1b:2f:e9:7a:0d:e8:58:cc:da:
         00:c7:f1:9d:ba:29:a9:51:41:2d:ee:b0:1d:c1:24:85:e4:52:
         91:5a:60:24:fc:5c:47:2e:65:76:fc:db:11:01:60:b3:f0:e1:
         98:b5:93:7f:21:01:be:d3:a8:3a:d6:72:24:c3:a7:ed:19:0d:
         7b:5f:07:f7:30:dc:fe:f4:9f:25:75:76:d3:31:06:1a:7e:99:
         be:dc:e9:0c:9a:a9:d6:76:ec:8e:52:53:db:fb:55:e6:ba:78:
         0b:c3:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:52 2024 by rpki-client on console-fra.rpki-client.org