Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa
File:                     3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa (raw, json)
Hash identifier:          DnnwdjID/9WrTrXGQKIKUdd7/KP/WmSHdONZISMSVzA=
Subject key identifier:   25:60:C3:61:BB:BB:15:B0:D6:27:4C:27:9F:22:30:BF:4D:58:A4:53
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       5706E5F7A6D7AC5AF255F6305C45AEB9E3C0281D
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa
Signing time:             Wed 03 Apr 2024 19:05:24 +0000
ROA not before:           Wed 03 Apr 2024 19:00:24 +0000
ROA not after:            Wed 02 Apr 2025 19:05:24 +0000
asID:                     263900
IP address blocks:        138.204.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:06:e5:f7:a6:d7:ac:5a:f2:55:f6:30:5c:45:ae:b9:e3:c0:28:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Apr  3 19:00:24 2024 GMT
            Not After : Apr  2 19:05:24 2025 GMT
        Subject: CN=2560C361BBBB15B0D6274C279F2230BF4D58A453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3b:58:07:d0:a3:f6:06:59:c4:8c:8f:aa:23:
                    63:48:6e:22:68:7c:29:7a:69:a9:05:26:b2:f6:9e:
                    c7:6e:5a:d4:c4:ed:f0:f3:78:b2:8d:be:8c:e4:02:
                    f3:c9:de:a5:6a:09:1a:84:a9:04:f8:2f:6e:2f:44:
                    d1:e2:29:9f:31:e6:1d:94:56:b7:8d:58:fe:5d:6f:
                    d0:8b:52:a1:61:ce:44:e9:c9:9e:f2:da:2c:9d:90:
                    f8:4e:37:f2:9d:3e:c8:c9:07:62:4b:4f:32:4d:63:
                    48:97:cc:22:82:2d:e1:7a:47:f2:e4:7f:f2:5c:90:
                    8a:8a:ae:27:fc:26:cf:47:7f:b5:5a:69:8c:c6:38:
                    e7:2b:1c:66:70:75:aa:d9:21:40:c9:50:cf:8a:33:
                    57:5a:21:d8:98:b3:b3:ca:e4:c9:74:e1:b9:bd:50:
                    37:58:bb:0a:7f:ee:89:69:0d:75:1e:5d:f9:15:f6:
                    9c:03:aa:83:d5:b6:3f:f2:41:8d:84:00:a9:d9:4b:
                    24:72:4d:35:01:b6:d8:37:96:b6:d6:11:9c:e1:3a:
                    31:28:fe:25:26:32:b3:84:93:6f:6f:01:90:32:4b:
                    9c:67:13:37:8c:e6:60:ff:80:8e:dc:71:4e:6d:96:
                    6d:a2:9e:ca:f9:0d:ca:20:8e:5a:66:c5:41:04:84:
                    3f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:60:C3:61:BB:BB:15:B0:D6:27:4C:27:9F:22:30:BF:4D:58:A4:53
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:c5:77:13:fb:52:06:53:00:f3:9c:ce:5c:87:b6:a8:8a:
         d8:f0:1b:ad:02:f3:c2:2c:c2:d2:cf:0a:54:b3:c2:47:a6:0a:
         62:8b:7f:32:66:85:49:2d:d8:4a:55:f8:32:93:13:70:d8:db:
         95:fa:9b:f7:0c:bc:47:7f:b8:cf:85:5a:e7:c4:19:35:21:2a:
         98:8c:1f:13:77:bd:34:74:4b:e5:49:05:d0:75:f2:b0:b2:80:
         e5:33:95:73:7d:e7:55:91:49:1c:ea:3b:6b:61:9e:53:20:fc:
         e0:4d:da:f2:35:62:bf:0f:86:fe:8a:20:a3:05:02:a1:2d:f3:
         41:2a:38:a5:f1:54:3c:72:fa:b2:4a:09:99:6f:4c:02:bc:98:
         a7:f4:37:64:25:0c:d2:33:f0:dd:83:58:be:ea:98:0e:24:45:
         06:31:79:f3:ca:9c:06:24:a5:08:2c:a8:49:b3:0e:f9:3a:83:
         04:5e:2b:fb:61:98:04:cb:d5:47:57:ed:03:2f:2a:60:0b:b9:
         eb:70:15:e5:e1:ff:ce:3b:a0:61:dd:4d:19:b7:79:c1:49:27:
         41:62:74:a3:3b:cd:12:2d:68:0f:a2:ce:1e:79:a2:ec:3c:a1:
         e7:73:17:a1:e9:c9:75:88:f2:ef:bd:99:9e:0f:c9:9c:24:95:
         23:92:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:52 2024 by rpki-client on console-fra.rpki-client.org