Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135312e302f32342d3234203d3e20323633393030.roa
File:                     3133382e3230342e3135312e302f32342d3234203d3e20323633393030.roa (raw, json)
Hash identifier:          crlpI2e3wwPRpH1Z0DTA2ZppeiuJfCqjxwQd3m9n0VU=
Subject key identifier:   CD:43:08:DD:86:87:39:C4:D6:15:24:D2:F5:96:34:DD:4A:70:BF:41
Certificate issuer:       /CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
Certificate serial:       6B15EFE02CC2AC14F4023C1457201CCFA82A8D18
Authority key identifier: D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135312e302f32342d3234203d3e20323633393030.roa
Signing time:             Wed 03 Apr 2024 19:05:24 +0000
ROA not before:           Wed 03 Apr 2024 19:00:24 +0000
ROA not after:            Wed 02 Apr 2025 19:05:24 +0000
asID:                     263900
IP address blocks:        138.204.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl
                          rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:15:ef:e0:2c:c2:ac:14:f4:02:3c:14:57:20:1c:cf:a8:2a:8d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D108A6A498B3839B4F3F805ACCAE934F8CF79D90
        Validity
            Not Before: Apr  3 19:00:24 2024 GMT
            Not After : Apr  2 19:05:24 2025 GMT
        Subject: CN=CD4308DD868739C4D61524D2F59634DD4A70BF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:58:d1:a5:f9:87:b7:a2:c0:01:05:b3:c7:
                    51:24:a5:6c:aa:ef:54:11:21:89:b7:ea:ea:bf:d0:
                    0b:4a:b9:78:14:1e:fe:ce:64:d4:9d:44:be:b5:97:
                    86:f8:1a:61:39:9a:3b:f3:c6:7d:32:e2:8a:cc:b9:
                    65:ef:4a:02:86:fd:d5:ee:6b:86:31:e6:34:16:ad:
                    da:63:13:2f:b9:ed:17:9b:15:fb:d8:a0:b8:4a:72:
                    3d:81:3b:95:46:5c:1e:a6:e1:25:2d:be:6f:66:a6:
                    ff:d4:1e:ae:f5:7b:68:30:56:62:b9:d7:9b:22:55:
                    58:25:4c:11:81:c7:71:ec:46:4c:a5:5d:57:bf:43:
                    5e:50:4e:01:76:a4:96:5a:c5:58:46:10:07:1b:42:
                    51:04:0e:2e:5a:05:e7:83:96:52:18:90:26:76:80:
                    44:c4:c0:43:c6:dc:23:e5:a0:72:4a:23:ce:7b:6e:
                    79:3a:42:77:09:97:b7:dc:8c:be:88:77:b8:84:f5:
                    94:9e:3c:27:8a:7f:f3:3a:65:0e:a3:1f:6b:8b:fa:
                    81:52:0d:a2:7d:e3:2c:9d:89:2b:6f:aa:da:9a:e5:
                    64:83:e7:99:da:03:13:37:16:df:13:b0:36:95:6c:
                    33:18:9d:6e:14:27:e2:7d:a6:82:aa:50:ab:99:c0:
                    c5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:43:08:DD:86:87:39:C4:D6:15:24:D2:F5:96:34:DD:4A:70:BF:41
            X509v3 Authority Key Identifier:
                keyid:D1:08:A6:A4:98:B3:83:9B:4F:3F:80:5A:CC:AE:93:4F:8C:F7:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D108A6A498B3839B4F3F805ACCAE934F8CF79D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/2/3133382e3230342e3135312e302f32342d3234203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:39:33:09:d0:fe:d7:4d:fe:fe:88:f1:43:e8:fb:de:30:0c:
         86:f9:2c:54:f3:73:e7:a0:d2:23:6a:bc:b4:b6:50:98:6d:c2:
         b6:b4:3b:68:b9:44:5a:94:a3:41:84:88:ed:bf:64:9c:45:16:
         7e:34:25:97:85:62:11:cc:98:2a:34:a0:3a:6f:78:c4:50:51:
         af:cd:0c:d0:b4:5c:f1:f8:c4:b7:f1:86:b2:c9:cf:43:03:bd:
         fa:5a:c0:0f:c1:84:8a:f5:c4:34:47:52:ef:0f:b1:aa:52:da:
         c7:f1:52:07:7f:7b:9c:69:8d:4e:66:cd:8f:1c:0a:a2:83:90:
         c2:38:ba:ea:fa:17:90:76:9e:25:fe:33:ca:9d:ee:bf:55:91:
         df:cb:28:d3:77:5a:8b:5f:3a:e4:be:61:58:1c:ca:89:ea:7d:
         8e:ab:52:04:4f:e6:b4:15:25:27:ad:dc:88:54:a4:f1:a0:86:
         cb:7c:4b:e6:fb:9b:16:df:05:e8:56:2f:a4:8e:db:d3:43:aa:
         ce:d6:71:3d:37:6a:8d:3a:6d:2f:72:53:16:32:ca:e4:97:0d:
         c6:02:6c:24:66:0b:96:ab:9a:69:86:98:b6:4d:02:33:5b:98:
         d7:6b:85:d4:50:f9:a7:0a:ec:04:47:6a:14:19:b6:39:2c:c9:
         c1:f2:44:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:42 2024 by rpki-client on console-ams.rpki-client.org