Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/3133382e35392e3133362e302f32322d3234203d3e20323730393934.roa
File:                     3133382e35392e3133362e302f32322d3234203d3e20323730393934.roa (raw, json)
Hash identifier:          ZZj9q15dlGBIVIud44BFv7Gc4nDExlUlv34MVIywU0Q=
Subject key identifier:   CE:10:F9:5A:B8:B1:1B:C7:35:B4:97:AB:07:E8:0D:1E:5F:64:58:11
Certificate issuer:       /CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF
Certificate serial:       10C7B0AB133EB9D25D8F260D4F3894083A1EDBE3
Authority key identifier: B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/3133382e35392e3133362e302f32322d3234203d3e20323730393934.roa
Signing time:             Wed 03 Apr 2024 18:32:36 +0000
ROA not before:           Wed 03 Apr 2024 18:27:36 +0000
ROA not after:            Wed 02 Apr 2025 18:32:36 +0000
asID:                     270994
IP address blocks:        138.59.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl
                          rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c7:b0:ab:13:3e:b9:d2:5d:8f:26:0d:4f:38:94:08:3a:1e:db:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D046D14FE7B77F62DE896EBF0A815413A589BF
        Validity
            Not Before: Apr  3 18:27:36 2024 GMT
            Not After : Apr  2 18:32:36 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:a4:27:7f:87:1e:95:4b:b7:8f:24:ba:ec:
                    f7:d5:4b:4b:c9:57:7c:1c:21:1a:25:b5:dc:5c:a4:
                    43:71:cf:00:b7:d9:a8:56:57:bb:31:fd:8a:3e:df:
                    48:46:ad:26:51:24:af:e0:54:25:0c:21:15:7e:e0:
                    00:11:0d:c4:8b:95:91:e1:e9:e6:f7:67:88:38:34:
                    64:78:74:bf:e4:ee:87:cd:73:a9:1e:5c:16:e6:b6:
                    5a:46:1f:bd:e5:4d:36:59:4a:31:7b:95:91:03:cd:
                    4b:17:5f:a6:43:64:68:57:b4:d1:7e:eb:6b:ff:f2:
                    e0:cf:5e:ee:c3:f3:6b:52:8d:24:16:2f:0b:51:c1:
                    ab:5f:cc:21:db:92:4b:91:1b:06:15:a4:54:8f:e8:
                    f7:2d:4b:a6:56:3d:ce:2d:2a:df:16:bd:f9:9c:e8:
                    c4:ba:4e:d1:12:15:8b:07:f4:ce:cd:32:51:d8:94:
                    61:fc:e1:10:66:cf:f7:1e:34:04:ba:17:9d:94:4d:
                    bb:4c:9c:d5:d3:1e:b6:28:ec:e5:84:47:17:79:78:
                    d9:cd:36:f8:40:a2:08:3c:14:cd:cc:e8:4a:9a:fb:
                    98:45:61:96:f4:8f:5e:38:e8:18:bb:ff:97:cb:58:
                    d7:2c:f1:c5:2c:d7:0f:e4:61:4d:a7:ad:34:32:ee:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:10:F9:5A:B8:B1:1B:C7:35:B4:97:AB:07:E8:0D:1E:5F:64:58:11
            X509v3 Authority Key Identifier:
                keyid:B2:D0:46:D1:4F:E7:B7:7F:62:DE:89:6E:BF:0A:81:54:13:A5:89:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D046D14FE7B77F62DE896EBF0A815413A589BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/1/3133382e35392e3133362e302f32322d3234203d3e20323730393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:7d:92:30:d5:4f:a3:20:a7:17:5a:b8:f0:4b:ea:e4:8b:a9:
         e9:a1:61:58:46:58:82:4b:57:dc:5f:f9:57:76:cc:74:af:83:
         54:d7:84:9d:41:d2:06:9c:4c:96:59:0f:2d:d3:55:81:63:3a:
         ee:89:29:a0:9b:b0:b7:67:bc:88:f0:9a:d0:2c:f2:60:1c:8d:
         a4:7f:d2:f4:cc:30:d7:ff:33:18:a9:4d:a4:ee:18:b5:c6:ae:
         94:3f:77:e1:32:4c:3c:f8:6c:5e:f8:63:37:be:ec:df:e9:d8:
         fd:c6:c7:81:a5:33:57:4f:a2:00:6a:36:58:88:eb:b3:3a:b0:
         2d:e7:a3:73:0f:eb:b3:27:d5:c5:1e:a1:e6:e2:9b:b9:8f:1a:
         13:09:9c:3a:66:b3:47:5f:52:d9:85:65:01:b9:67:84:5c:4e:
         b2:0b:22:3f:df:a7:56:27:8a:61:37:bb:b2:38:74:eb:31:e0:
         5b:ab:0a:63:45:77:fb:df:65:11:be:cf:89:88:f3:25:8d:15:
         eb:4e:fa:c0:15:03:95:52:ee:58:0b:1f:4d:e7:35:fd:9d:61:
         93:ff:16:72:93:03:47:9a:10:c1:d3:c2:76:af:f3:09:d3:cb:
         42:af:a2:dc:0d:35:ea:be:93:83:85:2e:7b:f2:e8:90:02:5c:
         ec:9f:e6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:51:19 2024 by rpki-client on console-fra.rpki-client.org