Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138352e302f32342d3234203d3e20323633393037.roa
File:                     3133382e3230342e3138352e302f32342d3234203d3e20323633393037.roa (raw, json)
Hash identifier:          AkhnbE4OMrNlvaIsB1hnFhdIMXpNqnQV4X+lqG5d/m0=
Subject key identifier:   DE:2B:06:5C:10:53:67:98:2F:07:D9:45:F2:A7:11:A5:D7:29:55:B8
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       2FAA447F1FD2BE04D566EB40F321CDA1FB8B9453
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138352e302f32342d3234203d3e20323633393037.roa
Signing time:             Mon 30 Sep 2024 13:27:26 +0000
ROA not before:           Mon 30 Sep 2024 13:22:26 +0000
ROA not after:            Mon 29 Sep 2025 13:27:26 +0000
asID:                     263907
IP address blocks:        138.204.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:aa:44:7f:1f:d2:be:04:d5:66:eb:40:f3:21:cd:a1:fb:8b:94:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Sep 30 13:22:26 2024 GMT
            Not After : Sep 29 13:27:26 2025 GMT
        Subject: CN=DE2B065C105367982F07D945F2A711A5D72955B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:f7:a9:fc:39:3c:1a:4f:48:4a:b1:78:c4:
                    d6:8d:e9:85:74:28:8c:42:1c:ee:fe:5b:19:7b:ac:
                    75:f0:36:bd:4a:03:d9:f0:b2:91:92:8e:ba:bc:a6:
                    85:30:12:7b:2e:43:da:74:92:d3:3a:2c:89:73:5a:
                    55:ea:59:fe:eb:d7:e0:f9:6e:18:83:24:7f:fb:e7:
                    ab:b9:a9:a6:ad:d1:0a:19:70:4f:a6:25:38:d8:f0:
                    80:7c:a6:a0:17:0e:45:d7:67:ff:90:e9:ab:48:d0:
                    cc:f5:15:de:4d:14:f0:cf:4c:8c:65:f8:38:fe:f3:
                    88:c4:df:6f:47:d6:0c:e0:2c:f6:7b:fb:c2:c0:48:
                    30:d5:35:fe:b3:d1:82:68:3a:41:8c:b1:21:cd:38:
                    37:b0:d1:04:b6:35:14:81:55:b6:3e:b3:e5:da:5f:
                    48:21:4c:2a:8c:84:ef:04:78:d8:bf:e6:a6:77:f7:
                    70:06:b7:fd:44:36:2d:eb:ce:f3:73:a5:59:57:59:
                    d2:6d:11:0f:34:56:07:9b:44:f5:ff:aa:cb:5a:64:
                    bf:8a:b9:44:9b:58:e8:ca:c8:4d:2b:de:f3:ae:31:
                    ca:42:a7:f4:4e:55:c9:39:92:2c:2f:61:ce:4c:4e:
                    da:b1:a9:4f:27:45:db:8f:8d:9c:2a:11:d3:08:fb:
                    c4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2B:06:5C:10:53:67:98:2F:07:D9:45:F2:A7:11:A5:D7:29:55:B8
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138352e302f32342d3234203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:dc:49:51:d0:83:a7:be:5b:1f:41:4e:ab:95:31:a6:6a:96:
         e5:f5:a0:e4:90:20:17:14:5c:bf:4b:41:0f:5a:eb:13:7b:47:
         da:a4:d7:b8:08:dd:0e:85:11:d1:54:eb:a9:99:90:0c:40:5f:
         7b:b4:fd:29:df:ca:e6:e3:d6:67:29:b4:e7:14:45:cb:0e:e9:
         56:99:66:7d:79:be:6f:cb:7d:b7:09:29:80:69:e1:ff:b4:14:
         27:9e:99:63:bc:9c:8f:bc:ba:bb:dd:10:d1:72:e9:26:32:56:
         bc:11:c8:50:8e:27:db:38:a4:4a:25:fb:67:08:ec:34:58:51:
         2e:0f:85:bb:94:2f:bc:da:14:8d:5e:e2:92:fa:81:90:1d:05:
         f3:b9:31:fc:31:6a:de:1f:86:16:92:2b:e1:ff:be:7b:88:fb:
         fc:79:14:64:42:e3:bd:20:a0:f7:ff:77:be:f0:7c:31:a8:76:
         42:af:89:f9:c4:13:4e:de:b8:7a:2d:96:5f:7e:44:a0:56:4a:
         77:2a:41:09:17:8b:48:73:28:31:9b:f0:54:94:da:96:e4:cb:
         a0:08:67:ea:5e:36:07:58:dc:cc:eb:a4:31:af:81:fc:f7:59:
         df:61:41:43:5e:19:04:ad:01:1b:de:b7:d7:31:b8:2a:e5:02:
         6e:d7:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:34 2024 by rpki-client on console-ams.rpki-client.org