Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa
File:                     3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa (raw, json)
Hash identifier:          MdX82uh59wSkttklaMvSQZ/f0xkJ/L3mknkDC9e0ixY=
Subject key identifier:   05:9E:4F:72:20:16:EB:CC:97:21:1A:61:F3:54:CE:21:9A:D1:58:83
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       2BBADCDA014A0C628C68EBD8BA4372F604FAECD8
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa
Signing time:             Mon 30 Sep 2024 13:27:30 +0000
ROA not before:           Mon 30 Sep 2024 13:22:30 +0000
ROA not after:            Mon 29 Sep 2025 13:27:30 +0000
asID:                     263907
IP address blocks:        138.204.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ba:dc:da:01:4a:0c:62:8c:68:eb:d8:ba:43:72:f6:04:fa:ec:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Sep 30 13:22:30 2024 GMT
            Not After : Sep 29 13:27:30 2025 GMT
        Subject: CN=059E4F722016EBCC97211A61F354CE219AD15883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:ee:f8:1c:c3:47:4c:fe:ff:4d:28:6a:05:
                    b5:dd:6a:54:0f:e4:98:a2:d4:e7:c0:7b:52:91:75:
                    fe:cf:d0:91:a3:ba:93:e9:71:56:61:02:7d:33:ed:
                    15:60:fa:8c:6f:95:57:5b:7e:cb:61:a7:5c:51:d0:
                    fd:88:28:f7:0d:c5:52:a1:de:96:09:41:1d:92:14:
                    98:eb:e2:f2:5c:02:25:44:90:62:b1:72:e6:1e:e1:
                    54:44:44:ea:2b:a9:83:0b:4f:90:de:e5:59:c9:d3:
                    d4:8d:50:f6:fd:03:2c:fe:40:ac:e9:03:5a:b6:2e:
                    37:52:f7:82:b6:58:30:b7:49:d3:74:e9:0d:c7:74:
                    e5:ce:b0:4f:ec:be:c1:f3:7c:7d:c6:33:6f:e1:fd:
                    33:a7:2b:9d:db:d8:4c:78:23:13:67:41:1c:4b:d5:
                    bc:67:54:00:7e:18:e2:dd:35:86:5d:6e:3a:33:d9:
                    01:5c:b3:4b:2c:86:f5:45:cf:76:1e:76:33:37:db:
                    93:33:10:fc:42:6a:2a:0f:d3:db:a4:61:45:ab:4c:
                    a2:a7:0c:45:d2:78:0d:1f:7e:19:ad:03:f8:d8:d7:
                    17:3c:6b:3e:8b:7b:4c:8d:1e:0d:15:aa:93:b8:6a:
                    db:32:5d:25:ff:31:cd:64:7c:fb:d2:03:53:13:dc:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9E:4F:72:20:16:EB:CC:97:21:1A:61:F3:54:CE:21:9A:D1:58:83
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32332d3233203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:e7:09:60:68:53:a6:1a:34:d3:d8:fe:57:de:44:a1:e1:
         42:4f:e1:f5:31:84:45:9c:cb:53:a2:bf:31:1c:1d:1c:cd:34:
         27:b5:fc:fc:4f:4b:b2:a9:84:56:8c:8c:35:93:79:bf:4d:90:
         21:84:b3:14:57:f2:5a:a2:b0:00:1d:2b:5e:92:4f:37:a2:f0:
         bd:a8:9a:20:57:64:5d:7b:09:48:11:68:2d:0c:9f:f8:c8:23:
         02:3b:ee:0a:02:54:c0:e3:75:30:ff:0b:92:bf:73:18:bf:99:
         34:5b:c4:a0:46:5e:f8:54:0a:14:10:32:fa:5a:f0:ee:8e:a8:
         36:17:8b:72:fb:23:08:3c:13:be:95:0a:3d:22:12:31:91:59:
         a9:30:f8:e7:da:3a:29:ee:4a:eb:32:91:40:9f:57:95:ac:d1:
         36:12:b6:d0:76:70:b6:44:e4:b8:55:3f:fe:53:58:a3:25:01:
         63:e5:18:c8:3e:61:f3:07:f5:49:82:29:37:0e:25:0c:45:a8:
         25:d4:88:0a:95:bc:68:68:55:5c:a8:c8:e3:b7:bb:73:af:69:
         4e:59:f1:9a:8c:ff:9e:3c:23:6c:ab:96:8e:f2:26:1f:36:d7:
         58:fc:3c:a3:7a:cd:dd:c0:9a:ac:d5:d4:d6:41:b1:20:9a:57:
         7d:27:dd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:11 2024 by rpki-client on console-fra.rpki-client.org