Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32342d3234203d3e20323633393037.roa
File:                     3133382e3230342e3138362e302f32342d3234203d3e20323633393037.roa (raw, json)
Hash identifier:          GFW2TrqgB55pnzx/7KvX4L4Y/osZXQcBo3RnqloCWQA=
Subject key identifier:   0A:2B:5B:E3:91:4A:23:F7:3B:C1:1C:2F:BB:66:C5:95:F7:97:97:97
Certificate issuer:       /CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
Certificate serial:       43C940818A26593E4D843971C7EEB11CFD7E715A
Authority key identifier: F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32342d3234203d3e20323633393037.roa
Signing time:             Mon 30 Sep 2024 13:27:23 +0000
ROA not before:           Mon 30 Sep 2024 13:22:23 +0000
ROA not after:            Mon 29 Sep 2025 13:27:23 +0000
asID:                     263907
IP address blocks:        138.204.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl
                          rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c9:40:81:8a:26:59:3e:4d:84:39:71:c7:ee:b1:1c:fd:7e:71:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Validity
            Not Before: Sep 30 13:22:23 2024 GMT
            Not After : Sep 29 13:27:23 2025 GMT
        Subject: CN=0A2B5BE3914A23F73BC11C2FBB66C595F7979797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:3b:a3:0b:7b:bc:8f:27:fb:4a:74:db:86:
                    3e:16:91:b0:0b:94:ab:91:00:64:9e:cb:e5:71:11:
                    9d:c4:5f:6f:97:cb:f1:41:95:90:20:bd:aa:bb:c0:
                    23:51:d6:9f:f7:2c:70:f0:c1:9a:94:a7:04:db:a4:
                    4b:bc:f6:04:c4:9d:b4:5a:ce:ff:cb:28:45:bf:59:
                    22:b8:db:33:86:5e:23:45:bb:86:fb:b8:7d:9d:6a:
                    8b:7a:28:fe:d3:08:95:36:19:e0:e2:f4:9c:f7:8d:
                    ea:12:7a:32:32:39:75:cb:9d:aa:35:81:65:b3:4f:
                    45:31:3d:c7:4c:a9:44:f5:4e:45:8d:26:16:a9:33:
                    9b:50:d0:c4:82:1c:64:1e:a8:7e:7b:42:56:c4:3c:
                    a8:56:ab:3a:10:84:10:27:c4:a7:e3:b7:51:71:56:
                    93:47:97:a2:ad:27:41:05:7b:9a:0c:c2:54:ff:fa:
                    16:9e:6b:19:d4:ec:3f:7f:ad:89:1f:4c:0f:f8:fb:
                    95:77:cc:16:6c:c1:7e:6e:0d:34:57:28:72:52:11:
                    e5:94:c8:3f:47:31:c2:92:9d:4a:76:60:26:e5:dc:
                    9d:26:f0:86:48:c2:bf:b9:cc:87:28:e8:fb:7e:d1:
                    f5:2d:13:7f:6a:40:ce:13:b8:f0:1b:a7:7f:19:87:
                    f4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2B:5B:E3:91:4A:23:F7:3B:C1:1C:2F:BB:66:C5:95:F7:97:97:97
            X509v3 Authority Key Identifier:
                keyid:F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138362e302f32342d3234203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:ad:c6:7d:31:27:76:18:7d:8f:2d:ae:0c:cd:75:92:1b:44:
         25:b0:19:df:57:4d:ba:e1:1b:9c:d0:13:37:40:64:0a:8a:dc:
         30:b3:32:8a:bd:5d:3c:6c:13:65:4d:e2:d6:11:91:32:ab:b7:
         c1:7f:fc:da:f8:ed:07:20:77:1d:79:10:fd:83:00:88:68:c3:
         89:a4:9d:3e:aa:e6:19:08:84:15:82:36:27:ec:a0:ff:31:bd:
         89:83:88:33:00:8c:1f:5a:6f:8e:7a:97:1a:a4:26:79:e0:a8:
         bc:d3:ce:c6:bc:f6:9c:40:57:9d:60:f6:66:fd:4d:77:3a:6c:
         e8:1f:a5:20:62:1f:72:42:22:44:0e:de:35:e6:9a:7c:a4:c0:
         8e:43:26:cd:72:72:7a:17:fd:c2:f9:7b:d2:c7:ec:cc:43:d4:
         d5:2a:c1:da:8b:e6:d7:9e:bd:1b:ad:09:7c:23:6a:d5:b4:d2:
         72:08:0c:01:a9:d5:7f:1f:28:c6:9d:3c:f5:37:1f:08:a6:6f:
         76:ce:af:0c:47:a4:db:bb:0f:e7:63:98:20:da:0a:a9:3d:4f:
         5e:b5:f7:d0:f2:ab:46:1b:46:31:63:00:ce:5a:b8:d0:9e:16:
         c1:ff:0e:5c:d4:11:c7:ef:3b:13:8d:28:b9:84:15:0d:b6:8b:
         23:59:d3:8d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQ8lAgYomWT5NhDlxx+6xHP1+cVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBEQjE1RDNGNjZCQTcyNURFN0U3MDczMzM0NkMwM0Mw
RTREMTQwODAeFw0yNDA5MzAxMzIyMjNaFw0yNTA5MjkxMzI3MjNaMDMxMTAvBgNV
BAMTKDBBMkI1QkUzOTE0QTIzRjczQkMxMUMyRkJCNjZDNTk1Rjc5Nzk3OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfDujC3u8jyf7SnTbhj4WkbAL
lKuRAGSey+VxEZ3EX2+Xy/FBlZAgvaq7wCNR1p/3LHDwwZqUpwTbpEu89gTEnbRa
zv/LKEW/WSK42zOGXiNFu4b7uH2daot6KP7TCJU2GeDi9Jz3jeoSejIyOXXLnao1
gWWzT0UxPcdMqUT1TkWNJhapM5tQ0MSCHGQeqH57QlbEPKhWqzoQhBAnxKfjt1Fx
VpNHl6KtJ0EFe5oMwlT/+haeaxnU7D9/rYkfTA/4+5V3zBZswX5uDTRXKHJSEeWU
yD9HMcKSnUp2YCbl3J0m8IZIwr+5zIco6Pt+0fUtE39qQM4TuPAbp38Zh/TFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUCitb45FKI/c7wRwvu2bFlfeXl5cwHwYDVR0j
BBgwFoAU8NsV0/ZrpyXefnBzM0bAPA5NFAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmt2eGR5eTNhalJCc3Z5em1TYlRzWjlBVTZLYkF3OVNWellnUUxQYXdS
ekovMC9GMERCMTVEM0Y2NkJBNzI1REU3RTcwNzMzMzQ2QzAzQzBFNEQxNDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwREIxNUQzRjY2QkE3MjVE
RTdFNzA3MzMzNDZDMDNDMEU0RDE0MDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZrdnhkeXkzYWpSQnN2eXptU2JUc1o5QVU2S2JBdzlTVnpZZ1FMUGF3UnpKLzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMujANBgkqhkiG9w0BAQsFAAOCAQEAAq3G
fTEndhh9jy2uDM11khtEJbAZ31dNuuEbnNATN0BkCorcMLMyir1dPGwTZU3i1hGR
Mqu3wX/82vjtByB3HXkQ/YMAiGjDiaSdPqrmGQiEFYI2J+yg/zG9iYOIMwCMH1pv
jnqXGqQmeeCovNPOxrz2nEBXnWD2Zv1Ndzps6B+lIGIfckIiRA7eNeaafKTAjkMm
zXJyehf9wvl70sfszEPU1SrB2ovm1569G60JfCNq1bTScggMAanVfx8oxp089Tcf
CKZvds6vDEek27sP52OYINoKqT1PXrX30PKrRhtGMWMAzlq40J4Wwf8OXNQRx+87
E40ouYQVDbaLI1nTjQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:47 2024 by rpki-client on console-fra.rpki-client.org