Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3133382e302e332e302f32342d3234203d3e20323634353234.roa
File:                     3133382e302e332e302f32342d3234203d3e20323634353234.roa (raw, json)
Hash identifier:          vnPO18bGYuZqvTwHM21Ec3b9DMna5YeV6NWAGIp4icE=
Subject key identifier:   05:51:4A:33:76:12:F4:CE:69:96:74:2B:12:54:95:92:00:C9:19:8B
Certificate issuer:       /CN=26FA74E0D62EEDA20044D86ED870C4AC8AF90B99
Certificate serial:       48444D43F9743FB87D6DB809D4E370A485F653DB
Authority key identifier: 26:FA:74:E0:D6:2E:ED:A2:00:44:D8:6E:D8:70:C4:AC:8A:F9:0B:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3133382e302e332e302f32342d3234203d3e20323634353234.roa
Signing time:             Thu 04 Apr 2024 03:09:41 +0000
ROA not before:           Thu 04 Apr 2024 03:04:41 +0000
ROA not after:            Thu 03 Apr 2025 03:09:41 +0000
asID:                     264524
IP address blocks:        138.0.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.crl
                          rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:44:4d:43:f9:74:3f:b8:7d:6d:b8:09:d4:e3:70:a4:85:f6:53:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26FA74E0D62EEDA20044D86ED870C4AC8AF90B99
        Validity
            Not Before: Apr  4 03:04:41 2024 GMT
            Not After : Apr  3 03:09:41 2025 GMT
        Subject: CN=05514A337612F4CE6996742B1254959200C9198B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d7:f5:5a:aa:2e:52:b5:35:ab:23:43:78:a9:
                    e5:90:3c:47:c9:dc:74:4c:b3:0f:5d:92:a9:e7:85:
                    63:cf:1c:fa:12:f2:a6:50:4e:9b:3c:88:e5:b4:f5:
                    d0:1f:f4:9e:a8:98:07:9c:a3:e8:8c:14:30:4e:8c:
                    d4:5d:9f:b8:7a:3f:c9:41:4f:e7:d2:ca:23:c7:31:
                    73:f0:2a:f9:ef:75:05:0b:43:3f:ed:d6:76:f5:fa:
                    15:8f:c5:40:c3:e5:8c:8b:96:59:37:9c:b1:3d:c8:
                    1a:1d:24:9c:bc:fc:43:a1:34:ca:01:be:01:a6:a7:
                    45:70:9e:dc:9b:ad:6a:74:df:74:1d:5b:45:0d:74:
                    bf:02:5d:14:58:7c:68:1e:3a:7f:cf:59:14:06:ff:
                    25:4a:3f:64:d0:87:df:0b:77:6e:ce:17:a7:a1:e8:
                    97:99:6d:c9:da:36:90:13:d6:97:e5:13:de:be:05:
                    f8:a4:fa:b9:f2:7b:4f:55:0a:67:d9:b2:ed:e9:05:
                    56:18:32:81:3b:da:d5:65:c7:82:1d:b5:95:5e:dd:
                    e8:f6:fd:33:4a:43:65:03:8d:85:01:e2:ec:59:40:
                    bc:91:0e:47:57:f2:ae:cb:0b:d0:56:48:0e:41:3d:
                    9c:18:20:00:73:c8:33:4a:5f:90:9f:cf:b2:4b:6e:
                    c7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:51:4A:33:76:12:F4:CE:69:96:74:2B:12:54:95:92:00:C9:19:8B
            X509v3 Authority Key Identifier:
                keyid:26:FA:74:E0:D6:2E:ED:A2:00:44:D8:6E:D8:70:C4:AC:8A:F9:0B:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26FA74E0D62EEDA20044D86ED870C4AC8AF90B99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/1/3133382e302e332e302f32342d3234203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:bf:42:d3:24:44:20:48:4b:d9:ac:1c:11:ba:b6:4f:b6:56:
         c2:b5:c3:20:53:bf:8a:1b:91:62:f9:f4:ef:38:ce:30:dd:ad:
         06:b0:dd:f1:95:c2:36:cc:69:c1:81:ea:63:12:86:00:47:ee:
         fc:52:3d:b0:a0:c6:1a:35:74:ac:e8:6b:bb:d6:7c:f9:f4:09:
         e4:40:ce:95:b7:fa:31:eb:62:8b:1d:10:09:f7:ab:47:5f:6f:
         92:bd:10:f1:bb:83:44:c1:28:75:9e:b5:7b:0f:25:14:7e:20:
         4a:0a:54:3b:fd:ab:0e:ea:0b:3f:44:30:60:37:2b:42:06:4f:
         b6:0c:ff:a5:ed:12:23:46:cb:f9:a8:35:7d:47:7e:da:da:b2:
         d0:5b:21:7e:4c:f2:f8:5d:63:ee:79:2d:31:33:57:f0:36:37:
         9b:c6:62:ac:95:2d:fe:d1:76:8f:8f:27:42:8e:77:be:08:14:
         2f:e4:11:55:31:59:67:d8:2e:19:5f:7e:5e:10:de:b6:d5:31:
         aa:4b:31:91:3d:ab:5c:53:85:03:23:ef:24:fb:e2:e3:ed:91:
         d5:41:60:fd:7a:6b:3b:9c:5b:46:31:06:84:2a:91:8f:31:f7:
         19:1e:db:d1:83:05:24:11:a6:d9:7c:75:db:b4:e3:32:0a:8e:
         fc:8e:30:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:22 2024 by rpki-client on console-fra.rpki-client.org