Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3132322e37362e302f32322d3332203d3e20323632373733.roa
File:                     3133382e3132322e37362e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          XqxQo8ym1UZFbBBEWcGdWom8Rzr8peOGXn9OZvpNf6g=
Subject key identifier:   92:16:87:69:B8:07:41:BC:E4:00:12:32:21:5C:F7:03:2A:55:01:12
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       3BE3E44BE991876C1C799740B5BCB6F8227E9504
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3132322e37362e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 14:47:07 +0000
ROA not before:           Mon 09 Sep 2024 14:42:07 +0000
ROA not after:            Mon 08 Sep 2025 14:47:07 +0000
asID:                     262773
IP address blocks:        138.122.76.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e3:e4:4b:e9:91:87:6c:1c:79:97:40:b5:bc:b6:f8:22:7e:95:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:42:07 2024 GMT
            Not After : Sep  8 14:47:07 2025 GMT
        Subject: CN=92168769B80741BCE4001232215CF7032A550112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:c9:68:dc:69:5f:51:93:2b:67:57:71:a4:
                    a6:21:78:87:f1:9b:65:a8:cf:38:05:f7:53:43:51:
                    ea:26:05:60:38:68:74:ce:e2:2d:43:21:86:6d:f3:
                    0a:8f:c7:29:2d:7c:28:81:1c:94:c4:f0:1c:a9:88:
                    1b:e6:fa:dc:c5:75:01:3f:b4:5a:8c:2e:88:e0:bd:
                    cd:37:d6:89:2b:27:5e:cb:3b:61:aa:5b:fc:bb:86:
                    81:df:b0:7b:67:50:aa:0f:02:62:14:d0:55:db:02:
                    1f:b1:37:40:6c:90:92:20:e6:61:81:fa:a5:e2:e6:
                    bb:25:29:66:e0:ae:34:90:be:de:d7:5e:1c:ac:97:
                    ff:5c:f5:e4:4a:35:24:6a:22:6f:2b:22:3c:d2:c1:
                    fe:07:ab:4f:c1:4c:98:3c:da:4b:ad:ce:e3:f7:90:
                    7e:24:be:c6:2c:bd:ce:b7:a9:93:dd:c1:d5:27:15:
                    52:6f:57:30:4c:99:f8:8f:02:93:44:f3:82:fe:9f:
                    63:df:00:ef:5e:8f:e8:d2:5e:50:54:11:d6:d0:1b:
                    39:0e:b8:4e:f6:92:d4:6e:27:2b:50:95:fc:c0:72:
                    85:43:be:df:0a:7e:48:3e:60:33:1d:0b:9b:ce:95:
                    8c:9a:ee:8c:42:48:16:27:7c:e6:4a:1b:77:d1:da:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:16:87:69:B8:07:41:BC:E4:00:12:32:21:5C:F7:03:2A:55:01:12
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e3132322e37362e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:7c:99:e3:5a:90:5c:62:b6:71:ef:72:3e:08:6a:52:73:c5:
         2e:ac:f4:7e:d7:ee:00:ac:07:63:c2:ba:52:7a:cb:44:bc:cf:
         8b:4f:8a:25:ac:d0:31:e5:1d:53:21:eb:b5:49:10:68:9b:0c:
         c1:4f:da:db:45:db:f1:0e:99:30:9f:67:af:3a:10:72:8d:7b:
         bb:1c:df:fc:e9:24:c3:2c:6a:57:53:3b:0e:d2:f0:62:ce:b4:
         32:3b:97:be:3a:f1:92:dd:db:3e:a3:b0:0d:e1:f1:9f:24:22:
         65:11:df:2d:9c:36:6c:09:29:29:9f:8d:07:6e:42:72:f5:08:
         5e:dc:f1:33:a4:8d:bc:3c:4d:fb:5d:8d:31:5e:23:5c:0a:e5:
         20:3f:23:a9:28:58:5f:8c:c5:1c:e2:82:ec:c6:f7:65:75:e1:
         78:2e:ad:72:42:26:ac:6c:5a:eb:c9:92:5b:87:2e:b8:7d:3b:
         e3:ec:78:a8:4e:21:86:00:74:05:bd:95:11:9c:8b:fe:b8:c5:
         d5:56:15:2a:dd:f3:57:eb:cc:d0:a6:84:b9:dd:8a:95:1e:99:
         45:14:1d:aa:63:36:3b:20:7a:30:1b:08:fa:79:b2:f6:a9:aa:
         b4:27:9e:57:99:2f:6e:8f:0e:08:79:14:aa:ad:dd:aa:bd:58:
         b7:e2:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org