Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e33362e3137362e302f32322d3332203d3e20323632373733.roa
File:                     3133382e33362e3137362e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          DIl0ngUADbJpJtaVdFpdHvCcxlS6DjMo0BErJBcXVvM=
Subject key identifier:   A1:DD:81:D4:7C:85:9B:A7:C7:78:2C:3F:30:B0:06:52:A0:75:56:96
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       6C5CBEFABA8961DA148E82DA43D24387D250C7CF
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e33362e3137362e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 14:46:20 +0000
ROA not before:           Mon 09 Sep 2024 14:41:20 +0000
ROA not after:            Mon 08 Sep 2025 14:46:20 +0000
asID:                     262773
IP address blocks:        138.36.176.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5c:be:fa:ba:89:61:da:14:8e:82:da:43:d2:43:87:d2:50:c7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:41:20 2024 GMT
            Not After : Sep  8 14:46:20 2025 GMT
        Subject: CN=A1DD81D47C859BA7C7782C3F30B00652A0755696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6e:69:58:0e:6f:f9:d6:87:61:58:3d:f5:55:
                    8a:0e:f6:48:17:a3:b6:5e:17:9f:7b:9c:e4:d3:c0:
                    14:31:8e:e9:62:27:2e:ab:f8:72:cb:69:1a:b3:9f:
                    b4:29:c2:24:60:55:65:bb:9b:e4:62:98:d4:e6:dd:
                    01:01:30:ba:07:ea:97:99:51:39:74:40:e4:a7:8d:
                    24:47:4e:93:52:a2:ef:3f:fd:0f:8f:6a:3a:d2:46:
                    ac:5f:65:0a:be:d5:d7:2b:c4:f6:b0:33:04:01:e4:
                    ae:f2:92:83:7a:50:77:0a:b6:84:ba:38:d3:d7:c8:
                    61:d1:95:10:46:5e:4a:12:97:d3:50:a8:01:4e:0e:
                    be:8a:f8:b6:f2:ae:e3:61:42:e6:2c:eb:c7:c1:34:
                    be:26:a2:25:67:3e:b5:b3:f5:07:e8:6f:a8:40:15:
                    d1:62:04:6c:3f:d2:3a:8b:07:a5:82:25:28:0e:57:
                    15:91:0f:34:db:e0:4a:a6:bd:80:a1:b4:fa:cc:d2:
                    cb:88:3a:e2:8c:4e:c8:1d:0e:ee:6d:5c:33:3f:28:
                    bc:23:c4:ef:cf:43:d4:c5:26:43:88:f3:6f:7e:43:
                    46:cf:81:d8:f5:7d:0f:3c:df:33:56:b2:14:3c:5f:
                    a8:f3:1d:e8:79:d1:91:fe:5d:7f:27:9d:75:e4:6d:
                    c9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DD:81:D4:7C:85:9B:A7:C7:78:2C:3F:30:B0:06:52:A0:75:56:96
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e33362e3137362e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:7d:0e:1f:eb:77:0d:f0:02:41:3c:22:e3:b1:3f:9e:f8:74:
         93:36:72:f1:2d:8a:49:ca:49:b2:99:04:01:7c:e3:7d:a7:e1:
         6a:f9:9f:5b:b8:a4:1d:85:34:0e:2b:0b:75:48:a8:8c:3e:3b:
         44:07:10:f6:91:5c:5d:a4:29:8a:77:79:35:d2:a6:3f:4b:06:
         a9:a9:e5:8a:29:9a:07:37:2a:d1:07:75:40:98:45:8b:7c:28:
         d8:6a:73:15:f4:bf:fb:a5:c4:47:80:43:cc:ec:64:8c:59:b7:
         fa:6a:ad:23:e7:d9:23:e4:69:5c:9f:44:20:b8:4c:e8:2a:95:
         2a:49:88:03:18:d3:22:d2:13:69:41:ca:a8:31:d9:3e:ef:ec:
         32:e6:9f:74:d2:9c:5d:d7:da:b9:96:91:0c:d7:39:75:4b:d2:
         42:a9:41:5b:4b:92:0b:70:d6:b9:db:05:83:47:2d:2b:85:57:
         3a:46:0e:ab:43:8f:09:15:2e:24:d5:c2:f2:cd:d4:e6:11:84:
         f0:b7:44:51:16:ac:fa:5c:f4:56:0b:1c:20:f3:8b:33:5a:d8:
         93:52:13:d6:17:b5:ff:99:88:e2:2e:d5:82:02:54:ca:73:80:
         63:8e:13:e4:e3:b9:04:a3:6b:38:51:3d:f9:a3:f1:18:a8:4f:
         14:08:19:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbFy++rqJYdoUjoLaQ9JDh9JQx88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA5MDkxNDQxMjBaFw0yNTA5MDgxNDQ2MjBaMDMxMTAvBgNV
BAMTKEExREQ4MUQ0N0M4NTlCQTdDNzc4MkMzRjMwQjAwNjUyQTA3NTU2OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPbmlYDm/51odhWD31VYoO9kgX
o7ZeF597nOTTwBQxjuliJy6r+HLLaRqzn7QpwiRgVWW7m+RimNTm3QEBMLoH6peZ
UTl0QOSnjSRHTpNSou8//Q+PajrSRqxfZQq+1dcrxPawMwQB5K7ykoN6UHcKtoS6
ONPXyGHRlRBGXkoSl9NQqAFODr6K+LbyruNhQuYs68fBNL4moiVnPrWz9Qfob6hA
FdFiBGw/0jqLB6WCJSgOVxWRDzTb4EqmvYChtPrM0suIOuKMTsgdDu5tXDM/KLwj
xO/PQ9TFJkOI829+Q0bPgdj1fQ883zNWshQ8X6jzHeh50ZH+XX8nnXXkbckLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUod2B1HyFm6fHeCw/MLAGUqB1VpYwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzMzM4MmUzMzM2MmUzMTM3MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKJLAwDQYJKoZIhvcNAQELBQADggEBABx9Dh/r
dw3wAkE8IuOxP574dJM2cvEtiknKSbKZBAF8432n4Wr5n1u4pB2FNA4rC3VIqIw+
O0QHEPaRXF2kKYp3eTXSpj9LBqmp5Yopmgc3KtEHdUCYRYt8KNhqcxX0v/ulxEeA
Q8zsZIxZt/pqrSPn2SPkaVyfRCC4TOgqlSpJiAMY0yLSE2lByqgx2T7v7DLmn3TS
nF3X2rmWkQzXOXVL0kKpQVtLkgtw1rnbBYNHLSuFVzpGDqtDjwkVLiTVwvLN1OYR
hPC3RFEWrPpc9FYLHCDzizNa2JNSE9YXtf+ZiOIu1YICVMpzgGOOE+TjuQSjazhR
Pfmj8RioTxQIGbo=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org