Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e39342e3135362e302f32322d3332203d3e20323632373733.roa
File:                     3133382e39342e3135362e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          Y/qCiz9a2gkthmMjZ8Xn0MMET6xQK8pSN+UN6xSYVds=
Subject key identifier:   B3:9A:27:80:8C:F7:F0:8F:25:B7:D4:EA:AD:40:6A:FF:9C:22:7C:C3
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       699C8D4C7B1BEA9203FDD7AF307A5A330CBB163E
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e39342e3135362e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 14:44:54 +0000
ROA not before:           Mon 09 Sep 2024 14:39:54 +0000
ROA not after:            Mon 08 Sep 2025 14:44:54 +0000
asID:                     262773
IP address blocks:        138.94.156.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9c:8d:4c:7b:1b:ea:92:03:fd:d7:af:30:7a:5a:33:0c:bb:16:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:39:54 2024 GMT
            Not After : Sep  8 14:44:54 2025 GMT
        Subject: CN=B39A27808CF7F08F25B7D4EAAD406AFF9C227CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:3d:5a:6b:a6:c2:06:7a:e7:53:2a:bd:b6:
                    25:c4:51:76:2c:80:40:98:de:44:95:da:0a:6b:0d:
                    13:21:fe:d6:09:e9:ad:51:16:ad:d8:d9:75:ee:51:
                    26:67:74:00:18:d8:2f:b1:80:40:06:b8:8f:7a:2a:
                    16:99:b5:cd:79:ee:84:7e:e0:83:c5:f9:a9:3d:79:
                    0b:2d:7c:71:a2:f4:e5:7d:1f:ab:38:65:18:30:7f:
                    ac:df:1b:a0:b1:14:b1:2e:a0:a5:bd:6c:c2:f7:fd:
                    a5:40:87:c8:40:51:91:cf:1f:ae:20:93:0d:35:7f:
                    bd:b2:2a:13:e2:a6:13:e6:d8:ad:4c:7a:61:20:1e:
                    ac:1e:04:77:39:1f:3b:d4:48:70:68:63:ab:67:e9:
                    14:ee:49:9a:05:50:59:e1:80:55:61:5f:4b:5c:03:
                    a3:06:3a:85:9a:09:5f:b4:52:bb:12:b8:4a:99:64:
                    41:79:04:2a:b4:04:75:18:19:ee:0a:32:ea:f4:e0:
                    05:96:fd:12:51:c8:21:aa:e0:99:8a:a4:3e:d2:66:
                    47:b7:c4:ec:ed:1b:00:14:c5:a7:c3:96:cb:7e:8b:
                    2b:53:34:dc:4a:c6:7f:77:9f:df:13:70:5e:9d:89:
                    66:7e:7e:6d:f9:fc:6f:9a:0f:35:67:ca:dd:27:0c:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9A:27:80:8C:F7:F0:8F:25:B7:D4:EA:AD:40:6A:FF:9C:22:7C:C3
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133382e39342e3135362e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:79:b3:c1:7d:60:bd:2b:be:5f:06:e6:cf:80:02:34:38:fe:
         e6:39:23:36:8b:94:b9:35:c1:07:1f:d7:21:a7:e1:54:af:4e:
         5a:d4:e2:79:21:21:39:60:9c:31:36:66:43:3c:f4:81:59:91:
         35:7f:ea:bf:df:32:26:83:ec:42:22:ec:73:3a:0a:c7:6d:f0:
         21:24:a9:1f:11:9a:1b:d2:75:c1:f5:9f:c6:13:74:3c:92:1f:
         d6:f4:2d:94:33:03:01:04:40:76:7f:a5:cc:35:f9:9a:92:cd:
         84:73:f4:23:d2:69:b9:be:cf:d3:39:c6:d9:43:60:d9:4b:c7:
         ca:31:a3:07:2d:8d:43:4e:29:1b:33:47:57:db:9a:e1:c1:ae:
         e6:5e:11:34:88:b8:9c:d2:09:f0:27:99:3f:82:d1:6f:c4:3a:
         a3:45:11:0c:21:f6:28:6f:5b:1e:d7:66:d9:3d:f1:58:d3:61:
         c1:47:53:85:36:7c:05:03:65:0e:92:5e:2e:e2:6b:60:c9:f0:
         de:53:2b:1c:f3:3d:e0:83:bc:30:37:84:1b:0e:71:49:74:73:
         a3:05:e7:f3:c3:ee:e2:c5:e1:c5:69:b7:64:02:19:c6:5d:2c:
         05:b5:68:b6:90:8d:ad:60:12:ca:75:99:83:ef:9d:16:e9:08:
         73:fc:d2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org