Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa
File:                     3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa (raw, json)
Hash identifier:          lYNNHoBTNQOjKwh+lKmGJGZPfWlpq4rqFtRhxK1lU/g=
Subject key identifier:   ED:AD:43:42:64:60:87:29:D3:F9:12:A2:46:5C:6A:1F:19:82:02:4E
Certificate issuer:       /CN=F9FD945661279E684F2D83F08D42ABC68D0123E5
Certificate serial:       3F0CF6F1641034D3DCEB550AD978CA9BFA8B0C0E
Authority key identifier: F9:FD:94:56:61:27:9E:68:4F:2D:83:F0:8D:42:AB:C6:8D:01:23:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FD945661279E684F2D83F08D42ABC68D0123E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa
Signing time:             Thu 04 Apr 2024 21:34:47 +0000
ROA not before:           Thu 04 Apr 2024 21:29:47 +0000
ROA not after:            Thu 03 Apr 2025 21:34:47 +0000
asID:                     264242
IP address blocks:        138.117.144.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/F9FD945661279E684F2D83F08D42ABC68D0123E5.crl
                          rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/F9FD945661279E684F2D83F08D42ABC68D0123E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FD945661279E684F2D83F08D42ABC68D0123E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0c:f6:f1:64:10:34:d3:dc:eb:55:0a:d9:78:ca:9b:fa:8b:0c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FD945661279E684F2D83F08D42ABC68D0123E5
        Validity
            Not Before: Apr  4 21:29:47 2024 GMT
            Not After : Apr  3 21:34:47 2025 GMT
        Subject: CN=EDAD434264608729D3F912A2465C6A1F1982024E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c1:a8:ee:3c:32:41:94:7c:ee:b7:18:21:eb:
                    e2:7f:33:10:60:c5:4b:91:9c:34:45:5e:36:b2:98:
                    e4:c3:8d:65:3b:d5:eb:43:52:58:28:80:98:22:cb:
                    3b:3c:f5:28:b2:cf:a0:54:9b:f6:65:a3:ec:68:18:
                    c4:2b:d3:91:5f:f4:9e:d3:78:62:47:35:bf:f4:c0:
                    f8:6c:4d:8e:74:09:01:49:87:de:2b:0e:12:ba:f4:
                    01:aa:c3:43:92:74:74:90:a0:77:f3:9e:05:c3:17:
                    bc:61:df:38:2a:24:75:e6:0c:4f:66:61:0a:e6:81:
                    5f:a4:ce:d4:04:12:6c:41:00:98:bb:cd:06:42:6d:
                    af:41:cc:35:bc:c1:37:fb:32:96:af:61:71:32:4f:
                    ba:f2:31:b6:49:80:6b:aa:b8:07:5d:01:a4:50:e0:
                    7c:da:d8:d0:a5:b4:59:2d:4b:dd:47:27:f3:c1:84:
                    84:fc:e9:1d:6b:46:0b:74:ba:b9:d6:37:ae:88:c7:
                    13:b1:d7:4f:f9:df:16:3f:3a:fb:13:98:f6:cc:e7:
                    8c:ee:59:c7:5d:70:eb:e0:c1:ac:06:e5:e0:b3:5d:
                    b1:c4:60:6e:8a:d4:bd:55:8c:e6:97:83:b0:65:df:
                    d8:f8:c4:6a:93:e7:49:82:76:9b:cb:00:13:0a:b8:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AD:43:42:64:60:87:29:D3:F9:12:A2:46:5C:6A:1F:19:82:02:4E
            X509v3 Authority Key Identifier:
                keyid:F9:FD:94:56:61:27:9E:68:4F:2D:83:F0:8D:42:AB:C6:8D:01:23:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/F9FD945661279E684F2D83F08D42ABC68D0123E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FD945661279E684F2D83F08D42ABC68D0123E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/2/3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:82:39:36:fd:1c:c9:84:20:75:3d:cf:8e:b5:53:22:75:9e:
         f4:b6:91:13:6d:73:0e:b0:4a:dc:7c:22:b9:83:9f:8e:6e:c3:
         2e:04:f3:9f:ee:66:a5:dd:36:04:1b:09:08:53:87:d1:60:3e:
         59:31:8e:77:bd:0d:28:32:02:3c:b8:18:5e:2f:50:69:97:99:
         0a:32:ff:b9:41:33:ca:8f:3a:1e:80:3b:9e:41:30:21:4f:b1:
         aa:35:17:3a:c1:58:8c:02:10:1a:92:f7:e3:30:46:e9:dc:21:
         32:71:c7:e9:60:2b:33:d5:88:25:fe:95:04:1b:32:a9:9b:00:
         60:eb:48:d8:82:f8:5f:04:c6:8f:68:6b:eb:f0:97:91:ac:ec:
         0b:38:d6:88:5b:05:eb:81:8c:bd:1f:9a:65:fd:be:00:fb:57:
         64:da:50:47:55:a7:9b:5e:e5:c8:18:bf:c5:d6:4f:ed:4d:b5:
         5b:47:1f:43:cb:58:7f:72:83:14:d0:45:1e:37:11:09:52:8e:
         5f:53:66:09:5c:0e:61:bc:97:7c:6c:5b:d1:64:8f:bb:43:04:
         bb:2f:dc:d1:a9:3d:02:b9:0c:57:4f:74:08:d7:3d:ce:a4:42:
         28:61:d8:85:df:af:2d:16:ba:c3:3f:d8:47:7a:f5:b4:c9:c9:
         eb:e1:b6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:44 2024 by rpki-client on console-ams.rpki-client.org