Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32332d3233203d3e20323634353737.roa
File:                     3133382e33362e3131362e302f32332d3233203d3e20323634353737.roa (raw, json)
Hash identifier:          KegOYdjE4NXe94eKsC70somWXNY4x2MKtaG5UtoK4zs=
Subject key identifier:   1A:BC:9F:BA:57:56:89:0B:10:29:C6:95:D7:62:F0:A5:08:4D:F9:57
Certificate issuer:       /CN=BFB83D9B381A4D353332D2E566DBD36508CE5F20
Certificate serial:       10DC01604AEDDDC4D77769335208C90D846E1DF9
Authority key identifier: BF:B8:3D:9B:38:1A:4D:35:33:32:D2:E5:66:DB:D3:65:08:CE:5F:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32332d3233203d3e20323634353737.roa
Signing time:             Thu 04 Jan 2024 19:01:21 +0000
ROA not before:           Thu 04 Jan 2024 18:56:21 +0000
ROA not after:            Thu 02 Jan 2025 19:01:21 +0000
asID:                     264577
IP address blocks:        138.36.116.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.crl
                          rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:dc:01:60:4a:ed:dd:c4:d7:77:69:33:52:08:c9:0d:84:6e:1d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB83D9B381A4D353332D2E566DBD36508CE5F20
        Validity
            Not Before: Jan  4 18:56:21 2024 GMT
            Not After : Jan  2 19:01:21 2025 GMT
        Subject: CN=1ABC9FBA5756890B1029C695D762F0A5084DF957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:91:e2:f0:26:5a:8d:ff:76:0e:fd:47:20:2e:
                    3e:e6:15:dd:6f:a6:e6:26:13:ed:01:d2:b5:5c:a8:
                    bc:84:bd:90:a9:1c:b4:3b:53:a9:4b:8c:2d:f5:37:
                    ae:7d:33:74:db:84:29:18:1d:06:ff:5f:11:8e:23:
                    4c:d9:71:69:fa:fd:c1:cb:22:45:df:ed:1c:f2:1e:
                    e2:51:f2:4e:b6:2a:36:a6:e5:5c:a3:ac:17:e5:03:
                    02:12:97:06:87:67:91:96:f2:61:4a:a0:01:1b:87:
                    47:ef:d0:54:0a:fc:48:b9:e4:9d:47:1d:25:7d:ed:
                    0a:50:7e:2e:cd:00:72:7d:42:06:6d:93:92:f2:0b:
                    b6:1c:de:30:ab:7e:cb:13:1a:26:65:b7:6d:3d:10:
                    c6:27:e6:af:d2:26:75:12:2d:22:7a:c7:26:d8:69:
                    92:2c:5a:26:e0:8b:61:3d:85:36:fc:7b:b4:d5:31:
                    c1:a2:a0:5a:0c:a7:9d:7e:ee:99:eb:5b:e5:3a:ed:
                    6d:dd:6e:70:e6:50:9d:74:a2:35:c7:8f:db:27:00:
                    a8:97:29:25:d0:c9:35:4b:cb:d6:0f:71:f5:d7:28:
                    67:4d:40:d6:43:9d:ce:51:9f:92:c1:ac:58:d6:d8:
                    47:d4:e7:15:3c:a9:bc:62:50:2f:cc:63:89:f2:5f:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BC:9F:BA:57:56:89:0B:10:29:C6:95:D7:62:F0:A5:08:4D:F9:57
            X509v3 Authority Key Identifier:
                keyid:BF:B8:3D:9B:38:1A:4D:35:33:32:D2:E5:66:DB:D3:65:08:CE:5F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131362e302f32332d3233203d3e20323634353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:bd:e2:41:d3:5b:67:3b:ea:1d:94:ca:13:1b:89:91:63:cd:
         73:1b:0d:7e:a6:97:29:31:9c:d9:4c:a0:74:0d:1f:38:2c:d3:
         65:41:b9:8a:cc:6e:54:d1:17:5a:2f:cd:45:d0:9c:c8:22:7d:
         c3:ee:e4:4f:7b:d7:54:bd:46:df:3c:aa:eb:05:de:e8:59:89:
         a3:cf:d0:4a:37:73:3a:a6:48:0f:6c:35:ee:59:75:2b:dd:94:
         25:12:fd:f2:2d:cd:e3:93:aa:38:a4:0b:e2:04:a0:07:49:b2:
         cc:55:46:00:fd:58:75:ce:5f:5f:1c:bb:0a:c4:c8:d5:34:2d:
         83:ea:e8:ff:39:34:e0:5c:21:3c:5f:87:f4:9a:58:eb:b6:da:
         ca:37:ed:57:c2:07:45:5f:5b:58:f2:58:81:a2:dd:02:9a:8f:
         83:62:a8:80:cf:cd:bd:8b:9d:ce:f5:53:70:0a:14:4c:29:e8:
         a6:d1:4c:c4:cd:1f:41:76:6f:d5:b6:ae:82:2b:53:80:3e:dd:
         10:ab:f7:bc:19:e2:d7:72:af:e4:5e:1e:64:fd:5c:a5:e7:67:
         4d:88:09:f2:4a:09:9b:8a:96:53:35:77:48:73:3b:f2:7f:88:
         f6:40:b9:d5:21:81:f0:ec:9a:bb:73:80:df:e3:e1:6d:5f:87:
         ed:9c:ba:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUENwBYErt3cTXd2kzUgjJDYRuHfkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZCODNEOUIzODFBNEQzNTMzMzJEMkU1NjZEQkQzNjUw
OENFNUYyMDAeFw0yNDAxMDQxODU2MjFaFw0yNTAxMDIxOTAxMjFaMDMxMTAvBgNV
BAMTKDFBQkM5RkJBNTc1Njg5MEIxMDI5QzY5NUQ3NjJGMEE1MDg0REY5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDokeLwJlqN/3YO/UcgLj7mFd1v
puYmE+0B0rVcqLyEvZCpHLQ7U6lLjC31N659M3TbhCkYHQb/XxGOI0zZcWn6/cHL
IkXf7RzyHuJR8k62Kjam5VyjrBflAwISlwaHZ5GW8mFKoAEbh0fv0FQK/Ei55J1H
HSV97QpQfi7NAHJ9QgZtk5LyC7Yc3jCrfssTGiZlt209EMYn5q/SJnUSLSJ6xybY
aZIsWibgi2E9hTb8e7TVMcGioFoMp51+7pnrW+U67W3dbnDmUJ10ojXHj9snAKiX
KSXQyTVLy9YPcfXXKGdNQNZDnc5Rn5LBrFjW2EfU5xU8qbxiUC/MY4nyX3/pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGryfuldWiQsQKcaV12LwpQhN+VcwHwYDVR0j
BBgwFoAUv7g9mzgaTTUzMtLlZtvTZQjOXyAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6
ZmIvMC9CRkI4M0Q5QjM4MUE0RDM1MzMzMkQyRTU2NkRCRDM2NTA4Q0U1RjIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGQjgzRDlCMzgxQTREMzUz
MzMyRDJFNTY2REJEMzY1MDhDRTVGMjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNXMmNTa1FReXFzQWZ1UjY2OTRWWkYyRUJkN1dQaGtETWN2ZUQzdGR5emZiLzAv
MzEzMzM4MmUzMzM2MmUzMTMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzNTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKJHQwDQYJKoZIhvcNAQELBQADggEBABC94kHT
W2c76h2UyhMbiZFjzXMbDX6mlykxnNlMoHQNHzgs02VBuYrMblTRF1ovzUXQnMgi
fcPu5E9711S9Rt88qusF3uhZiaPP0Eo3czqmSA9sNe5ZdSvdlCUS/fItzeOTqjik
C+IEoAdJssxVRgD9WHXOX18cuwrEyNU0LYPq6P85NOBcITxfh/SaWOu22so37VfC
B0VfW1jyWIGi3QKaj4NiqIDPzb2Lnc71U3AKFEwp6KbRTMTNH0F2b9W2roIrU4A+
3RCr97wZ4tdyr+ReHmT9XKXnZ02ICfJKCZuKllM1d0hzO/J/iPZAudUhgfDsmrtz
gN/j4W1fh+2cujk=
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:31 2024 by rpki-client on console.sobornost.net