Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131382e302f32332d3233203d3e20323634353737.roa
File:                     3133382e33362e3131382e302f32332d3233203d3e20323634353737.roa (raw, json)
Hash identifier:          DDLcc1D9hgsGBG+BgaPWORp3C6r1GrUwbpxwn/Udc9o=
Subject key identifier:   31:B6:C3:0F:95:22:11:8F:0F:79:93:1F:69:0E:3D:8F:C4:93:55:27
Certificate issuer:       /CN=BFB83D9B381A4D353332D2E566DBD36508CE5F20
Certificate serial:       073FC0D7F7C5358D2D93E4BEE84B4A69021688AB
Authority key identifier: BF:B8:3D:9B:38:1A:4D:35:33:32:D2:E5:66:DB:D3:65:08:CE:5F:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131382e302f32332d3233203d3e20323634353737.roa
Signing time:             Thu 04 Jan 2024 19:01:20 +0000
ROA not before:           Thu 04 Jan 2024 18:56:20 +0000
ROA not after:            Thu 02 Jan 2025 19:01:20 +0000
asID:                     264577
IP address blocks:        138.36.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.crl
                          rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:3f:c0:d7:f7:c5:35:8d:2d:93:e4:be:e8:4b:4a:69:02:16:88:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB83D9B381A4D353332D2E566DBD36508CE5F20
        Validity
            Not Before: Jan  4 18:56:20 2024 GMT
            Not After : Jan  2 19:01:20 2025 GMT
        Subject: CN=31B6C30F9522118F0F79931F690E3D8FC4935527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:76:c7:6b:d7:88:49:4a:3c:6e:41:19:ef:
                    b6:24:2e:03:5e:10:be:a8:df:67:95:9e:93:3d:ac:
                    69:37:4d:fe:a2:04:b5:2d:a8:3d:5c:c6:fe:ba:6f:
                    bd:c5:f2:a0:2e:e8:2b:bf:ae:6b:23:81:c3:83:c3:
                    06:5f:eb:a4:ab:0f:8c:40:40:a0:3b:45:d1:64:4e:
                    ad:06:65:75:0e:0b:cb:80:54:98:b0:ed:b1:fb:ab:
                    61:3b:06:72:ed:93:3f:3e:c0:2a:54:54:0a:7e:d0:
                    27:cb:7d:06:4f:47:06:ae:f2:fa:44:09:6e:2f:9e:
                    92:35:65:3b:b8:b1:8c:16:00:14:70:e8:68:bd:ff:
                    6f:b4:33:05:84:0d:40:36:46:83:b0:d9:de:c2:5a:
                    32:cb:fb:0c:b6:35:9e:ed:87:14:27:ca:3b:8e:ac:
                    8c:b5:e8:85:d6:5c:c8:1b:1c:dc:e8:ec:8d:d6:af:
                    93:84:ce:56:03:a1:dc:bd:f4:fc:c2:62:15:7e:7d:
                    f3:ed:1b:1d:52:0c:5b:15:ae:4f:14:0e:12:76:b4:
                    4e:d8:85:bd:09:70:c8:8f:07:11:d9:ef:b0:6d:fb:
                    24:8c:8e:1f:95:36:1a:ad:a4:20:e1:36:d6:a5:5e:
                    cc:5f:cd:21:8b:eb:82:8f:0d:31:3e:0e:63:f1:ac:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B6:C3:0F:95:22:11:8F:0F:79:93:1F:69:0E:3D:8F:C4:93:55:27
            X509v3 Authority Key Identifier:
                keyid:BF:B8:3D:9B:38:1A:4D:35:33:32:D2:E5:66:DB:D3:65:08:CE:5F:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BFB83D9B381A4D353332D2E566DBD36508CE5F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/3133382e33362e3131382e302f32332d3233203d3e20323634353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:3f:c5:f9:21:2d:03:36:8b:a1:12:2e:62:13:8e:c2:90:6f:
         82:fe:b5:76:2f:93:79:7e:ed:7a:ff:d4:09:ca:69:53:cf:36:
         33:fe:e0:8c:56:16:95:d7:fc:26:03:72:0b:51:12:a4:b9:4d:
         96:7c:71:40:c8:90:f2:a6:a8:78:b6:1b:b7:27:c1:bd:2f:34:
         a6:66:43:be:ae:6d:fa:80:e5:71:44:1f:1c:cd:b7:05:8a:4f:
         86:8c:3e:0b:d8:9c:67:c0:ce:e8:f4:00:da:08:07:ec:1f:62:
         33:b9:16:d9:60:ea:29:ad:af:c8:91:04:d7:22:53:23:6e:09:
         64:09:31:6d:e2:f8:53:07:a9:32:d3:74:3c:31:eb:b3:e0:cf:
         a4:72:86:0e:b4:0d:95:15:e7:11:49:17:76:79:0c:a8:a4:b0:
         fc:09:08:9f:cf:ac:54:b8:6f:eb:3b:33:f6:07:2b:08:15:47:
         cb:a9:5f:32:c9:40:42:2f:80:32:22:f6:e7:a0:4a:60:18:08:
         a5:4f:48:d2:b0:38:6c:9e:10:0e:60:a3:f5:e2:ae:0c:62:fb:
         ae:ff:d8:1e:b9:73:b0:26:c0:ff:4c:76:0b:c4:aa:2f:36:c1:
         7e:c2:5a:ee:b6:67:46:71:74:72:c1:61:9b:a6:49:33:e1:bc:
         01:6d:7f:08
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBz/A1/fFNY0tk+S+6EtKaQIWiKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZCODNEOUIzODFBNEQzNTMzMzJEMkU1NjZEQkQzNjUw
OENFNUYyMDAeFw0yNDAxMDQxODU2MjBaFw0yNTAxMDIxOTAxMjBaMDMxMTAvBgNV
BAMTKDMxQjZDMzBGOTUyMjExOEYwRjc5OTMxRjY5MEUzRDhGQzQ5MzU1MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RnbHa9eISUo8bkEZ77YkLgNe
EL6o32eVnpM9rGk3Tf6iBLUtqD1cxv66b73F8qAu6Cu/rmsjgcODwwZf66SrD4xA
QKA7RdFkTq0GZXUOC8uAVJiw7bH7q2E7BnLtkz8+wCpUVAp+0CfLfQZPRwau8vpE
CW4vnpI1ZTu4sYwWABRw6Gi9/2+0MwWEDUA2RoOw2d7CWjLL+wy2NZ7thxQnyjuO
rIy16IXWXMgbHNzo7I3Wr5OEzlYDody99PzCYhV+ffPtGx1SDFsVrk8UDhJ2tE7Y
hb0JcMiPBxHZ77Bt+ySMjh+VNhqtpCDhNtalXsxfzSGL64KPDTE+DmPxrNXzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMbbDD5UiEY8PeZMfaQ49j8STVScwHwYDVR0j
BBgwFoAUv7g9mzgaTTUzMtLlZtvTZQjOXyAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1cyY1NrUVF5cXNBZnVSNjY5NFZaRjJFQmQ3V1Boa0RNY3ZlRDN0ZHl6
ZmIvMC9CRkI4M0Q5QjM4MUE0RDM1MzMzMkQyRTU2NkRCRDM2NTA4Q0U1RjIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGQjgzRDlCMzgxQTREMzUz
MzMyRDJFNTY2REJEMzY1MDhDRTVGMjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNXMmNTa1FReXFzQWZ1UjY2OTRWWkYyRUJkN1dQaGtETWN2ZUQzdGR5emZiLzAv
MzEzMzM4MmUzMzM2MmUzMTMxMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzNTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKJHYwDQYJKoZIhvcNAQELBQADggEBAJs/xfkh
LQM2i6ESLmITjsKQb4L+tXYvk3l+7Xr/1AnKaVPPNjP+4IxWFpXX/CYDcgtREqS5
TZZ8cUDIkPKmqHi2G7cnwb0vNKZmQ76ubfqA5XFEHxzNtwWKT4aMPgvYnGfAzuj0
ANoIB+wfYjO5Ftlg6imtr8iRBNciUyNuCWQJMW3i+FMHqTLTdDwx67Pgz6Ryhg60
DZUV5xFJF3Z5DKiksPwJCJ/PrFS4b+s7M/YHKwgVR8upXzLJQEIvgDIi9uegSmAY
CKVPSNKwOGyeEA5go/Xirgxi+67/2B65c7AmwP9MdgvEqi82wX7CWu62Z0ZxdHLB
YZumSTPhvAFtfwg=
-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:31 2024 by rpki-client on console.sobornost.net