Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e37312e302f32342d3234203d3e20323730393139.roa
File:                     3133382e3138352e37312e302f32342d3234203d3e20323730393139.roa (raw, json)
Hash identifier:          rdxcuFmRQ3bXiifXIBaSgw84o3PUYATFWXaBPUBDoS4=
Subject key identifier:   73:4C:36:CC:62:FE:16:8F:53:D3:37:E7:FE:8D:B4:28:82:A5:7A:50
Certificate issuer:       /CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
Certificate serial:       21EDA3B17506085E84E7AA4DE643112A268288F6
Authority key identifier: 65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e37312e302f32342d3234203d3e20323730393139.roa
Signing time:             Wed 03 Apr 2024 18:32:22 +0000
ROA not before:           Wed 03 Apr 2024 18:27:22 +0000
ROA not after:            Wed 02 Apr 2025 18:32:22 +0000
asID:                     270919
IP address blocks:        138.185.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.crl
                          rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 03:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ed:a3:b1:75:06:08:5e:84:e7:aa:4d:e6:43:11:2a:26:82:88:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65CEB90B19B493ED65EEAC559643F4CECD4FEF5C
        Validity
            Not Before: Apr  3 18:27:22 2024 GMT
            Not After : Apr  2 18:32:22 2025 GMT
        Subject: CN=734C36CC62FE168F53D337E7FE8DB42882A57A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:03:49:3d:b5:9f:77:3f:d5:ff:16:43:c8:
                    ed:31:5d:d5:69:d7:8b:34:95:83:ac:2c:27:93:3c:
                    0a:6c:aa:75:7e:75:96:61:27:a7:fc:c5:7c:94:fb:
                    fe:7e:be:47:d7:2b:06:87:8f:92:8f:c9:0a:4c:02:
                    3e:32:f9:11:be:8d:e6:54:c3:57:27:07:f0:bb:49:
                    d4:ef:76:b3:7d:31:80:c2:1f:36:a7:52:a5:84:49:
                    da:6d:1c:7e:56:f6:c8:23:62:2c:25:85:c8:32:3b:
                    8b:32:ca:67:a4:8b:31:f9:2a:24:62:31:b4:ec:34:
                    73:55:9e:f5:6e:18:d3:16:b4:49:d7:9f:31:de:6a:
                    98:07:64:6f:ce:35:2f:47:89:07:b1:9f:45:eb:6c:
                    40:66:99:e7:d5:0a:ce:5d:7a:8e:72:5d:e4:1d:08:
                    01:59:f2:5f:e0:a8:08:b5:a9:01:10:3e:60:b7:1e:
                    c0:0e:12:b3:49:2d:a0:5e:68:c9:bc:6b:97:c6:ff:
                    86:4b:13:af:ac:26:c1:50:cd:58:9e:51:01:47:97:
                    9b:1a:a3:68:7c:bc:14:ae:b5:08:fd:bb:86:bd:e8:
                    a9:31:89:00:48:fa:9a:3f:93:03:a6:62:22:8a:41:
                    13:b2:2e:e3:e5:0c:21:36:9a:82:d1:57:ab:6e:f6:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4C:36:CC:62:FE:16:8F:53:D3:37:E7:FE:8D:B4:28:82:A5:7A:50
            X509v3 Authority Key Identifier:
                keyid:65:CE:B9:0B:19:B4:93:ED:65:EE:AC:55:96:43:F4:CE:CD:4F:EF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65CEB90B19B493ED65EEAC559643F4CECD4FEF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/1/3133382e3138352e37312e302f32342d3234203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:c6:41:ff:87:ad:d6:7f:d8:96:1f:8b:23:25:61:2a:a8:4a:
         fb:d1:de:b6:5c:1a:75:89:99:69:d5:95:d4:f6:8f:20:70:cb:
         e2:d1:4d:69:7a:42:c7:85:1f:94:03:55:a5:3a:20:60:62:93:
         7b:c8:d1:97:0b:7a:e9:74:26:84:79:c1:a4:82:62:4f:88:85:
         d1:e3:21:8d:79:37:91:cc:7c:e6:17:42:53:0b:5c:b0:2b:a5:
         c3:b5:41:84:dc:db:86:90:43:d8:27:26:0e:e0:de:28:fd:1e:
         ab:42:6a:6b:93:77:74:45:64:82:ec:58:9f:d7:f9:da:af:59:
         07:e3:26:ac:03:40:9a:b5:2f:16:b3:33:19:87:b2:f8:6b:ee:
         69:e5:ae:8a:67:8f:59:9f:a1:ea:85:ca:d8:28:b1:b5:d8:af:
         f8:9c:75:cb:79:55:d3:d1:f1:5b:ba:ab:67:3c:40:52:c6:80:
         08:29:08:d2:ae:7e:46:28:21:db:83:aa:ca:ab:5e:d4:0e:88:
         e0:9e:bc:fb:e5:54:12:0a:37:98:55:11:f3:9f:08:56:de:88:
         9c:00:e3:93:30:0c:93:28:5f:b8:0c:7a:e3:c7:8a:d1:37:6a:
         eb:8e:05:78:b1:ad:a5:09:3f:cb:44:a9:11:59:56:6c:d0:a1:
         4a:8b:1d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:05:17 2024 by rpki-client on console.sobornost.net