Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e322e302f32332d3233203d3e20323633393530.roa
File:                     3133382e3235352e322e302f32332d3233203d3e20323633393530.roa (raw, json)
Hash identifier:          Ln1pJplpqyhC+TLTkORheXKvnYL5TW29ERcCAgZavX4=
Subject key identifier:   D8:60:72:DA:CB:B0:2E:8D:CE:96:96:72:FD:85:20:18:59:DE:DB:02
Certificate issuer:       /CN=FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02
Certificate serial:       2F6B59354DF44AE7A2E0590D4ED77CEB4C16EDAF
Authority key identifier: FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e322e302f32332d3233203d3e20323633393530.roa
Signing time:             Thu 04 Apr 2024 04:42:22 +0000
ROA not before:           Thu 04 Apr 2024 04:37:22 +0000
ROA not after:            Thu 03 Apr 2025 04:42:22 +0000
asID:                     263950
IP address blocks:        138.255.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.crl
                          rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6b:59:35:4d:f4:4a:e7:a2:e0:59:0d:4e:d7:7c:eb:4c:16:ed:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02
        Validity
            Not Before: Apr  4 04:37:22 2024 GMT
            Not After : Apr  3 04:42:22 2025 GMT
        Subject: CN=D86072DACBB02E8DCE969672FD85201859DEDB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:46:a1:1d:3d:6b:0c:68:2b:d1:8b:68:84:
                    14:77:6f:ac:1c:76:24:13:0a:7a:eb:de:b7:0b:a0:
                    0a:4c:b6:cd:d8:d5:3e:95:4b:95:f2:29:39:0d:6a:
                    da:04:70:15:73:79:6d:da:88:51:c0:e5:34:2f:df:
                    35:6d:99:39:ad:a9:47:e2:bb:d7:d2:1a:1f:f0:aa:
                    3b:75:74:fa:d9:5e:20:42:96:a0:57:cd:d2:36:f6:
                    16:3b:ee:b4:80:fd:5b:6e:54:bc:d3:ad:ce:ff:fe:
                    f4:a8:ac:ea:9a:70:93:99:7b:3b:6d:5c:eb:78:95:
                    41:b5:e6:d3:90:de:d4:d8:5d:e3:de:02:aa:ed:07:
                    85:56:b1:4f:39:27:a8:6a:7e:86:47:eb:42:b6:ff:
                    a1:b7:45:55:d1:17:46:a7:ec:89:8e:c6:7d:66:48:
                    8a:97:ad:61:54:9f:f7:e2:b4:d7:e8:1b:61:9f:97:
                    cb:ee:7a:fa:c6:a3:aa:f3:7f:73:29:b6:f4:3f:d5:
                    d0:a3:b8:31:4e:d3:12:88:94:42:f3:21:40:e5:11:
                    df:11:1a:e9:ff:c2:ad:14:e6:1a:6b:97:72:f5:2d:
                    c1:65:93:1c:63:e9:46:37:6f:ce:2f:41:1c:cb:79:
                    68:73:58:c9:0c:2a:46:40:7e:1a:8a:d3:34:94:13:
                    68:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:60:72:DA:CB:B0:2E:8D:CE:96:96:72:FD:85:20:18:59:DE:DB:02
            X509v3 Authority Key Identifier:
                keyid:FB:C9:D1:E6:E8:83:8C:63:E5:F2:7A:DF:22:26:EA:1E:61:C9:1F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBC9D1E6E8838C63E5F27ADF2226EA1E61C91F02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/1/3133382e3235352e322e302f32332d3233203d3e20323633393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:d8:33:28:fc:f0:12:1d:93:f1:b3:9a:6a:28:41:3e:b0:b9:
         59:de:43:f3:e5:8c:21:09:86:3a:36:45:0d:67:76:9e:21:62:
         f0:36:56:37:99:d7:ce:13:08:69:39:da:68:b7:02:6b:d4:29:
         33:08:e6:35:21:91:57:ea:e8:f0:26:48:61:16:85:1a:90:0e:
         a6:1a:71:d5:44:5f:65:88:72:53:c3:55:23:95:50:c7:33:58:
         0c:a1:dd:7e:d3:9b:80:0c:97:46:5a:4a:c3:12:5c:c6:a8:4b:
         d6:6a:0c:48:9a:3d:ac:28:bd:f1:07:f4:7a:d0:0e:ce:e2:b7:
         fa:68:d1:42:15:9a:0e:40:1e:bd:13:fd:12:00:be:7e:0a:b4:
         42:a0:7b:b3:17:21:79:d4:44:62:f9:cf:bb:9c:43:4a:34:18:
         0f:07:47:e0:f2:43:ee:72:fc:13:c1:6f:37:66:db:ac:cb:7e:
         65:1b:0d:d0:bf:ac:75:fa:20:b5:c7:13:86:26:c4:7d:f1:39:
         6d:60:7c:26:c1:a4:da:ef:ca:09:75:7a:4d:2e:3a:b1:29:36:
         dd:ed:bd:4a:85:96:0e:40:80:85:fa:ea:f5:77:6d:17:2f:9a:
         d6:8e:bb:d6:bc:56:b8:38:84:75:f0:08:d6:1a:ab:a9:66:8e:
         2a:69:94:3a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUL2tZNU30Suei4FkNTtd860wW7a8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJDOUQxRTZFODgzOEM2M0U1RjI3QURGMjIyNkVBMUU2
MUM5MUYwMjAeFw0yNDA0MDQwNDM3MjJaFw0yNTA0MDMwNDQyMjJaMDMxMTAvBgNV
BAMTKEQ4NjA3MkRBQ0JCMDJFOERDRTk2OTY3MkZEODUyMDE4NTlERURCMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMkahHT1rDGgr0YtohBR3b6wc
diQTCnrr3rcLoApMts3Y1T6VS5XyKTkNatoEcBVzeW3aiFHA5TQv3zVtmTmtqUfi
u9fSGh/wqjt1dPrZXiBClqBXzdI29hY77rSA/VtuVLzTrc7//vSorOqacJOZeztt
XOt4lUG15tOQ3tTYXePeAqrtB4VWsU85J6hqfoZH60K2/6G3RVXRF0an7ImOxn1m
SIqXrWFUn/fitNfoG2Gfl8vuevrGo6rzf3MptvQ/1dCjuDFO0xKIlELzIUDlEd8R
Gun/wq0U5hprl3L1LcFlkxxj6UY3b84vQRzLeWhzWMkMKkZAfhqK0zSUE2grAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU2GBy2suwLo3OlpZy/YUgGFne2wIwHwYDVR0j
BBgwFoAU+8nR5uiDjGPl8nrfIibqHmHJHwIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xcmtybXU0NG82NndBUHZZQzgxR21xMnVFMzdZRnY0Z1JaQ05ib2l5RDNj
LzEvRkJDOUQxRTZFODgzOEM2M0U1RjI3QURGMjIyNkVBMUU2MUM5MUYwMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GQkM5RDFFNkU4ODM4QzYzRTVG
MjdBREYyMjI2RUExRTYxQzkxRjAyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
cmtybXU0NG82NndBUHZZQzgxR21xMnVFMzdZRnY0Z1JaQ05ib2l5RDNjLzEvMzEz
MzM4MmUzMjM1MzUyZTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMzMzkz
NTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBiv8CMA0GCSqGSIb3DQEBCwUAA4IBAQC32DMo/PASHZPx
s5pqKEE+sLlZ3kPz5YwhCYY6NkUNZ3aeIWLwNlY3mdfOEwhpOdpotwJr1CkzCOY1
IZFX6ujwJkhhFoUakA6mGnHVRF9liHJTw1UjlVDHM1gMod1+05uADJdGWkrDElzG
qEvWagxImj2sKL3xB/R60A7O4rf6aNFCFZoOQB69E/0SAL5+CrRCoHuzFyF51ERi
+c+7nENKNBgPB0fg8kPucvwTwW83Ztusy35lGw3Qv6x1+iC1xxOGJsR98TltYHwm
waTa78oJdXpNLjqxKTbd7b1KhZYOQICF+ur1d20XL5rWjrvWvFa4OIR18AjWGqup
Zo4qaZQ6
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:01 2024 by rpki-client on console-ams.rpki-client.org