Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa
File:                     3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa (raw, json)
Hash identifier:          VBsSEyKQ59A0NnZkMMP5c0UZKVPUbvQAFqQkghUcgRw=
Subject key identifier:   ED:60:26:17:98:A0:4E:86:61:75:C8:5C:7E:1C:B0:17:EA:0D:0D:EB
Certificate issuer:       /CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
Certificate serial:       4F01738C8CB76FBC709CD3474F03D226B3D034EC
Authority key identifier: AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa
Signing time:             Fri 05 Apr 2024 00:17:58 +0000
ROA not before:           Fri 05 Apr 2024 00:12:58 +0000
ROA not after:            Fri 04 Apr 2025 00:17:58 +0000
asID:                     264565
IP address blocks:        138.255.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl
                          rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:01:73:8c:8c:b7:6f:bc:70:9c:d3:47:4f:03:d2:26:b3:d0:34:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC40A1FA2C73E550F9412754FDDAA22E993A0D26
        Validity
            Not Before: Apr  5 00:12:58 2024 GMT
            Not After : Apr  4 00:17:58 2025 GMT
        Subject: CN=ED60261798A04E866175C85C7E1CB017EA0D0DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:07:b0:b5:e3:98:8f:f6:85:62:bc:26:36:
                    09:f1:09:9d:36:b7:89:f0:83:6b:46:37:29:b5:a3:
                    d3:88:ce:e3:f3:59:e4:90:0d:7e:39:c0:d1:00:b5:
                    8a:40:f5:86:1c:00:5d:8b:6f:24:de:f1:96:b7:a3:
                    49:b6:d0:a4:d1:99:e1:df:29:40:4c:36:8e:fe:4c:
                    d0:b9:29:4a:a0:73:16:df:ad:79:39:5c:84:b2:ff:
                    70:3a:c3:49:d8:54:ce:17:ab:70:d9:a0:1a:0e:ae:
                    96:a9:98:e8:25:51:0d:43:a9:42:f6:50:65:bb:72:
                    b7:3a:16:f8:76:89:80:be:67:21:07:c9:9a:37:9a:
                    c8:29:10:1d:b5:19:d7:06:24:a0:c2:f2:58:e5:6d:
                    8d:2b:8e:80:c5:38:6b:b8:39:0f:eb:5e:eb:0a:a5:
                    d1:ff:d4:88:59:84:85:74:18:c7:dd:01:94:9c:45:
                    b5:ad:89:7c:0c:d3:4c:d7:ea:1e:d0:f7:80:35:fd:
                    59:d6:70:d7:28:7b:69:1a:39:79:9c:bf:44:51:db:
                    63:f6:44:a7:7b:64:03:aa:fc:38:5c:df:a3:69:2a:
                    2a:5f:52:72:a2:a2:34:bd:34:58:85:6e:c1:70:66:
                    b6:69:12:fc:14:9e:78:ed:45:b1:e8:44:f0:68:ce:
                    5a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:60:26:17:98:A0:4E:86:61:75:C8:5C:7E:1C:B0:17:EA:0D:0D:EB
            X509v3 Authority Key Identifier:
                keyid:AC:40:A1:FA:2C:73:E5:50:F9:41:27:54:FD:DA:A2:2E:99:3A:0D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC40A1FA2C73E550F9412754FDDAA22E993A0D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/1/3133382e3235352e34382e302f32322d3234203d3e20323634353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:c6:66:e3:90:40:17:e7:b7:ea:ac:8b:2d:a9:cd:c0:ce:8b:
         ac:8c:27:8e:f2:ec:48:9d:3e:4d:7a:f6:b1:f5:12:ad:d1:7f:
         04:49:be:04:33:07:67:91:24:d5:81:fc:75:b8:95:9b:69:2b:
         83:0d:66:a2:b9:a7:6e:1e:56:71:f8:53:a5:9e:11:fa:ff:e6:
         93:d1:6c:76:11:c2:99:e4:c8:7d:7c:b0:b5:a8:84:8d:99:8f:
         78:ae:98:66:d3:5c:7b:dc:b7:69:fc:28:90:6d:1a:57:66:e8:
         af:a1:22:58:56:fc:d1:4f:7f:fd:f2:a0:b8:63:8d:53:47:07:
         66:12:63:93:d7:5b:d1:6c:92:f7:3c:30:92:63:b6:64:bb:7d:
         93:9e:db:a9:a6:1c:72:cd:e6:2b:6a:84:d2:19:e3:af:bd:c6:
         65:98:11:76:28:a8:1f:b2:4c:b9:2a:86:38:de:4e:f9:4c:39:
         fd:22:a7:85:fe:a9:d9:02:9b:da:6c:df:61:63:a1:44:ae:b2:
         57:bd:58:82:51:4c:e9:e5:73:03:35:68:40:ad:bd:20:6c:62:
         0c:2b:57:20:1d:f8:be:e2:ab:54:b8:9e:80:1c:53:26:cc:bc:
         cd:1a:74:7e:cf:c3:e0:89:72:fd:1c:4d:a8:0f:f3:72:99:f0:
         4e:5d:2e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:34 2024 by rpki-client on console-ams.rpki-client.org