Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa
File:                     3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa (raw, json)
Hash identifier:          cMO6wKTexebQ0aS86saISVc41XVT75su5tWQ9k/xD/4=
Subject key identifier:   EF:1B:95:10:6F:62:37:C4:A8:31:FA:BC:F6:AB:2B:06:A8:A7:A8:93
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       4F41B87620F13D26B64B58D0E2322FEA8B328F3D
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa
Signing time:             Thu 04 Apr 2024 00:41:27 +0000
ROA not before:           Thu 04 Apr 2024 00:36:27 +0000
ROA not after:            Thu 03 Apr 2025 00:41:27 +0000
asID:                     263961
IP address blocks:        138.255.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
                          rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:41:b8:76:20:f1:3d:26:b6:4b:58:d0:e2:32:2f:ea:8b:32:8f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Apr  4 00:36:27 2024 GMT
            Not After : Apr  3 00:41:27 2025 GMT
        Subject: CN=EF1B95106F6237C4A831FABCF6AB2B06A8A7A893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:da:69:64:4c:20:19:af:86:f5:7e:d9:1f:
                    fc:5e:42:42:dd:93:47:81:c0:8b:79:78:57:c8:57:
                    21:bb:aa:43:4d:bd:45:e0:7e:64:d9:cd:9e:21:fc:
                    cf:26:74:a9:a5:2c:be:50:a7:f1:58:ca:28:b1:87:
                    d1:4d:c5:26:38:d3:74:84:79:07:cd:ea:cc:5c:ea:
                    9c:16:d0:e5:d2:11:0d:7e:38:42:de:a0:a7:34:83:
                    2d:e6:6a:56:be:43:54:d1:7b:cb:40:ef:71:92:83:
                    dc:30:02:6c:ad:32:47:e9:c8:86:19:ce:f6:02:3a:
                    a0:a7:59:9f:4a:79:f3:f8:44:e1:c1:7e:25:b5:6b:
                    7f:46:be:a8:fc:d0:f6:7e:7e:98:16:fd:c2:39:8e:
                    9d:ab:3a:c8:1f:eb:55:3b:4a:7e:ce:6d:09:57:39:
                    38:93:9b:e1:27:a2:c1:12:96:b9:5b:e7:63:91:3c:
                    95:bc:5a:2f:6d:36:9e:95:17:da:2e:cb:b9:c2:c4:
                    2c:b3:7d:f4:46:df:53:55:a3:f3:d2:e0:1d:85:bc:
                    00:b0:b9:62:ab:07:8c:f0:21:c5:e7:ec:b6:75:a1:
                    26:34:0a:dd:e5:1e:81:5a:57:6a:f2:9f:c2:b3:ec:
                    ce:28:05:12:78:fb:77:00:b1:ac:28:1c:ff:70:c6:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1B:95:10:6F:62:37:C4:A8:31:FA:BC:F6:AB:2B:06:A8:A7:A8:93
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32322d3232203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:7a:14:6e:de:9a:51:b0:2c:64:36:fb:8b:99:41:cc:a7:73:
         00:b8:da:ba:4f:5b:59:e0:c6:62:16:e1:59:54:82:ef:de:ea:
         c3:02:c9:d8:f6:6c:c9:15:c1:2d:4d:8b:44:3c:3f:cc:69:3b:
         30:fd:bc:f7:3b:61:7e:04:c0:60:e5:c7:bd:50:80:6a:9b:e2:
         30:4c:b3:c6:d5:16:e9:cd:79:08:05:26:67:b0:ef:6d:69:87:
         62:9c:ab:69:fa:94:e5:ac:65:17:32:c9:2e:97:24:c3:58:96:
         fe:92:90:92:8a:29:0f:0e:22:bb:7a:79:5b:aa:d9:15:f8:7c:
         dd:21:49:4b:54:ad:2f:98:25:e9:91:5c:ff:ac:4c:1e:89:56:
         46:54:93:31:a7:61:3c:2f:2c:99:e8:3e:fb:6f:91:55:4b:cd:
         34:b7:df:6b:2b:f7:11:81:51:b6:c1:62:1f:6c:d7:48:a1:f5:
         3f:d0:32:64:61:57:d4:0d:03:cb:f7:d2:a4:e1:f5:4a:38:6b:
         94:5d:bc:19:71:9e:b4:b4:ae:9b:72:bb:0f:5d:b7:5c:3f:b4:
         a5:76:7b:d2:79:10:40:8e:3c:eb:5a:cc:ea:4a:bf:4a:35:a8:
         d9:64:d7:54:40:6b:a7:84:97:41:42:36:9c:5a:5d:9c:b6:83:
         71:8f:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org