Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa
File:                     3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa (raw, json)
Hash identifier:          CyPqxDDo/tBU+Kvl62EfvT6uUFtUr8/ng/JpBUsOPrw=
Subject key identifier:   5F:06:19:C1:F1:DA:B7:7A:5A:72:1A:B0:98:F3:B3:B8:DA:A4:85:98
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       3BFB401D8AC94192F505E2E12180E4E6F5FBD196
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa
Signing time:             Thu 04 Apr 2024 00:41:26 +0000
ROA not before:           Thu 04 Apr 2024 00:36:26 +0000
ROA not after:            Thu 03 Apr 2025 00:41:26 +0000
asID:                     263961
IP address blocks:        138.255.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
                          rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fb:40:1d:8a:c9:41:92:f5:05:e2:e1:21:80:e4:e6:f5:fb:d1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Apr  4 00:36:26 2024 GMT
            Not After : Apr  3 00:41:26 2025 GMT
        Subject: CN=5F0619C1F1DAB77A5A721AB098F3B3B8DAA48598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b0:9b:4f:5c:e1:8b:c1:d2:19:51:88:0c:cf:
                    66:6e:74:28:ed:04:e5:87:ae:a4:c9:d9:e2:50:28:
                    4a:c4:14:58:c5:d1:b0:3e:5e:f6:23:fc:be:58:ef:
                    e6:69:34:6d:60:8e:41:41:26:87:e3:8b:ca:08:69:
                    38:0e:f2:1e:13:87:56:10:e9:46:67:bd:d2:37:74:
                    b2:8e:6b:79:62:e2:ed:b9:39:38:0b:83:94:03:b5:
                    16:bc:9c:0b:5c:53:8f:ac:2a:7e:6d:43:b3:b4:72:
                    4d:8d:f4:53:85:55:38:cb:89:1a:c5:c4:57:65:2b:
                    16:eb:21:ea:12:82:25:f4:3f:48:f3:13:73:95:1c:
                    4b:d9:eb:58:1e:8a:a8:d7:e9:23:80:86:ac:6c:05:
                    6f:13:3b:24:b6:2c:79:73:a4:e1:f4:96:43:ff:e8:
                    f9:27:72:fd:82:9a:77:3b:92:4a:83:f9:ac:35:fa:
                    94:16:ae:84:1a:a6:32:95:66:04:a2:ff:91:ae:a7:
                    23:58:b3:b6:24:7d:ad:ac:49:14:25:3d:9b:2b:97:
                    a3:39:10:4e:52:91:8f:65:07:0c:e5:87:34:26:a4:
                    78:b1:3a:0c:b0:5f:19:da:e1:65:b6:4f:db:0b:2d:
                    ef:c3:b1:e6:6c:f9:0c:8b:8e:da:4e:6a:b0:e7:24:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:06:19:C1:F1:DA:B7:7A:5A:72:1A:B0:98:F3:B3:B8:DA:A4:85:98
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130342e302f32342d3234203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:bd:c1:c8:ec:79:5e:67:58:26:b3:13:11:5e:a8:da:87:a3:
         4c:af:79:9b:1c:f7:5e:a9:19:e2:fd:5b:f5:ab:ce:81:37:10:
         6a:2b:43:18:32:c5:8d:3d:df:55:81:5c:fc:18:cf:47:fa:50:
         f7:d6:c5:be:72:08:96:39:aa:fa:50:05:d6:85:26:9c:5c:7f:
         de:45:6d:05:75:dc:56:90:e0:46:88:a6:41:47:a1:0a:74:7a:
         a7:86:25:da:7f:e5:ff:4c:67:1c:0a:0e:06:30:64:4c:f6:af:
         7d:62:ed:8d:d8:86:ce:6a:60:f7:91:1a:71:9e:8d:18:c2:35:
         be:fb:71:d1:1a:5f:c0:c4:7e:7a:e4:25:34:7e:68:61:a3:ee:
         dd:8c:02:fb:ab:4c:b2:ff:aa:4a:9d:0a:58:dd:3d:0b:00:87:
         3c:63:78:8a:f9:e3:41:11:88:a1:84:57:83:f4:66:69:2a:ee:
         32:5e:b7:79:2c:fe:e9:32:be:39:bf:7f:43:f4:5d:f0:fe:ed:
         01:57:f5:90:0e:b5:69:d8:c6:ee:d4:09:b6:7f:fe:74:9d:1e:
         aa:ad:4e:2b:98:91:fa:ee:e9:48:08:f7:61:a2:46:85:48:bb:
         d9:c2:ee:f6:fc:84:b5:a4:6f:af:aa:68:76:1f:56:18:bb:3b:
         ed:1c:4a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org