Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130362e302f32332d3233203d3e20323633393631.roa
File:                     3133382e3235352e3130362e302f32332d3233203d3e20323633393631.roa (raw, json)
Hash identifier:          664LoWYRT+pTE7d9DAdINJ6xKP+N7ygNk5r8K0H3yrY=
Subject key identifier:   C6:6A:BA:DA:C3:05:F2:46:D6:70:8B:8B:60:50:38:62:96:66:FE:24
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       7A8970C4CA0DC3504FB1D831CE33ECCE9E596829
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130362e302f32332d3233203d3e20323633393631.roa
Signing time:             Thu 04 Apr 2024 00:41:27 +0000
ROA not before:           Thu 04 Apr 2024 00:36:27 +0000
ROA not after:            Thu 03 Apr 2025 00:41:27 +0000
asID:                     263961
IP address blocks:        138.255.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
                          rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:89:70:c4:ca:0d:c3:50:4f:b1:d8:31:ce:33:ec:ce:9e:59:68:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Apr  4 00:36:27 2024 GMT
            Not After : Apr  3 00:41:27 2025 GMT
        Subject: CN=C66ABADAC305F246D6708B8B605038629666FE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f3:bb:78:1e:01:94:b9:2b:e8:5a:d8:dc:99:
                    20:7c:e1:16:bb:5d:15:09:a5:b3:87:25:51:c4:58:
                    41:4a:ce:41:a8:8a:d9:4e:42:7f:db:ee:f1:ce:fd:
                    1c:ad:74:4c:75:07:0c:50:b3:98:00:2f:67:e8:d9:
                    75:42:48:91:18:1c:47:45:12:bf:17:49:03:5a:cc:
                    2f:0b:9c:e0:8d:3e:3d:6e:9b:f6:5a:54:c2:bf:4d:
                    73:43:14:77:45:ea:66:dd:87:bb:fc:25:2e:8e:93:
                    30:6f:e1:a8:c8:d6:8f:7d:2e:2d:e0:fc:49:f4:e1:
                    13:9c:7b:40:89:a3:b4:e5:45:1d:ba:c9:26:28:4c:
                    64:96:8a:08:c7:2c:e0:c3:a9:70:4a:74:57:4e:c0:
                    00:e9:02:bf:2f:bf:35:86:7a:78:f7:7f:cc:09:6c:
                    c3:8d:40:76:a4:62:05:c3:08:d9:ee:b7:01:a8:ba:
                    6b:57:68:d0:5b:99:da:a4:74:c4:e9:73:ff:2d:50:
                    fc:58:23:e2:96:ae:5d:82:5b:d1:07:7a:90:cd:3d:
                    af:6c:01:89:1d:e5:82:dc:94:f9:c4:82:86:27:2d:
                    0b:c0:97:e2:48:7b:96:85:73:69:24:e4:9d:5f:51:
                    62:56:1e:00:2b:04:fb:70:bb:a2:bf:fc:60:cc:7c:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6A:BA:DA:C3:05:F2:46:D6:70:8B:8B:60:50:38:62:96:66:FE:24
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130362e302f32332d3233203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:f1:2a:85:4f:ea:4c:e6:ca:dd:7a:f3:d5:30:db:45:63:20:
         73:81:14:de:36:a4:a8:47:25:aa:9b:87:3f:d4:89:0f:ee:93:
         e5:e8:14:54:65:ef:67:94:30:b5:2a:29:c3:3e:4b:5e:ab:4c:
         e6:53:dc:88:69:88:e1:a1:db:82:57:42:35:e1:62:20:0a:ca:
         3f:9d:72:e5:64:ba:61:71:c2:9e:e9:31:a0:8c:6a:84:ab:3d:
         67:e9:53:75:7d:f8:2b:91:ba:43:c0:bf:cd:2e:36:44:6c:6f:
         60:a2:83:d2:24:e4:1b:d9:19:78:c6:fb:43:1f:71:f8:79:71:
         17:b3:97:b7:42:e5:06:92:08:37:0b:16:1c:70:9c:32:40:1a:
         4d:bf:f6:1f:68:3e:d8:c9:ef:f3:42:5e:3f:59:fc:29:32:50:
         01:22:d9:a2:14:84:45:ce:06:47:d5:20:fb:c4:af:67:29:11:
         ec:bc:cb:8c:73:37:71:e1:f2:97:1d:e1:da:e9:7a:93:10:be:
         a3:33:28:69:8e:f8:6a:1f:c5:d9:79:66:19:70:15:de:dc:69:
         2b:34:8f:6f:be:ff:6c:03:54:fd:c6:8c:16:c1:f0:9f:14:1c:
         1e:2f:d7:b4:eb:6c:a2:31:62:f9:45:6c:85:61:14:70:40:71:
         3d:17:cd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org