Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa
File:                     3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa (raw, json)
Hash identifier:          4UZ0IiMchtp6weIcskWhXKCvIY1Q+e6CtyEZrF4ITlo=
Subject key identifier:   21:0F:E5:A3:D3:6C:76:37:D8:27:72:94:89:AB:80:E6:01:2C:00:DF
Certificate issuer:       /CN=0839492B6227EABB7726A5A064BEBE04E53C824A
Certificate serial:       0746FE6EF94A567B161CB3A04E96731C6309DC69
Authority key identifier: 08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa
Signing time:             Thu 04 Apr 2024 00:41:27 +0000
ROA not before:           Thu 04 Apr 2024 00:36:27 +0000
ROA not after:            Thu 03 Apr 2025 00:41:27 +0000
asID:                     263961
IP address blocks:        138.255.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl
                          rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:46:fe:6e:f9:4a:56:7b:16:1c:b3:a0:4e:96:73:1c:63:09:dc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839492B6227EABB7726A5A064BEBE04E53C824A
        Validity
            Not Before: Apr  4 00:36:27 2024 GMT
            Not After : Apr  3 00:41:27 2025 GMT
        Subject: CN=210FE5A3D36C7637D827729489AB80E6012C00DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:51:53:23:9d:04:b9:f0:cb:88:bd:e9:2e:
                    a5:ee:53:de:89:0b:63:ae:8b:b5:4c:fc:33:d6:6c:
                    db:80:24:41:4f:72:bb:3b:23:72:7c:f7:90:6e:9d:
                    92:6b:23:48:7a:ee:5a:3e:f3:84:4c:28:7a:20:76:
                    6f:f7:fd:af:a3:13:26:0f:ab:51:16:85:48:3d:5a:
                    28:87:96:3c:9b:70:d9:d3:09:c7:2d:99:b3:fe:e7:
                    2d:ad:e3:49:79:44:c4:f6:59:ea:88:65:30:12:b6:
                    cc:a1:17:67:42:a9:e1:cc:55:db:54:03:8f:f3:bf:
                    e0:68:a0:85:d4:a8:36:7d:70:b8:c8:31:fa:85:3c:
                    1f:6d:85:b9:35:44:30:2a:3a:11:e6:7b:2c:61:ba:
                    5e:52:39:d7:7f:1b:bb:c3:db:72:5e:c4:19:e3:5e:
                    23:64:30:9d:40:7b:62:f2:42:02:50:ae:5b:dd:7b:
                    6a:79:8d:73:4f:37:68:ce:6c:17:54:bd:38:4a:0c:
                    78:d4:d8:39:9d:65:90:99:f3:43:fd:7e:ee:a0:0b:
                    73:6b:d2:a8:a0:5d:e3:b6:9d:b2:ae:3f:c8:e3:e9:
                    1f:30:d2:27:ae:83:61:81:3a:7d:c6:40:33:f2:08:
                    21:16:81:80:93:01:af:92:1a:d7:eb:7b:60:4b:02:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0F:E5:A3:D3:6C:76:37:D8:27:72:94:89:AB:80:E6:01:2C:00:DF
            X509v3 Authority Key Identifier:
                keyid:08:39:49:2B:62:27:EA:BB:77:26:A5:A0:64:BE:BE:04:E5:3C:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/0839492B6227EABB7726A5A064BEBE04E53C824A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0839492B6227EABB7726A5A064BEBE04E53C824A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/1/3133382e3235352e3130372e302f32342d3234203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:26:88:45:f1:64:41:f5:e5:10:ef:91:29:eb:46:af:5b:13:
         b7:2d:33:90:ee:13:0f:38:9b:82:2c:84:16:06:e1:bc:a5:19:
         54:f1:a0:eb:8a:a8:3d:e2:f2:a5:5d:06:11:bf:30:c4:d9:84:
         d3:58:c9:a0:57:db:bb:45:b5:45:79:79:12:1c:31:a1:5a:72:
         3d:5c:7f:34:a1:1b:03:23:4e:2e:0a:21:9d:c4:78:29:33:b8:
         1d:56:0e:f4:80:7d:3b:50:15:76:1c:66:62:8c:a3:79:92:50:
         51:a6:02:ca:94:84:14:01:09:3f:ec:ec:ba:26:88:4c:02:c2:
         d2:fe:96:50:a6:98:34:8a:30:e7:33:48:56:10:c9:8c:51:d1:
         81:58:8c:b5:05:1d:5c:3f:be:24:ee:b5:e9:2b:29:9a:54:39:
         fc:08:6e:06:59:40:9b:15:15:9b:a7:2f:bc:ba:86:54:c5:a2:
         b3:ec:94:40:80:5b:21:0d:d6:7d:11:a2:b6:02:25:40:d0:20:
         27:6d:a5:d1:95:b3:29:98:20:4b:fd:03:44:cf:75:42:80:98:
         ad:d5:af:d5:88:da:c0:5a:a3:44:8f:8c:47:b6:05:2d:aa:41:
         4d:dd:1e:bc:92:90:0e:6f:ea:ee:59:6d:7a:46:0a:1b:f2:73:
         02:ee:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org