Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
File:                     3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa (raw, json)
Hash identifier:          19nPFkkYhyzcSO607f///8Jzo4IFqd+gG+1vIzy44gs=
Subject key identifier:   B6:3D:EC:F6:26:C4:CC:85:4F:AD:D4:5D:F1:42:4C:8C:95:A6:CE:4C
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       0CD9276AC28F694D237194207B5EEA4006B6E92C
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa
Signing time:             Thu 04 Apr 2024 21:58:12 +0000
ROA not before:           Thu 04 Apr 2024 21:53:12 +0000
ROA not after:            Thu 03 Apr 2025 21:58:12 +0000
asID:                     263650
IP address blocks:        138.255.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d9:27:6a:c2:8f:69:4d:23:71:94:20:7b:5e:ea:40:06:b6:e9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Apr  4 21:53:12 2024 GMT
            Not After : Apr  3 21:58:12 2025 GMT
        Subject: CN=B63DECF626C4CC854FADD45DF1424C8C95A6CE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:59:df:9e:5e:c2:b1:2b:8c:84:76:25:ea:
                    09:e7:09:84:2b:4a:80:0b:7f:66:4b:a1:b6:93:10:
                    55:c3:cb:89:8d:8a:9c:25:9f:af:27:65:5f:41:00:
                    33:3f:cc:39:48:b7:6b:5b:6b:d0:2c:45:f3:62:f2:
                    c5:1c:61:34:f3:d9:d7:de:21:f7:92:54:1b:4b:25:
                    a3:8f:60:be:4d:88:cb:3d:0e:51:f6:39:95:10:92:
                    b5:1f:33:1e:96:b8:cf:bc:4c:8f:71:de:4d:19:48:
                    d5:87:3e:56:f1:f9:c8:b4:d5:82:c7:c8:48:a2:11:
                    0c:05:1a:84:c7:af:05:46:74:d0:f2:f9:1e:d7:7e:
                    d3:24:63:4e:24:cc:01:2e:47:4f:9f:87:ba:87:1e:
                    79:58:27:ca:f6:19:60:7d:11:88:df:02:45:f5:34:
                    cb:38:26:cf:41:3e:db:f8:3c:d7:ac:30:1e:29:1f:
                    27:66:67:ec:cf:7a:b6:53:df:c0:6d:56:d8:10:51:
                    a8:3e:3b:a7:f3:96:8f:79:18:48:fd:99:4d:01:cd:
                    3a:4d:58:99:a2:d0:28:8d:49:f9:ef:fc:80:27:72:
                    e9:3c:5a:87:22:fb:ea:0e:37:b2:e4:fc:a4:35:af:
                    3b:9f:c8:eb:b1:25:60:59:d9:df:76:0d:d4:89:b6:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3D:EC:F6:26:C4:CC:85:4F:AD:D4:5D:F1:42:4C:8C:95:A6:CE:4C
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32322d3232203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:60:53:c6:13:1b:eb:69:3e:bc:80:11:b1:98:5e:94:0d:84:
         85:b0:34:41:81:54:93:53:62:30:fe:bd:3c:e9:1f:66:28:a3:
         34:49:a7:17:fd:d2:7e:2b:e1:8e:1c:a2:25:21:60:92:24:fa:
         48:48:32:60:5f:24:2c:53:23:23:0c:d3:1d:00:6e:b7:7d:aa:
         62:21:44:98:b2:37:21:5f:27:1a:56:7e:69:8f:bc:f6:5d:8d:
         5a:29:2c:55:21:79:45:11:85:12:e0:1e:0a:3a:35:ef:65:58:
         3f:64:8d:01:b2:e4:8d:57:a3:20:ee:06:a7:5c:b4:03:45:34:
         88:c5:ab:46:6c:10:75:72:23:0c:60:59:88:3e:57:c5:8c:64:
         64:3c:5c:60:96:80:0e:c6:a0:64:60:bc:68:68:b6:5c:00:f6:
         f9:72:ae:c6:93:bd:3d:1d:b2:2f:91:83:f2:27:1c:ea:a4:c0:
         5b:33:70:2d:94:75:53:6b:60:c5:6d:a4:50:9c:0a:ef:c7:b6:
         fd:d6:74:36:29:81:ba:35:bb:8e:ed:c9:87:9b:5d:13:3b:c8:
         55:19:ba:74:c7:71:6b:ed:45:53:4e:2f:ce:72:76:cb:7d:9f:
         22:07:fd:ec:46:05:e4:91:9b:c1:13:e1:79:ea:3b:0a:49:c1:
         e7:80:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org