Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa
File:                     3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa (raw, json)
Hash identifier:          z6hqrhzIEQ7i/XVz4kqbq/23XZ2nChPTd9QvnZVmvns=
Subject key identifier:   2F:37:E4:DA:1E:C6:70:C3:6B:67:1C:A7:65:17:5C:A5:81:2B:69:43
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       660FD0F0A8DDE0574AE2B41E038CB445B6F6F0A8
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa
Signing time:             Thu 04 Apr 2024 21:58:12 +0000
ROA not before:           Thu 04 Apr 2024 21:53:12 +0000
ROA not after:            Thu 03 Apr 2025 21:58:12 +0000
asID:                     263650
IP address blocks:        138.255.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0f:d0:f0:a8:dd:e0:57:4a:e2:b4:1e:03:8c:b4:45:b6:f6:f0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Apr  4 21:53:12 2024 GMT
            Not After : Apr  3 21:58:12 2025 GMT
        Subject: CN=2F37E4DA1EC670C36B671CA765175CA5812B6943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:ef:84:3e:49:33:15:8b:6e:2a:a3:e8:66:
                    7c:59:00:35:14:ca:54:c4:3b:40:aa:12:78:e9:48:
                    7d:33:a1:b9:5c:d4:f9:62:8c:eb:ab:01:35:e9:d7:
                    70:b4:33:58:94:b6:c4:84:c6:53:91:13:c5:bb:59:
                    89:ed:59:6b:35:54:91:0f:0e:a0:8c:c8:9e:2f:cb:
                    21:0c:47:7b:68:a7:3f:b7:7e:22:bb:fe:dd:6a:5b:
                    18:47:7d:be:de:d4:34:07:cc:1d:00:bf:94:71:cd:
                    41:29:08:95:83:2b:ea:8d:f5:7d:1a:93:8c:77:d2:
                    20:dd:06:b4:a9:59:6d:cb:d4:d5:32:ee:7a:6c:5b:
                    07:60:2a:95:2c:50:dc:0d:fa:5b:47:fa:30:a0:68:
                    8a:4b:fd:a1:c8:f4:04:24:e9:eb:86:a4:74:90:6a:
                    0d:77:1f:37:49:51:ac:dc:c9:8f:f5:10:01:a8:f6:
                    31:64:46:b4:9a:bd:de:e8:f0:32:25:11:4b:37:22:
                    57:53:00:85:b9:ce:84:80:c7:a2:2a:e6:2c:fd:dc:
                    e1:39:0f:22:66:d1:a4:ac:92:09:19:88:8a:9d:1b:
                    13:1d:89:94:3d:dd:d8:e3:24:0f:e4:b4:64:09:9e:
                    3a:fb:69:39:ac:bc:03:52:e2:df:a9:ea:ba:77:4c:
                    72:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:37:E4:DA:1E:C6:70:C3:6B:67:1C:A7:65:17:5C:A5:81:2B:69:43
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3134382e302f32332d3233203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:7d:26:e6:bc:ca:13:c4:03:b2:b3:c6:58:49:9f:28:7a:51:
         c1:8f:ac:86:b2:22:4c:8e:0a:97:c9:79:20:19:a3:36:02:fb:
         56:5a:f2:8b:ac:2a:2e:ee:59:9c:8b:bb:a3:bb:e0:84:6e:20:
         f4:03:42:e1:31:c1:0a:a1:ee:4c:89:49:b2:ec:9d:47:b5:39:
         71:18:9e:c8:11:5e:74:a8:1b:75:91:e9:da:8a:25:37:8f:1d:
         40:99:97:2b:4a:4a:81:72:76:56:09:fa:76:69:69:db:ba:ea:
         c9:58:32:e7:e5:24:b3:0e:3e:78:0f:bb:89:ee:c5:84:21:5f:
         af:b3:53:db:26:d4:25:19:95:51:42:6b:57:fc:3f:29:e1:a1:
         34:29:6d:0f:d7:93:c8:27:c5:3a:6a:68:d5:2a:12:d3:2b:ef:
         bd:78:bc:1b:d5:19:b5:da:3c:de:49:3d:02:34:6f:73:26:bf:
         28:23:03:bc:3e:c3:91:78:5d:ad:d4:df:83:b9:1d:87:64:97:
         bd:f9:c2:44:50:57:25:95:89:6f:3b:e7:43:db:44:ae:e4:3b:
         f6:12:71:1b:c1:1c:f0:a9:5b:79:7b:cf:bd:a3:73:4f:78:b1:
         f6:69:5f:ea:52:a8:f8:d7:ea:1d:4f:7c:74:92:10:f1:ce:5c:
         06:ea:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:33 2024 by rpki-client on console-fra.rpki-client.org