Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa
File:                     3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          nUQzFXKDl1xujcX4Af9DGcfnUBPhgKYLK4PbMQx9GYM=
Subject key identifier:   B9:65:DF:8C:AA:22:FB:C5:43:93:71:82:73:ED:17:97:E3:E4:93:78
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       289D7B6CC72774F3FFA394301CEB955009DB742E
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa
Signing time:             Thu 04 Apr 2024 21:58:12 +0000
ROA not before:           Thu 04 Apr 2024 21:53:12 +0000
ROA not after:            Thu 03 Apr 2025 21:58:12 +0000
asID:                     263650
IP address blocks:        138.255.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9d:7b:6c:c7:27:74:f3:ff:a3:94:30:1c:eb:95:50:09:db:74:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Apr  4 21:53:12 2024 GMT
            Not After : Apr  3 21:58:12 2025 GMT
        Subject: CN=B965DF8CAA22FBC54393718273ED1797E3E49378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2b:55:35:cd:33:12:ec:78:81:a2:6e:8d:64:
                    05:2f:74:80:b0:0a:61:85:55:9f:54:f4:8b:b3:95:
                    b7:d2:cd:f0:64:47:fd:ec:8c:2e:e7:fb:63:5a:99:
                    fc:c7:31:38:d1:eb:db:e3:0a:6f:71:99:6b:a5:44:
                    4e:87:96:4d:a2:08:da:29:e6:b8:0c:0c:b9:48:39:
                    44:8f:15:2e:76:e7:fa:25:a5:e8:2c:c8:d1:e9:57:
                    45:c5:cf:ba:f7:15:a8:7f:7e:20:aa:79:52:7d:75:
                    c7:ad:45:4c:f6:03:4f:59:85:16:59:59:49:ec:69:
                    35:61:11:f5:23:1f:c4:77:fc:5f:9b:a3:27:c8:c8:
                    e7:f5:50:61:bb:9d:f2:88:f0:f5:45:d0:7c:9f:a2:
                    b7:23:6f:0d:b6:6d:38:dc:db:74:e1:a9:18:6d:c4:
                    ca:5c:2f:b0:6e:20:6d:38:a7:67:25:d4:cf:aa:65:
                    fa:4c:a3:ee:23:b1:06:33:10:ab:9c:66:db:7f:66:
                    b2:8d:b5:0e:53:ff:6e:d4:9f:d7:72:ea:89:00:d5:
                    ba:a3:34:59:e1:22:ce:8c:f0:db:39:1a:43:e8:02:
                    0d:88:25:d0:6b:3c:40:45:a2:ce:34:65:ed:79:b1:
                    38:7b:18:0c:2c:b4:1e:5f:e0:eb:cd:a4:11:4f:79:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:65:DF:8C:AA:22:FB:C5:43:93:71:82:73:ED:17:97:E3:E4:93:78
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:fc:05:30:46:b2:28:82:6e:33:aa:72:b2:9f:3d:cd:bb:b6:
         87:d8:40:8b:89:43:2c:21:f6:80:0d:94:57:76:87:13:7d:38:
         25:51:14:51:a7:4f:00:6a:42:08:50:8e:b5:d7:97:0d:ab:bc:
         7f:bc:df:0c:08:8d:10:c7:d7:99:0c:19:9e:af:2e:6a:28:d8:
         b9:02:b8:df:b4:80:b0:9a:39:44:94:71:43:11:9b:48:ee:5d:
         34:ef:b1:52:63:c4:6d:1e:e1:0f:e8:59:bf:4f:b7:38:d4:53:
         79:7c:c8:37:11:05:ef:86:e9:11:9f:66:28:d1:7b:83:17:aa:
         f8:b4:57:bf:ac:15:cc:2a:d7:c3:db:82:1e:9e:21:98:6a:91:
         31:bf:a2:fc:6b:eb:33:b8:2e:43:2b:a1:75:12:b7:c7:5d:25:
         91:2d:83:3b:cb:28:23:e7:43:e0:73:38:0d:8d:82:57:48:41:
         c9:38:db:50:61:10:22:4d:5a:6b:a1:fe:49:0e:27:92:e6:e5:
         9c:82:96:b3:de:e2:43:e2:23:d0:43:ce:43:1f:14:7a:55:94:
         d1:e8:b3:2f:00:2f:c6:c7:f7:9b:82:12:d1:69:f0:d4:94:f9:
         d6:eb:0b:ea:33:0f:e6:28:8c:8b:28:03:d1:06:02:18:4f:4c:
         9f:e2:7b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:31 2024 by rpki-client on console-fra.rpki-client.org