Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa
File:                     3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          bVFA2g3wM1hcWJXSG4CjdURRM4N3Q1R5K+GBwYMf6XE=
Subject key identifier:   16:F5:6A:CB:A7:D5:0C:55:B5:4F:3A:4D:14:E3:6C:08:7B:A6:E7:7D
Certificate issuer:       /CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
Certificate serial:       68FDA33CC2C836EA10C08981E47ADEA3DA5688AE
Authority key identifier: A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa
Signing time:             Thu 04 Apr 2024 21:58:12 +0000
ROA not before:           Thu 04 Apr 2024 21:53:12 +0000
ROA not after:            Thu 03 Apr 2025 21:58:12 +0000
asID:                     263650
IP address blocks:        138.255.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fd:a3:3c:c2:c8:36:ea:10:c0:89:81:e4:7a:de:a3:da:56:88:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5
        Validity
            Not Before: Apr  4 21:53:12 2024 GMT
            Not After : Apr  3 21:58:12 2025 GMT
        Subject: CN=16F56ACBA7D50C55B54F3A4D14E36C087BA6E77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:fc:a5:01:af:89:4e:b7:67:77:51:d1:23:
                    6e:d3:e8:32:cf:a6:89:c5:e1:14:26:bb:08:08:54:
                    df:59:0d:48:be:ba:59:09:fc:3b:50:5f:45:74:8e:
                    c4:d6:32:12:87:4e:ff:52:04:2d:72:40:4c:46:58:
                    9e:12:d2:b2:a7:e2:b1:cc:c6:da:f4:fe:14:22:2a:
                    bf:8f:7e:bc:d4:4b:48:ee:53:02:5a:41:5e:c4:22:
                    f4:98:22:04:25:13:c9:73:dd:53:cc:f5:7b:77:45:
                    9b:66:7b:fa:28:1b:1f:94:1e:4b:2f:10:a4:bd:18:
                    f3:8c:ed:bd:a6:54:07:9e:e5:66:4f:5e:8a:c2:b4:
                    79:75:a1:72:b1:a6:bd:eb:47:cc:2d:27:55:d8:c3:
                    0c:1e:52:c5:79:ef:ae:8a:e9:72:9b:6e:20:0c:00:
                    ad:9c:47:8c:e4:38:a5:51:c4:46:d3:ab:9a:5c:18:
                    e0:1a:9f:31:da:f2:d5:6d:7c:4b:64:cc:84:d8:e6:
                    a7:50:ea:ef:bc:ab:d3:03:9c:af:53:db:cd:62:59:
                    20:af:9a:e7:6d:83:77:74:72:d2:40:35:5a:d6:91:
                    06:9c:b7:df:26:a8:f9:4b:6a:64:f6:62:76:ca:3d:
                    c9:d2:bb:af:67:73:d0:42:9c:76:1d:f1:1a:c0:4a:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F5:6A:CB:A7:D5:0C:55:B5:4F:3A:4D:14:E3:6C:08:7B:A6:E7:7D
            X509v3 Authority Key Identifier:
                keyid:A3:10:DC:B0:5D:2C:A2:3F:22:30:D8:42:7C:32:EF:F0:CB:FF:42:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A310DCB05D2CA23F2230D8427C32EFF0CBFF42B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/1/3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:04:74:7c:78:3f:b4:69:c5:8d:cb:ac:cf:8b:36:69:12:88:
         55:4b:f2:d2:2a:0f:a5:85:4f:0c:5f:c8:6a:00:7b:d7:22:ee:
         9c:f5:33:fb:23:49:e3:06:dd:1d:4c:a9:8d:99:67:43:e7:66:
         14:ac:3f:fb:71:13:0e:46:98:d2:01:10:c2:79:61:1f:46:73:
         67:75:2d:d6:70:c9:18:ae:e3:e7:35:12:00:b7:e2:11:7d:ad:
         25:ec:6f:b7:4f:86:3b:3d:4b:93:1d:6d:dc:26:e8:6f:40:ba:
         25:2d:c5:8f:25:a5:c7:6d:c4:88:0b:d0:1d:fa:a3:c5:98:71:
         b2:3b:d6:1f:ea:fe:2c:3e:27:01:0f:4d:c7:4b:2a:7f:43:3f:
         3e:bd:f5:7a:bf:84:a5:9d:94:62:42:8d:9e:aa:ac:eb:79:e0:
         df:68:14:b7:a7:ca:a4:41:f5:c6:61:ae:b4:04:f8:57:63:81:
         20:c8:c7:23:00:8c:c1:9a:51:40:a8:f6:e3:a6:7b:68:29:47:
         87:c6:43:b2:34:2b:03:6d:3f:8d:87:dc:11:90:61:bf:3f:99:
         f0:f7:10:c8:f7:91:84:96:86:e2:82:80:ca:ae:36:97:f0:ae:
         77:b8:bf:70:73:0c:9e:ca:3f:bb:72:42:b0:ed:96:1e:0b:76:
         6c:6e:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:05 2024 by rpki-client on console-fra.rpki-client.org