Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35322e302f32332d3233203d3e20323730393430.roa
File:                     3133382e3235352e35322e302f32332d3233203d3e20323730393430.roa (raw, json)
Hash identifier:          rPU9hFRIBCg4MEk2qrGlYOHyH9b/MfLnPhHHv6LfsD4=
Subject key identifier:   18:0D:36:12:55:40:EA:4D:C8:BF:06:FB:00:45:84:01:6E:FE:B1:67
Certificate issuer:       /CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
Certificate serial:       52757E0EF6EE22636805F4E6FB3058A7009E549F
Authority key identifier: 72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35322e302f32332d3233203d3e20323730393430.roa
Signing time:             Fri 09 Aug 2024 19:09:24 +0000
ROA not before:           Fri 09 Aug 2024 19:04:24 +0000
ROA not after:            Fri 08 Aug 2025 19:09:24 +0000
asID:                     270940
IP address blocks:        138.255.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl
                          rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:75:7e:0e:f6:ee:22:63:68:05:f4:e6:fb:30:58:a7:00:9e:54:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
        Validity
            Not Before: Aug  9 19:04:24 2024 GMT
            Not After : Aug  8 19:09:24 2025 GMT
        Subject: CN=180D36125540EA4DC8BF06FB004584016EFEB167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fb:3c:c0:38:9f:34:d6:67:d2:b3:89:27:d5:
                    55:d5:86:6a:99:99:5b:c3:fa:5e:b4:92:93:ec:52:
                    f2:38:45:bd:06:db:12:59:5c:32:08:0b:cf:d3:f7:
                    82:13:1f:a7:02:a8:ae:03:31:0a:8e:f0:a9:77:1c:
                    df:37:d5:68:b5:b9:aa:2f:f3:f2:73:a4:82:43:a0:
                    41:df:b9:b7:37:b0:4e:aa:7a:6c:71:54:6c:eb:db:
                    d3:ee:95:29:21:9c:f3:21:35:bb:a2:6a:0b:83:ad:
                    9f:44:cd:5d:1a:42:eb:6f:87:f3:fa:a9:36:bb:7c:
                    fd:0b:a0:52:cc:7e:96:4f:bf:e9:8a:c9:f3:cb:a1:
                    02:d3:38:47:44:bf:68:98:18:be:67:7a:e9:cc:6d:
                    53:fe:a2:db:ce:97:2e:8b:4a:38:a1:88:43:a6:88:
                    c9:79:1a:bc:18:c3:71:17:b0:c0:d3:b8:ec:dc:a3:
                    e5:53:29:68:db:e0:89:f4:75:72:5a:e7:0a:4f:a8:
                    4d:ce:06:ff:a2:cf:60:79:f5:5b:c2:c9:3c:49:5e:
                    a2:f9:d4:07:b1:bb:f4:e9:52:39:5a:97:7f:ca:4d:
                    82:71:fa:f8:cd:8f:27:9e:63:2c:ca:3f:2d:08:dd:
                    9e:1b:8d:4a:90:9a:4a:df:b2:e7:86:9d:83:a2:70:
                    0f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0D:36:12:55:40:EA:4D:C8:BF:06:FB:00:45:84:01:6E:FE:B1:67
            X509v3 Authority Key Identifier:
                keyid:72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35322e302f32332d3233203d3e20323730393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:02:7b:01:d4:c3:26:4f:d2:05:07:78:60:22:e4:ef:fb:d4:
         05:e4:ab:5e:5c:ff:18:6c:09:c5:a0:d2:88:b1:bf:1b:35:df:
         1d:dc:c3:30:68:ed:0f:e4:0a:b0:b9:00:6a:d5:5d:77:5a:97:
         cd:2d:22:12:ab:14:91:0b:fc:4d:57:02:71:e3:37:40:f5:40:
         1d:97:4e:3c:36:e6:ef:ef:b0:b2:0d:8e:f2:eb:ab:b9:a2:f0:
         7a:4a:69:38:44:25:b6:5e:e2:4f:20:86:b1:3e:d9:f8:23:de:
         e0:3d:1b:8a:2f:e4:ea:93:1f:e4:69:92:a9:bb:90:6d:fa:fe:
         a9:ee:e3:22:e0:f3:f0:00:be:03:b6:0c:98:88:59:1a:b1:61:
         86:22:65:a3:45:7a:77:6e:16:36:d1:4e:80:bf:32:37:8f:ca:
         f5:b6:aa:23:48:56:6f:8d:74:0a:e8:34:5a:2a:82:c6:d0:d5:
         81:b9:0c:2e:b8:ef:79:f0:14:50:d9:bc:3a:fc:eb:1f:46:cd:
         69:5d:43:cd:15:35:42:d9:2f:f0:3c:9b:7b:c4:16:49:62:98:
         c4:34:85:d8:2d:e4:db:6d:18:00:2b:f7:be:df:e1:d2:27:9b:
         c5:2a:74:00:cf:45:ee:12:0f:14:cb:d6:f8:6a:9d:d5:c4:a2:
         b6:75:0e:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUnV+DvbuImNoBfTm+zBYpwCeVJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJGQ0RBMDdEN0Q1REJBNzdGQ0E0NjlENDBGMjFEODE1
N0YwNkFDMDAeFw0yNDA4MDkxOTA0MjRaFw0yNTA4MDgxOTA5MjRaMDMxMTAvBgNV
BAMTKDE4MEQzNjEyNTU0MEVBNERDOEJGMDZGQjAwNDU4NDAxNkVGRUIxNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw+zzAOJ801mfSs4kn1VXVhmqZ
mVvD+l60kpPsUvI4Rb0G2xJZXDIIC8/T94ITH6cCqK4DMQqO8Kl3HN831Wi1uaov
8/JzpIJDoEHfubc3sE6qemxxVGzr29PulSkhnPMhNbuiaguDrZ9EzV0aQutvh/P6
qTa7fP0LoFLMfpZPv+mKyfPLoQLTOEdEv2iYGL5neunMbVP+otvOly6LSjihiEOm
iMl5GrwYw3EXsMDTuOzco+VTKWjb4In0dXJa5wpPqE3OBv+iz2B59VvCyTxJXqL5
1Aexu/TpUjlal3/KTYJx+vjNjyeeYyzKPy0I3Z4bjUqQmkrfsueGnYOicA9lAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGA02ElVA6k3Ivwb7AEWEAW7+sWcwHwYDVR0j
BBgwFoAUcvzaB9fV26d/ykadQPIdgVfwasAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHU3Z0JyeGVTRVBXZTQxajFBMmtSQUdpWG1qQ0Y0Zzljd3ltQVFVUmR6
c2ovMC83MkZDREEwN0Q3RDVEQkE3N0ZDQTQ2OUQ0MEYyMUQ4MTU3RjA2QUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRkNEQTA3RDdENURCQTc3
RkNBNDY5RDQwRjIxRDgxNTdGMDZBQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh1N2dCcnhlU0VQV2U0MWoxQTJrUkFHaVhtakNGNGc5Y3d5bUFRVVJkenNqLzAv
MzEzMzM4MmUzMjM1MzUyZTM1MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzOTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGK/zQwDQYJKoZIhvcNAQELBQADggEBAGcCewHU
wyZP0gUHeGAi5O/71AXkq15c/xhsCcWg0oixvxs13x3cwzBo7Q/kCrC5AGrVXXda
l80tIhKrFJEL/E1XAnHjN0D1QB2XTjw25u/vsLINjvLrq7mi8HpKaThEJbZe4k8g
hrE+2fgj3uA9G4ov5OqTH+Rpkqm7kG36/qnu4yLg8/AAvgO2DJiIWRqxYYYiZaNF
enduFjbRToC/MjePyvW2qiNIVm+NdAroNFoqgsbQ1YG5DC6473nwFFDZvDr86x9G
zWldQ80VNULZL/A8m3vEFklimMQ0hdgt5NttGAAr977f4dInm8UqdADPRe4SDxTL
1vhqndXEorZ1DiY=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:17 2024 by rpki-client on console-fra.rpki-client.org