Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35322e302f32342d3234203d3e20323730393430.roa
File:                     3133382e3235352e35322e302f32342d3234203d3e20323730393430.roa (raw, json)
Hash identifier:          hTH2gDob8gZqz/FbFAKdFZ9M5zjTrvZyIBHd2/PcI7k=
Subject key identifier:   48:59:B8:EF:20:39:6F:9E:5B:29:73:06:91:03:F5:84:C8:35:F5:A3
Certificate issuer:       /CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
Certificate serial:       3B4DE5BC002265E14527E4493DB8ED670E76032A
Authority key identifier: 72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35322e302f32342d3234203d3e20323730393430.roa
Signing time:             Fri 09 Aug 2024 19:09:27 +0000
ROA not before:           Fri 09 Aug 2024 19:04:27 +0000
ROA not after:            Fri 08 Aug 2025 19:09:27 +0000
asID:                     270940
IP address blocks:        138.255.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl
                          rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4d:e5:bc:00:22:65:e1:45:27:e4:49:3d:b8:ed:67:0e:76:03:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0
        Validity
            Not Before: Aug  9 19:04:27 2024 GMT
            Not After : Aug  8 19:09:27 2025 GMT
        Subject: CN=4859B8EF20396F9E5B2973069103F584C835F5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:ad:c0:b0:b7:e9:bd:5a:5b:ef:0f:ca:23:
                    ac:7a:8f:a1:6d:52:cb:91:7b:e5:7d:bb:ec:eb:65:
                    d2:96:73:01:8e:a2:e8:4a:a9:31:d3:27:08:fd:63:
                    d3:be:91:ad:9b:f9:7b:1f:52:67:be:6b:51:94:c2:
                    1f:d6:2b:49:8f:c3:c7:e5:68:27:a6:71:28:46:fa:
                    eb:2c:0a:3a:18:57:a5:4f:68:b4:b3:bf:89:89:22:
                    dc:24:53:87:5c:3f:d4:27:c5:55:82:b1:4e:ec:a7:
                    c2:76:03:a3:04:cb:65:a3:18:df:b4:4d:c6:44:a3:
                    c3:cd:62:ec:b6:07:29:39:b4:fc:05:8d:94:9d:8d:
                    89:28:a2:00:cc:61:98:47:33:37:70:83:fe:fc:2c:
                    c0:5b:26:7f:b0:5e:ca:46:62:2a:b5:bb:42:4c:52:
                    52:76:6e:e0:02:bc:16:01:d9:9c:ff:18:56:e5:f2:
                    81:ae:06:83:94:ac:b4:b4:41:78:0a:df:5b:0a:5a:
                    99:1c:dc:3b:7c:43:22:20:f8:1d:8f:4d:22:f6:cb:
                    cd:60:cb:59:8d:09:c0:30:9b:6e:47:7e:db:f1:d8:
                    42:3f:15:af:0c:db:a5:41:34:54:95:33:60:94:13:
                    9e:e2:cc:f3:42:63:57:d2:d2:f5:ab:e1:a7:c4:35:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:59:B8:EF:20:39:6F:9E:5B:29:73:06:91:03:F5:84:C8:35:F5:A3
            X509v3 Authority Key Identifier:
                keyid:72:FC:DA:07:D7:D5:DB:A7:7F:CA:46:9D:40:F2:1D:81:57:F0:6A:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72FCDA07D7D5DBA77FCA469D40F21D8157F06AC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8u7gBrxeSEPWe41j1A2kRAGiXmjCF4g9cwymAQURdzsj/0/3133382e3235352e35322e302f32342d3234203d3e20323730393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:a5:79:a1:12:8f:4c:cc:12:12:cd:92:d5:ef:36:c5:95:
         85:e7:e7:91:0a:a8:d5:81:fe:11:e3:e5:d3:c2:d0:99:aa:8f:
         07:a4:43:ca:38:e2:44:2f:e9:b8:9a:5a:12:2c:5a:e1:58:5d:
         73:ed:c8:71:2b:57:d4:ce:bb:ce:14:2b:f8:5f:60:0f:0a:a8:
         a7:d1:91:17:e3:26:cb:b1:81:a6:0f:4f:98:6d:0b:28:1a:71:
         04:32:93:8c:ac:04:cc:4a:05:06:ee:e1:74:f8:6d:c8:f0:d2:
         a9:86:61:d9:45:14:61:23:94:ef:37:ad:92:3b:c8:d1:14:6a:
         88:2b:6a:ab:b3:99:8e:1f:9e:61:10:6d:c3:01:07:ad:ba:54:
         d4:a8:8c:a3:14:44:1f:97:e2:77:16:c8:a1:cc:68:b4:62:b2:
         f8:17:20:99:03:ae:f1:07:aa:59:29:36:72:5f:23:2c:b2:3b:
         fe:0c:0b:8d:d1:95:e2:b7:3c:d1:1b:50:de:b6:6b:ef:33:77:
         83:95:ee:12:df:ff:8f:21:8e:7b:9a:87:29:45:e5:64:ef:dd:
         f5:e4:93:10:24:18:f7:8a:4f:de:44:87:48:81:0c:e7:65:ea:
         b3:85:db:bd:3c:21:18:07:c7:c6:57:a8:7c:30:f4:d0:36:78:
         67:12:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:17 2024 by rpki-client on console-fra.rpki-client.org