Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36342e302f32322d3232203d3e20323633393730.roa
File:                     3133382e3235352e36342e302f32322d3232203d3e20323633393730.roa (raw, json)
Hash identifier:          2US2QNMqwzd9WyHh6sueY7vWffviqYSeG8l05bKvQ48=
Subject key identifier:   E0:93:0B:A3:A8:F0:97:4E:F3:80:D4:57:7E:D3:BB:37:09:AF:36:B3
Certificate issuer:       /CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
Certificate serial:       37832E4C49919D67BF2AE04519697CCC695819DB
Authority key identifier: C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36342e302f32322d3232203d3e20323633393730.roa
Signing time:             Thu 04 Apr 2024 12:04:44 +0000
ROA not before:           Thu 04 Apr 2024 11:59:44 +0000
ROA not after:            Thu 03 Apr 2025 12:04:44 +0000
asID:                     263970
IP address blocks:        138.255.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl
                          rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:83:2e:4c:49:91:9d:67:bf:2a:e0:45:19:69:7c:cc:69:58:19:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
        Validity
            Not Before: Apr  4 11:59:44 2024 GMT
            Not After : Apr  3 12:04:44 2025 GMT
        Subject: CN=E0930BA3A8F0974EF380D4577ED3BB3709AF36B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3c:cd:2f:e4:60:68:09:76:1b:62:e3:c0:54:
                    65:b7:6a:3a:7b:c9:bc:47:7c:cd:64:14:0c:c5:47:
                    9a:b6:04:13:5a:63:df:2d:a3:49:28:4a:0f:28:8e:
                    88:f8:87:45:0e:31:fa:ba:09:41:aa:46:e7:21:ab:
                    38:30:95:8c:a1:40:56:94:98:a3:07:cb:1e:f9:be:
                    67:81:45:8a:47:e2:06:ec:b3:ad:b9:e3:70:9c:44:
                    30:c8:90:62:e8:2d:05:3d:8e:60:4e:73:8a:2d:8e:
                    c9:59:05:eb:bf:93:16:c2:06:d4:e9:04:6f:93:0a:
                    c1:e0:9c:54:c7:1e:ec:34:24:4d:ee:46:80:42:82:
                    38:43:51:b0:e3:4b:95:2b:08:c9:39:57:0e:57:6a:
                    55:4b:c6:af:48:e1:76:92:1d:ff:54:d5:2b:e2:1b:
                    37:af:2d:00:c9:eb:c1:fe:55:cc:0e:62:3f:67:73:
                    09:6c:5f:8b:4c:6b:e9:fa:7c:f9:52:d4:ee:75:80:
                    44:3e:e2:26:df:91:1d:b2:55:f1:e7:4e:92:78:d2:
                    de:2d:24:ee:18:97:c2:10:0c:a4:6f:e8:0a:bd:6b:
                    38:43:9b:0b:a4:20:b4:08:10:36:0d:7f:99:49:49:
                    c8:d5:51:52:9d:32:9d:99:41:4a:fa:9f:62:cb:78:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:93:0B:A3:A8:F0:97:4E:F3:80:D4:57:7E:D3:BB:37:09:AF:36:B3
            X509v3 Authority Key Identifier:
                keyid:C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36342e302f32322d3232203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:ed:7d:ce:5d:93:a5:1d:a1:92:5c:e4:fd:5e:aa:35:4b:81:
         4c:47:2f:b7:0b:2a:78:73:c9:48:66:bf:32:a5:c4:5e:b8:b5:
         d3:90:03:06:19:bb:85:35:64:bf:8a:ee:26:26:f9:fc:8f:7b:
         90:c0:f1:08:8a:83:11:19:11:65:69:b6:cd:3c:6e:0a:25:b2:
         da:c1:74:94:fc:48:3b:5c:23:1c:4a:c8:fa:40:26:04:ee:85:
         00:1b:7b:db:4b:c3:37:df:13:a7:55:b2:16:d4:ae:e2:9b:30:
         43:04:77:25:4a:8e:26:12:5a:e7:77:e3:a2:f2:71:1b:14:d7:
         4c:c3:16:70:85:f1:2d:e5:58:0b:4b:96:bb:95:01:6c:16:1e:
         ea:9e:04:40:5a:a8:f4:9f:45:5a:33:cf:2b:73:b0:de:89:37:
         82:21:e9:e0:1f:b7:02:82:06:14:82:4f:33:c5:0a:56:e2:b1:
         94:7f:19:10:1a:89:de:d0:a3:d9:b9:15:17:24:d4:8b:6f:3a:
         13:be:f7:eb:76:8f:a8:d2:d0:34:6e:7e:5f:01:5b:b7:f8:a9:
         62:9b:3f:a4:fc:ea:96:3b:d5:f3:29:0a:51:3f:d9:53:84:43:
         1f:d5:f6:ba:b3:71:34:98:78:1e:51:1e:67:0d:53:31:f7:45:
         9e:ad:79:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:35 2024 by rpki-client on console-fra.rpki-client.org