Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36342e302f32332d3233203d3e20323633393730.roa
File:                     3133382e3235352e36342e302f32332d3233203d3e20323633393730.roa (raw, json)
Hash identifier:          k5QX6DWYx9WAK9GFDHi5tdDrHl6xT9LWsbiNlzDlrl4=
Subject key identifier:   63:61:CB:FB:2D:DA:8D:F2:4A:27:FB:2D:4A:3D:EA:93:A6:A3:C9:61
Certificate issuer:       /CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
Certificate serial:       335DB3F4A8D5DD48F0B21010CC49D87000148ABD
Authority key identifier: C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36342e302f32332d3233203d3e20323633393730.roa
Signing time:             Thu 04 Apr 2024 12:04:43 +0000
ROA not before:           Thu 04 Apr 2024 11:59:43 +0000
ROA not after:            Thu 03 Apr 2025 12:04:43 +0000
asID:                     263970
IP address blocks:        138.255.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl
                          rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5d:b3:f4:a8:d5:dd:48:f0:b2:10:10:cc:49:d8:70:00:14:8a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
        Validity
            Not Before: Apr  4 11:59:43 2024 GMT
            Not After : Apr  3 12:04:43 2025 GMT
        Subject: CN=6361CBFB2DDA8DF24A27FB2D4A3DEA93A6A3C961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2b:88:f7:40:30:81:48:e2:bf:9a:dc:99:b3:
                    b5:0e:c4:3b:61:3c:0f:72:53:8e:48:70:34:ad:8d:
                    72:ed:06:9f:93:09:75:da:39:f8:e3:80:95:76:40:
                    d9:fc:46:52:d1:ce:1b:86:d5:b4:3e:68:95:cf:b4:
                    54:6d:b6:0a:2f:36:59:05:fa:53:72:b9:a5:78:f5:
                    ae:60:3b:c4:86:03:0f:80:33:64:4b:ae:44:78:01:
                    c4:e7:f2:46:bc:f5:c3:fd:4d:6d:86:4b:03:ae:b4:
                    e2:1f:7a:6a:2f:99:8a:69:5b:00:67:c6:0e:10:05:
                    ae:81:9d:d5:89:13:d4:00:5f:6a:25:62:b4:e4:f7:
                    8c:58:cc:6b:c5:9a:70:c1:83:90:47:b9:15:8d:6c:
                    49:40:54:03:0e:6f:ba:30:04:d5:ca:54:dd:78:fc:
                    f7:e9:be:e6:32:15:f9:61:c1:3b:d6:fc:a9:8e:75:
                    bd:f5:3c:ac:aa:d5:d4:02:3d:35:07:3a:68:63:53:
                    db:c0:18:7f:f1:8f:fe:e8:00:5d:fa:0b:11:f6:42:
                    44:5f:43:8c:04:f3:7d:07:5a:e4:81:6b:a1:ce:1b:
                    9e:a1:05:94:ca:42:3e:da:f5:f6:8f:63:12:97:9a:
                    d7:a0:32:c5:49:00:44:a4:1f:b3:22:e5:9e:67:71:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:61:CB:FB:2D:DA:8D:F2:4A:27:FB:2D:4A:3D:EA:93:A6:A3:C9:61
            X509v3 Authority Key Identifier:
                keyid:C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36342e302f32332d3233203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:b4:43:69:f7:20:36:a0:c0:70:4b:21:39:ed:a9:fe:69:af:
         91:d1:8d:3c:ac:39:63:56:2f:5a:aa:8e:61:af:37:b0:2c:f0:
         21:de:ed:a7:bf:2e:56:39:89:65:41:d7:f8:c8:09:60:b9:d1:
         05:c9:b0:15:15:27:fa:88:3e:cd:35:8d:52:4e:8d:b0:2d:d5:
         7a:aa:2f:0f:fd:6b:e5:d4:e3:bb:b8:8b:af:5e:be:f7:31:f2:
         68:0e:f3:52:c8:3d:b5:ed:2f:a2:5d:3e:19:98:44:2c:ed:07:
         dd:37:02:8f:47:ec:68:e6:f1:6a:b7:72:04:2a:7e:d8:cb:98:
         82:40:a0:08:bb:11:2c:60:75:a5:ca:64:2f:ae:f3:ff:b4:67:
         f0:0a:d6:23:64:a4:fe:e1:2b:26:71:c9:82:78:1f:dd:7a:3c:
         7b:47:d7:90:51:51:f6:ab:a3:4a:fc:87:f5:b1:1f:a3:13:4f:
         45:5e:4e:b7:96:15:85:4c:3b:13:ea:d0:4d:19:a6:71:ba:f7:
         3b:f5:d7:04:3a:a3:70:68:76:eb:9b:a0:32:7f:4e:3d:b8:7e:
         c9:bc:79:25:a2:1a:4b:d3:4f:b2:fc:22:0e:22:29:8a:11:60:
         37:b4:03:fe:48:93:71:43:15:cf:86:30:f9:6e:88:88:10:3a:
         9e:31:f6:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM12z9KjV3UjwshAQzEnYcAAUir0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhFRTdFNTEyNjFEREY0NzA5MTQ3ODRFRTcwQ0VGRjNC
M0JFNzFCRTAeFw0yNDA0MDQxMTU5NDNaFw0yNTA0MDMxMjA0NDNaMDMxMTAvBgNV
BAMTKDYzNjFDQkZCMkREQThERjI0QTI3RkIyRDRBM0RFQTkzQTZBM0M5NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvK4j3QDCBSOK/mtyZs7UOxDth
PA9yU45IcDStjXLtBp+TCXXaOfjjgJV2QNn8RlLRzhuG1bQ+aJXPtFRttgovNlkF
+lNyuaV49a5gO8SGAw+AM2RLrkR4AcTn8ka89cP9TW2GSwOutOIfemovmYppWwBn
xg4QBa6BndWJE9QAX2olYrTk94xYzGvFmnDBg5BHuRWNbElAVAMOb7owBNXKVN14
/PfpvuYyFflhwTvW/KmOdb31PKyq1dQCPTUHOmhjU9vAGH/xj/7oAF36CxH2QkRf
Q4wE830HWuSBa6HOG56hBZTKQj7a9faPYxKXmtegMsVJAESkH7Mi5Z5ncWEPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUY2HL+y3ajfJKJ/stSj3qk6ajyWEwHwYDVR0j
BBgwFoAUyO5+USYd30cJFHhO5wzv87O+cb4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZMcVYyWURyMnJTazEyOHVOaEJLejh2MlJiMUFYbnZKY0VLM2pyVTNn
bWUvMi9DOEVFN0U1MTI2MURERjQ3MDkxNDc4NEVFNzBDRUZGM0IzQkU3MUJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4RUU3RTUxMjYxRERGNDcw
OTE0Nzg0RUU3MENFRkYzQjNCRTcxQkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmTHFWMllEcjJyU2sxMjh1TmhCS3o4djJSYjFBWG52SmNFSzNqclUzZ21lLzIv
MzEzMzM4MmUzMjM1MzUyZTM2MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGK/0AwDQYJKoZIhvcNAQELBQADggEBAF20Q2n3
IDagwHBLITntqf5pr5HRjTysOWNWL1qqjmGvN7As8CHe7ae/LlY5iWVB1/jICWC5
0QXJsBUVJ/qIPs01jVJOjbAt1XqqLw/9a+XU47u4i69evvcx8mgO81LIPbXtL6Jd
PhmYRCztB903Ao9H7Gjm8Wq3cgQqftjLmIJAoAi7ESxgdaXKZC+u8/+0Z/AK1iNk
pP7hKyZxyYJ4H916PHtH15BRUfaro0r8h/WxH6MTT0VeTreWFYVMOxPq0E0ZpnG6
9zv11wQ6o3BoduuboDJ/Tj24fsm8eSWiGkvTT7L8Ig4iKYoRYDe0A/5Ik3FDFc+G
MPluiIgQOp4x9s0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:05 2024 by rpki-client on console-ams.rpki-client.org