Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa
File:                     3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa (raw, json)
Hash identifier:          MPrE6PXN7wbF7toXPeNtW97/WKrojEInNu412TUVOIU=
Subject key identifier:   6C:1A:2C:EB:C6:6D:1E:41:A5:BE:AE:08:B4:F6:37:EA:0F:52:ED:15
Certificate issuer:       /CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
Certificate serial:       1C46F3EF4109AE66979C38BCC69EF7C3CC832DD9
Authority key identifier: C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa
Signing time:             Fri 14 Jun 2024 22:07:35 +0000
ROA not before:           Fri 14 Jun 2024 22:02:35 +0000
ROA not after:            Fri 13 Jun 2025 22:07:35 +0000
asID:                     263970
IP address blocks:        138.255.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl
                          rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:46:f3:ef:41:09:ae:66:97:9c:38:bc:c6:9e:f7:c3:cc:83:2d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
        Validity
            Not Before: Jun 14 22:02:35 2024 GMT
            Not After : Jun 13 22:07:35 2025 GMT
        Subject: CN=6C1A2CEBC66D1E41A5BEAE08B4F637EA0F52ED15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:01:10:b4:b6:8a:a1:92:38:cc:bd:21:53:
                    8b:2f:08:75:37:f3:54:db:be:4f:c3:12:b0:0e:69:
                    63:b9:70:d4:a4:a3:4d:49:7c:f8:8e:a1:63:cf:3f:
                    1d:d7:5c:cd:61:53:4a:ab:91:94:6d:a8:e5:89:be:
                    c6:2b:9a:4b:0a:4b:d8:19:62:c4:d4:8a:52:7d:82:
                    92:e0:f9:86:c4:eb:0f:6b:7f:13:62:6a:a5:fa:a2:
                    c2:79:b2:63:5e:b8:97:1f:2a:0e:40:7d:62:6e:d2:
                    9e:22:e5:f0:6b:6d:22:ba:23:75:a5:73:a6:31:c7:
                    e6:7c:58:e6:b8:0c:bc:c1:fc:2b:6f:1a:65:9c:27:
                    c7:97:86:6d:e0:99:25:4c:ff:b2:1c:43:21:66:b5:
                    d6:5f:29:e3:41:5c:7d:55:8f:aa:97:94:3b:50:47:
                    f3:a4:a8:cd:e4:61:e1:ab:60:e5:ee:f8:46:3a:fc:
                    d2:2b:aa:1a:ca:91:49:c6:cd:b1:1d:da:96:b8:08:
                    7e:15:84:da:a4:c1:c1:84:0c:df:04:75:32:13:6f:
                    0e:ae:ff:83:88:7e:5b:99:12:69:48:0d:5e:9a:a1:
                    a9:93:17:90:0a:f9:a4:99:20:5a:04:33:6c:50:42:
                    90:ee:fb:e7:41:0c:9b:fb:e7:a8:9a:f1:af:69:53:
                    dd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1A:2C:EB:C6:6D:1E:41:A5:BE:AE:08:B4:F6:37:EA:0F:52:ED:15
            X509v3 Authority Key Identifier:
                keyid:C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36342e302f32342d3234203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:b6:8f:15:e0:58:30:fc:fc:3d:af:6b:f5:cc:f5:c8:9c:78:
         9a:fb:77:5a:11:a1:f0:9c:7b:57:60:01:53:fb:95:91:09:d2:
         ad:11:3c:75:61:a6:f4:e9:14:d2:3d:34:ca:da:1b:5a:72:ac:
         ed:c8:7e:d8:6c:45:19:c5:2d:8c:fa:c3:fb:29:d8:3e:18:01:
         13:0d:dc:a6:13:86:b3:3e:fe:8d:08:66:cd:a0:07:88:85:45:
         c7:f4:7b:3a:00:a9:f6:58:4f:26:8e:8c:aa:2b:26:d3:02:c0:
         ef:33:d2:b4:01:c6:dc:a0:a6:6d:84:86:59:aa:60:38:ab:d0:
         1b:9e:7a:4b:d3:e8:e8:4d:df:fc:7e:a3:5f:34:a0:83:25:5f:
         f7:c9:8b:b6:7f:f6:08:5e:af:6c:60:0e:82:06:da:ba:98:b0:
         f8:53:0a:a8:29:20:38:16:46:19:84:0c:2f:57:18:65:ba:fb:
         39:2e:da:c0:8f:23:c1:09:0e:44:12:9c:5a:5b:33:ce:c4:74:
         26:63:a1:c5:21:6a:e3:4e:1d:48:96:1e:a4:48:92:05:b1:8a:
         d3:bf:63:06:75:24:51:ef:0d:39:58:8b:77:81:9f:57:3b:7f:
         72:dd:62:61:a9:cd:81:4b:ef:52:13:ce:c9:95:3e:df:b3:f1:
         aa:21:45:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:05 2024 by rpki-client on console-ams.rpki-client.org