Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36352e302f32342d3234203d3e20323633393730.roa
File:                     3133382e3235352e36352e302f32342d3234203d3e20323633393730.roa (raw, json)
Hash identifier:          sSaKzehdpZz8CGE1pMVZ1RiRR8jB3WYkc6vyEk/vsPE=
Subject key identifier:   C3:E7:9B:BE:8E:A3:85:5F:7D:C1:8F:82:61:11:92:20:E7:95:70:07
Certificate issuer:       /CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
Certificate serial:       3F083BCBD466DFDFC2951CE8BE594CA8F17702C6
Authority key identifier: C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36352e302f32342d3234203d3e20323633393730.roa
Signing time:             Fri 14 Jun 2024 22:08:02 +0000
ROA not before:           Fri 14 Jun 2024 22:03:02 +0000
ROA not after:            Fri 13 Jun 2025 22:08:02 +0000
asID:                     263970
IP address blocks:        138.255.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl
                          rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:08:3b:cb:d4:66:df:df:c2:95:1c:e8:be:59:4c:a8:f1:77:02:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
        Validity
            Not Before: Jun 14 22:03:02 2024 GMT
            Not After : Jun 13 22:08:02 2025 GMT
        Subject: CN=C3E79BBE8EA3855F7DC18F8261119220E7957007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:7b:fc:20:3c:25:5c:8e:7b:10:30:aa:f7:
                    e1:59:32:e3:aa:54:db:87:66:44:d1:d0:ab:ec:37:
                    48:86:b5:5d:4a:e2:a2:ad:ac:7e:ce:80:eb:25:11:
                    65:51:91:41:b4:12:23:c0:15:ee:46:31:12:e5:56:
                    7d:4e:25:12:ad:56:1c:62:14:dc:60:60:4f:1b:fb:
                    10:74:52:b5:55:3a:a0:4e:cc:19:2f:91:f5:89:ef:
                    ec:85:5c:35:2d:06:21:81:8a:56:b9:59:a1:15:5e:
                    05:2d:45:e6:c0:d4:34:0a:13:fc:6e:e0:f2:0b:a5:
                    bc:2d:8f:af:3b:36:68:f2:9b:82:ec:b4:36:3b:ee:
                    81:de:4e:2c:02:0f:63:22:1b:42:e2:1a:1c:92:33:
                    17:31:77:ff:3b:ea:85:c8:1e:e4:72:86:cd:37:dd:
                    ee:e1:52:20:41:f6:1f:20:04:63:1a:f8:20:6f:5d:
                    41:cb:4c:e2:a0:5b:63:4e:91:e6:b7:c4:ed:9f:8b:
                    f9:f0:67:55:d9:7d:25:96:9a:ff:d8:39:59:ef:eb:
                    7e:af:3f:05:7e:2f:94:5d:df:1a:4b:22:87:d1:cb:
                    ea:bd:17:e6:53:48:9c:ec:ac:70:16:2d:53:f0:2f:
                    50:62:12:fb:14:cc:b1:e4:74:4c:84:61:f1:ea:5c:
                    7c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E7:9B:BE:8E:A3:85:5F:7D:C1:8F:82:61:11:92:20:E7:95:70:07
            X509v3 Authority Key Identifier:
                keyid:C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36352e302f32342d3234203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:44:ce:b8:a4:8b:ea:f9:79:92:3a:0b:ad:5d:b5:91:e9:a9:
         84:21:a1:1b:3c:6b:e7:11:bf:1e:ea:8e:19:ff:c2:c1:c1:71:
         25:13:36:03:ab:90:dc:a9:43:1d:2e:7e:2b:fa:2f:e3:64:dc:
         88:08:20:9c:58:d1:a3:71:aa:56:c2:e6:1b:b7:7b:2e:6b:aa:
         ff:21:5c:90:c4:cc:3b:8e:41:51:e4:98:6d:5a:84:52:fe:3e:
         02:dd:5d:80:36:b8:8d:40:2f:af:b0:ef:2f:07:69:6e:3e:87:
         1e:ee:0a:47:3c:49:a3:a4:e6:55:0f:37:84:db:5e:de:3a:8b:
         c0:c9:1d:25:e0:cf:c9:7e:d5:7f:96:a8:84:37:39:f4:97:96:
         d4:21:9a:cc:4b:9b:8f:f3:14:5e:9b:ed:10:d4:fd:ef:e9:06:
         60:43:c9:b5:f1:ff:92:c6:36:05:f6:38:bf:8a:32:9b:b0:e4:
         39:6c:66:1e:78:fb:7e:28:ce:31:aa:07:8b:ad:fb:dd:b5:41:
         24:fb:67:b5:8f:fc:5b:35:87:a8:df:73:66:df:9d:a5:43:17:
         08:39:32:95:f4:7c:c8:1d:6e:01:f4:60:a6:ea:1f:2b:76:92:
         a3:a1:74:51:49:4d:31:78:e8:48:43:18:25:e0:05:3b:19:6a:
         1e:14:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:35 2024 by rpki-client on console-fra.rpki-client.org