Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa
File:                     3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa (raw, json)
Hash identifier:          Wa1qW6219LSRLXu9Kw9litlFtJHu7LdrBjBnEuXtrks=
Subject key identifier:   65:1F:09:FA:0A:A3:01:B5:A1:66:C8:F0:F5:DC:8D:50:04:DE:B5:E9
Certificate issuer:       /CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
Certificate serial:       2A42F4E5FEFFE4F6F37D14E9BD731960D54FC82E
Authority key identifier: C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa
Signing time:             Thu 04 Apr 2024 12:04:44 +0000
ROA not before:           Thu 04 Apr 2024 11:59:44 +0000
ROA not after:            Thu 03 Apr 2025 12:04:44 +0000
asID:                     263970
IP address blocks:        138.255.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl
                          rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:42:f4:e5:fe:ff:e4:f6:f3:7d:14:e9:bd:73:19:60:d5:4f:c8:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
        Validity
            Not Before: Apr  4 11:59:44 2024 GMT
            Not After : Apr  3 12:04:44 2025 GMT
        Subject: CN=651F09FA0AA301B5A166C8F0F5DC8D5004DEB5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:cc:89:8c:94:25:cb:85:ec:1c:ed:41:da:
                    8f:01:6c:9f:d7:95:71:0c:88:e1:50:fb:0f:b7:32:
                    a8:57:72:a3:45:a5:f7:a0:55:e8:2d:93:39:a5:23:
                    3b:89:9f:65:ec:77:3b:d5:d4:84:ce:25:73:1d:f8:
                    d4:fd:b8:53:c0:b3:30:e3:76:db:1a:a8:69:90:6c:
                    e0:65:8c:10:8c:71:4f:db:cf:c2:42:e1:60:5d:05:
                    43:22:67:cb:94:02:a7:de:66:f5:e7:d9:3a:b2:63:
                    b1:6b:e5:aa:6f:a0:1d:3d:ef:2c:35:51:2b:a6:bb:
                    20:d8:1a:e0:9d:62:74:74:65:ac:5d:79:e2:d9:d2:
                    c7:d6:c0:ed:86:02:e7:7f:b7:c6:43:0d:4f:26:87:
                    de:a8:d4:ce:92:81:d0:62:25:03:66:88:90:3b:60:
                    b8:1e:1e:44:70:bd:9e:c6:9a:be:2e:9a:73:6c:42:
                    ce:cd:21:43:4e:5f:2c:5a:82:00:ae:09:c4:ba:73:
                    14:1c:5f:5c:8e:84:cd:83:34:25:f9:0c:a3:f5:24:
                    90:3d:f1:8c:ca:e8:4a:31:28:e8:d1:b9:0a:1a:88:
                    ac:a7:a9:b0:ab:78:d5:f2:db:87:b7:9d:15:5b:c0:
                    49:52:f4:67:79:40:b2:a6:d8:94:da:83:fd:20:02:
                    22:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1F:09:FA:0A:A3:01:B5:A1:66:C8:F0:F5:DC:8D:50:04:DE:B5:E9
            X509v3 Authority Key Identifier:
                keyid:C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36362e302f32332d3233203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:7e:3f:ac:ab:08:3b:d2:ff:98:60:12:cd:c9:b8:01:95:
         b1:27:c8:ec:07:0b:04:d5:58:de:6d:25:90:de:8d:46:53:20:
         9e:80:92:fa:ea:05:f5:6f:8d:67:c6:27:57:12:51:8a:15:10:
         b1:45:28:61:ad:10:77:4a:29:7a:41:80:b2:17:17:d8:c3:61:
         6b:5a:55:d3:55:50:22:88:77:cc:41:d8:b4:24:c4:88:db:6d:
         e4:85:1d:57:fc:38:a6:99:e7:f8:b8:cc:f6:24:df:98:e4:b8:
         ca:9a:fd:84:84:fd:13:80:7c:1d:74:32:98:c1:a5:b8:38:5c:
         62:d6:25:9d:f8:1c:5e:08:49:01:1b:4d:73:4b:90:32:16:e5:
         83:fc:8c:06:13:4a:4e:b7:9f:bc:71:c6:67:28:f9:c0:57:d5:
         e2:2e:ce:fc:a5:e1:81:25:f8:49:bb:db:41:aa:46:af:16:64:
         53:1a:b1:ee:bb:cc:d9:80:c7:38:66:85:90:50:94:73:cd:c5:
         d2:df:47:c3:82:b2:e1:b2:d4:62:78:d2:58:e2:a0:7b:d4:27:
         69:88:f0:24:95:3b:fa:19:81:10:02:3b:93:8c:0d:d2:72:92:
         4d:a1:46:5e:67:24:fd:12:90:8e:a3:a4:71:9d:a9:73:69:18:
         11:80:0f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:35 2024 by rpki-client on console-fra.rpki-client.org