Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36362e302f32342d3234203d3e20323633393730.roa
File:                     3133382e3235352e36362e302f32342d3234203d3e20323633393730.roa (raw, json)
Hash identifier:          OpeL2GQv0HKVrEkGi/2UrEc2Cmmm5sMlArAaAs+4dmc=
Subject key identifier:   E2:F8:66:7B:B7:A4:BB:C4:EB:1D:BF:7E:60:F3:8F:41:09:D0:87:F2
Certificate issuer:       /CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
Certificate serial:       02928A98D5AF8E8A91D292AC25FC3B359094B59B
Authority key identifier: C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36362e302f32342d3234203d3e20323633393730.roa
Signing time:             Fri 14 Jun 2024 22:08:25 +0000
ROA not before:           Fri 14 Jun 2024 22:03:25 +0000
ROA not after:            Fri 13 Jun 2025 22:08:25 +0000
asID:                     263970
IP address blocks:        138.255.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl
                          rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:92:8a:98:d5:af:8e:8a:91:d2:92:ac:25:fc:3b:35:90:94:b5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EE7E51261DDF470914784EE70CEFF3B3BE71BE
        Validity
            Not Before: Jun 14 22:03:25 2024 GMT
            Not After : Jun 13 22:08:25 2025 GMT
        Subject: CN=E2F8667BB7A4BBC4EB1DBF7E60F38F4109D087F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:13:13:dd:f9:bf:6a:0d:c7:ea:59:2d:ab:
                    6c:1e:74:3f:fe:c6:12:b7:cc:f1:e1:bd:b5:fa:59:
                    bf:45:c8:2a:f5:c1:bf:8b:7c:6f:ab:02:cf:a7:60:
                    85:f0:09:6f:dd:f3:92:7c:84:b1:e8:ca:10:73:51:
                    3b:45:10:e9:45:4d:3a:b7:2a:b0:ec:ac:c2:c0:cc:
                    2e:61:4f:77:7e:0a:a5:cc:3f:ad:a7:da:b9:c4:ca:
                    d7:be:f7:6f:50:47:73:0e:1b:f1:4d:c4:2a:da:86:
                    ca:e6:c6:6b:a6:e1:e8:6f:bb:3e:7a:a4:4b:c4:f3:
                    a0:0e:4d:56:e9:75:9e:31:c2:eb:ee:ea:02:21:34:
                    d9:69:03:b2:5d:a9:74:94:09:46:ff:88:28:1f:09:
                    a7:9e:40:bc:45:9a:c8:9c:e7:63:e5:82:12:d9:96:
                    94:e4:a2:db:2a:3c:af:f0:01:46:2b:1a:f4:b5:3b:
                    c2:9c:c1:17:3f:8d:17:b4:d9:60:02:bb:aa:3a:0f:
                    a4:a3:5e:b6:77:e8:f3:36:bc:49:40:f2:bd:09:14:
                    c3:81:34:3e:34:1d:4c:5b:0d:20:d6:02:6d:e8:0f:
                    53:84:4f:fc:48:b6:2e:84:11:90:bc:17:df:81:58:
                    3b:ce:05:35:98:3a:eb:ba:4b:c4:d7:43:fe:ff:80:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F8:66:7B:B7:A4:BB:C4:EB:1D:BF:7E:60:F3:8F:41:09:D0:87:F2
            X509v3 Authority Key Identifier:
                keyid:C8:EE:7E:51:26:1D:DF:47:09:14:78:4E:E7:0C:EF:F3:B3:BE:71:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8EE7E51261DDF470914784EE70CEFF3B3BE71BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fLqV2YDr2rSk128uNhBKz8v2Rb1AXnvJcEK3jrU3gme/2/3133382e3235352e36362e302f32342d3234203d3e20323633393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e2:27:bd:f1:3b:37:71:77:03:10:48:c6:6f:c5:71:68:23:
         20:48:5d:6f:43:83:af:54:75:74:4c:5f:74:d3:ab:08:6e:b7:
         37:4b:07:f9:50:9d:b1:94:a2:fe:92:23:6a:ae:ce:87:ec:f0:
         f8:74:7a:c5:45:05:18:ae:4e:76:1d:45:f8:25:89:f8:17:08:
         73:cd:d2:d5:27:a3:e7:7a:c8:f4:3c:c6:33:13:5b:4c:94:1e:
         d8:5c:14:70:3f:85:b5:ad:f2:97:a8:74:93:12:f1:ec:05:05:
         10:2f:ab:a0:85:19:46:81:8d:c3:00:2d:33:20:a8:46:d4:16:
         6d:65:b1:70:d5:31:85:a4:2e:ae:b9:11:20:27:3f:c1:fd:90:
         c4:18:0d:1b:62:09:99:c3:9e:1e:66:70:aa:70:09:98:ac:05:
         18:b4:fb:e9:7d:46:23:03:ad:bc:57:0e:10:4c:5d:a6:6e:c0:
         52:a3:89:76:9a:ff:84:01:d2:63:57:01:70:e1:76:0e:1a:ff:
         d3:c9:5c:8a:c6:53:4c:e9:8b:49:2c:c4:4d:28:26:15:ff:e0:
         02:7c:47:f7:a0:30:67:52:45:32:48:d5:e1:e9:e5:a5:5a:c2:
         d4:5c:69:bc:49:43:80:0f:53:4c:df:1b:99:d6:2e:65:98:56:
         01:00:4e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:35 2024 by rpki-client on console-fra.rpki-client.org