Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
File:                     3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa (raw, json)
Hash identifier:          0LU0INcZOBmMH98UsjZlyv6LSxCVXlVBktxVTStixTQ=
Subject key identifier:   BE:2B:23:81:64:DD:60:1A:28:1A:56:81:2E:AE:E6:BD:F8:09:C5:2F
Certificate issuer:       /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial:       028FB46F2BB808FDA8091004326F4F083FF3B556
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
Signing time:             Tue 23 Apr 2024 19:32:34 +0000
ROA not before:           Tue 23 Apr 2024 19:27:34 +0000
ROA not after:            Tue 22 Apr 2025 19:32:34 +0000
asID:                     263995
IP address blocks:        138.255.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8f:b4:6f:2b:b8:08:fd:a8:09:10:04:32:6f:4f:08:3f:f3:b5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
        Validity
            Not Before: Apr 23 19:27:34 2024 GMT
            Not After : Apr 22 19:32:34 2025 GMT
        Subject: CN=BE2B238164DD601A281A56812EAEE6BDF809C52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:82:1a:80:6e:64:31:6d:6e:2a:32:7d:d9:
                    7f:6f:76:46:b6:1c:00:56:78:21:8b:c6:82:96:f3:
                    44:ff:03:39:2b:3b:a2:f6:12:ec:b3:e4:8a:24:e4:
                    cf:df:51:13:80:f1:ee:fb:4c:e4:70:c1:e7:f4:9d:
                    c4:4f:89:e4:91:e8:d9:11:95:47:ae:63:f5:f0:88:
                    a9:c2:e3:e8:b4:f7:c4:ea:a0:89:ee:8a:0c:93:23:
                    b4:b7:ee:7f:0e:53:e7:f4:d3:37:21:69:7a:53:85:
                    e0:e1:7d:86:e0:d4:dc:3e:08:80:ae:6e:b4:93:2b:
                    4f:ed:2d:18:48:40:2f:ff:67:7a:46:0c:3b:64:4f:
                    c8:5a:42:cf:05:c9:de:29:ae:ce:96:70:96:0e:ba:
                    8a:1c:a8:cd:b7:1b:d9:ab:d1:49:c4:13:f6:25:2f:
                    39:cf:d8:7a:06:e9:27:8c:51:d7:cd:c2:57:3e:a3:
                    fa:0e:da:65:88:f6:10:e0:ea:5b:e1:4e:ec:0e:9f:
                    83:78:cf:63:06:2b:97:79:95:d3:2c:54:4b:29:07:
                    23:6d:ec:8c:24:1c:11:a3:36:de:75:f4:93:ff:40:
                    2c:be:4e:56:30:68:01:15:d3:42:6c:dd:1b:ab:29:
                    a7:e9:07:29:72:30:21:b1:20:0b:00:d1:ab:e9:6d:
                    a9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2B:23:81:64:DD:60:1A:28:1A:56:81:2E:AE:E6:BD:F8:09:C5:2F
            X509v3 Authority Key Identifier:
                keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:2d:4b:f3:f3:c1:35:c4:5e:5b:52:ea:6e:f9:28:c4:10:
         2d:16:5a:7b:e1:fb:48:90:d9:80:94:01:8e:fa:b1:d4:d0:62:
         93:4f:b1:53:7b:a1:2a:5d:f4:20:8f:ea:7f:1d:d5:90:41:a8:
         b7:d9:0f:ed:62:57:8f:36:5d:75:a3:46:2d:f9:16:b1:be:4e:
         85:32:55:51:cb:28:e1:0d:c2:e0:72:cd:4b:4a:68:e9:2f:83:
         fa:c1:94:b2:66:04:24:04:3e:5d:72:0c:fa:db:78:27:9b:b5:
         42:de:52:da:b6:2c:29:6c:76:51:f0:33:26:f7:5e:c7:35:c6:
         a6:15:75:c5:a3:c5:37:5e:85:29:d0:70:c9:f0:d1:29:f3:1c:
         a2:3f:61:56:82:49:c2:fc:9b:03:bf:81:81:cd:0c:1d:d9:80:
         33:79:99:fc:d7:d9:fc:94:79:c5:2e:97:78:f7:d1:27:ea:73:
         e1:a5:e6:0c:78:1c:85:66:89:23:b6:10:c9:8d:b1:e1:c1:8b:
         da:d7:15:e6:a7:05:d2:03:c3:1f:36:d4:97:36:f5:62:58:f3:
         f6:69:ed:f5:ef:07:75:04:08:25:07:67:51:41:82:e0:23:c1:
         a4:9a:d4:f6:b3:a9:08:43:3c:26:c5:c9:db:cf:a9:56:42:06:
         fd:bc:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:17 2024 by rpki-client on console-ams.rpki-client.org