Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa
File:                     3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa (raw, json)
Hash identifier:          3bxYfN8+RWfMagKX4C0gih6QrpSpCz4LWePYD1fQXlg=
Subject key identifier:   5E:A9:36:77:8D:EE:11:25:CB:2A:C9:2A:28:92:9E:26:3A:1C:9F:3E
Certificate issuer:       /CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
Certificate serial:       1B78105A12801C3E1833FDD292148531926534C4
Authority key identifier: 08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa
Signing time:             Wed 14 Aug 2024 14:52:04 +0000
ROA not before:           Wed 14 Aug 2024 14:47:04 +0000
ROA not after:            Wed 13 Aug 2025 14:52:04 +0000
asID:                     264404
IP address blocks:        138.255.16.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl
                          rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:78:10:5a:12:80:1c:3e:18:33:fd:d2:92:14:85:31:92:65:34:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
        Validity
            Not Before: Aug 14 14:47:04 2024 GMT
            Not After : Aug 13 14:52:04 2025 GMT
        Subject: CN=5EA936778DEE1125CB2AC92A28929E263A1C9F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:fe:49:98:20:5b:29:b6:e8:c3:a9:07:26:
                    f8:75:87:62:ed:1e:cb:f3:73:b7:6f:16:a7:73:64:
                    b0:0a:97:7a:41:24:07:dd:7e:5b:12:1a:10:c7:08:
                    06:2f:c5:39:e2:7b:1b:41:2e:f1:80:c0:6e:a3:9a:
                    b8:22:e8:06:e9:e5:3a:aa:9b:c4:07:d1:83:4d:0e:
                    52:05:d0:65:8a:3e:44:a5:f9:35:8d:ff:4c:f4:9e:
                    b9:ce:9e:3d:35:dc:48:21:8e:74:76:00:ad:fa:b8:
                    cc:a8:47:98:18:7b:38:8e:ae:64:61:af:17:87:5c:
                    bc:12:7f:38:69:31:22:31:2f:b5:fb:14:e2:6c:dc:
                    6a:85:2d:f4:91:84:03:ad:21:da:71:5f:ad:3c:d6:
                    5a:74:84:0e:4d:be:7f:f1:fd:91:be:d6:cb:4b:95:
                    ee:dd:35:3c:4d:54:b8:14:36:c5:8a:16:7e:c0:84:
                    ab:a3:fd:99:cc:39:ae:b7:14:27:9c:40:62:c9:76:
                    34:fc:17:4d:ce:dd:12:83:d8:6a:d2:b6:9f:35:f7:
                    6b:4e:68:7f:c9:a9:38:41:2f:5a:65:a7:35:9f:ae:
                    ad:3e:b1:37:12:bd:cc:34:51:19:45:2e:d9:d8:03:
                    db:8d:12:99:e4:f2:66:96:58:e9:40:75:5e:26:ee:
                    e3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A9:36:77:8D:EE:11:25:CB:2A:C9:2A:28:92:9E:26:3A:1C:9F:3E
            X509v3 Authority Key Identifier:
                keyid:08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:fb:b0:47:b7:9e:68:a0:6d:7d:b3:ea:4e:70:b6:1b:74:67:
         a3:0b:f1:14:d4:c4:48:4e:2a:84:e0:f4:32:1f:bf:86:19:e1:
         97:4d:6e:c8:92:be:ad:a3:b5:3e:2d:a0:57:99:36:ca:ec:b9:
         ee:96:78:82:cf:bd:09:60:08:17:c4:09:a9:f2:74:a0:5d:5e:
         5e:7f:22:18:00:ac:2f:17:8c:87:e5:36:29:0f:9d:44:14:0d:
         db:a9:dd:27:7c:48:48:77:27:ef:55:2c:dc:0e:ed:1a:5a:f9:
         aa:d9:42:e6:1a:1e:24:35:3f:5e:ec:dc:26:24:65:5f:2a:f4:
         48:5d:97:e9:b8:d0:10:55:52:a9:57:d6:94:58:dd:e8:5d:24:
         3a:c6:6c:26:58:f8:22:b9:97:0b:12:9b:f8:09:78:9d:26:46:
         6e:d2:01:04:92:78:81:75:d1:a2:1d:3a:87:f4:9e:1e:68:32:
         25:60:ea:f2:f0:c0:eb:88:7d:9b:97:3b:1c:c3:65:fd:19:99:
         32:a9:96:a9:a7:a2:67:40:41:6d:7c:fd:c3:3f:d7:be:53:ef:
         d8:15:f3:a0:fe:a3:ee:6c:bf:db:5c:e5:d8:89:0e:86:33:a1:
         00:3b:02:bb:b6:57:3d:c8:fe:51:2b:28:98:63:7d:22:cd:4e:
         84:83:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org