Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa
File:                     3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa (raw, json)
Hash identifier:          c4Lr8uMgZz+VNkAQVmGJOj/S12FDiZ/iqFSCiJQxV5E=
Subject key identifier:   0D:EB:CD:69:7D:B7:97:D0:76:DF:50:EF:11:D7:99:C6:AB:41:1C:CF
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       1B7CEF5D72677879384135DBCBE4AEB69C787270
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa
Signing time:             Wed 03 Apr 2024 18:30:36 +0000
ROA not before:           Wed 03 Apr 2024 18:25:36 +0000
ROA not after:            Wed 02 Apr 2025 18:30:36 +0000
asID:                     263994
IP address blocks:        138.255.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7c:ef:5d:72:67:78:79:38:41:35:db:cb:e4:ae:b6:9c:78:72:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Apr  3 18:25:36 2024 GMT
            Not After : Apr  2 18:30:36 2025 GMT
        Subject: CN=0DEBCD697DB797D076DF50EF11D799C6AB411CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:46:53:ad:a1:d2:e6:af:73:a5:2d:e1:3b:
                    12:eb:94:96:91:81:dd:e8:ca:1e:c6:87:1a:0d:1c:
                    9c:94:0a:e7:f9:9b:44:18:51:3e:35:93:81:27:28:
                    b4:89:ba:84:03:5d:1d:58:17:c9:bd:8d:c9:42:79:
                    09:e3:72:ad:fa:9f:1c:17:54:f8:85:7d:db:e8:ff:
                    76:df:8b:e3:2b:b6:25:cb:a8:68:e9:7f:35:8c:31:
                    9c:a5:63:c4:24:a1:fd:ce:43:9e:7c:c0:23:b1:a6:
                    1f:ec:20:50:b0:c7:e2:18:fc:ca:6f:f8:46:38:6b:
                    93:d8:95:eb:50:c7:7a:2a:b8:6f:a5:1f:04:32:17:
                    3c:71:68:cc:95:38:5c:96:f5:78:cb:2a:77:6a:0a:
                    d7:46:bb:94:c0:db:49:9b:67:8c:17:c5:aa:6d:6a:
                    b3:14:e5:a8:11:a7:b5:ec:c3:13:3a:17:fd:bf:db:
                    1b:d0:af:f9:68:42:51:a1:fd:0b:72:ca:c1:ad:9f:
                    b7:4c:5d:ff:b8:c1:c5:4a:f2:2b:6c:59:b2:7d:20:
                    0e:d3:ae:38:e8:8b:04:f3:3a:48:2a:f7:6d:74:6f:
                    a8:97:63:60:fb:8d:d8:89:c2:b0:99:a0:66:50:1c:
                    8d:89:83:82:b0:9e:b1:78:c4:e5:38:5b:12:ce:c9:
                    c8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EB:CD:69:7D:B7:97:D0:76:DF:50:EF:11:D7:99:C6:AB:41:1C:CF
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32322d3232203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:10:df:a8:21:0b:94:4a:cc:bd:d7:a5:39:f1:fd:96:35:
         9c:3b:ce:2e:39:c5:5c:c7:9c:72:8e:c5:62:4f:4c:65:0c:c6:
         ec:dc:c3:f1:ad:2a:5c:32:61:52:ad:80:fc:2c:01:89:f9:08:
         de:fc:7b:21:e7:7e:1d:59:c7:65:a7:be:50:f7:f5:b2:6f:f3:
         94:90:e5:0e:5a:35:86:54:5b:f2:6f:80:e6:b0:2d:1f:a4:39:
         37:d7:1a:8d:6b:cb:e0:4a:82:21:67:f0:26:5a:4b:ba:8a:c8:
         84:13:e5:6d:80:5e:d4:12:1e:99:11:34:18:6e:37:bb:20:93:
         e5:8e:69:91:a2:34:4d:e4:c7:f9:2f:44:0a:9f:74:e8:17:4a:
         36:42:33:92:76:e9:c8:42:07:2d:52:b8:74:6c:4d:9b:6e:92:
         0c:4b:e7:f2:aa:a1:7b:df:c1:f2:c3:18:87:62:2c:f8:19:5f:
         7a:95:d5:6f:9a:b4:ad:a7:18:63:43:6c:cf:2a:6e:42:c0:45:
         e6:e1:b2:0f:4a:01:18:57:1d:2d:5a:ba:36:3f:11:9a:e6:a3:
         c1:c2:73:15:fd:21:62:a0:be:de:82:45:98:05:5f:d6:fe:52:
         bf:7a:56:c1:b5:1b:0d:f2:80:1b:f2:dd:ed:16:ca:87:5b:59:
         8b:ce:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:06 2024 by rpki-client on console-ams.rpki-client.org