Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa
File:                     3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa (raw, json)
Hash identifier:          8RfDCAOc6sTfTd+X5xUkQL1qLFrZ5FkZmaY2IFE4qVc=
Subject key identifier:   23:55:FF:45:B2:12:2A:F6:52:EF:A4:27:8F:16:31:53:09:B5:19:CB
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       5C418510C4846FDAD0417FF955B95A930C905406
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa
Signing time:             Wed 03 Apr 2024 18:30:35 +0000
ROA not before:           Wed 03 Apr 2024 18:25:35 +0000
ROA not after:            Wed 02 Apr 2025 18:30:35 +0000
asID:                     263994
IP address blocks:        138.255.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:41:85:10:c4:84:6f:da:d0:41:7f:f9:55:b9:5a:93:0c:90:54:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Apr  3 18:25:35 2024 GMT
            Not After : Apr  2 18:30:35 2025 GMT
        Subject: CN=2355FF45B2122AF652EFA4278F16315309B519CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b8:d1:b6:be:ca:52:9f:a0:44:96:42:c8:82:
                    45:e1:88:b2:99:df:d7:73:e0:ad:92:76:da:d4:14:
                    a7:73:45:4d:69:eb:9e:7e:66:ad:78:2b:80:da:fe:
                    08:f5:70:3e:1b:28:25:50:66:f2:e3:f7:ef:a3:84:
                    d3:81:ae:5b:c9:28:c1:86:5d:e7:b5:8a:49:71:28:
                    cb:eb:40:6a:48:3d:0b:9e:68:8d:e7:31:28:71:fa:
                    57:90:4c:b1:9c:10:81:b2:fa:21:42:02:31:9c:11:
                    9d:62:b3:ed:cf:0f:18:d6:b7:d1:bc:36:45:29:57:
                    f5:4d:33:70:35:73:9b:30:ea:c8:48:28:50:6a:7e:
                    77:11:a2:23:8f:fe:ef:9b:35:5a:c7:50:34:fa:ee:
                    f8:10:89:d9:bc:14:2b:6e:88:49:ce:e0:c8:f2:b4:
                    d6:d6:b8:f0:c1:f4:2d:f8:6d:a5:26:2d:29:1a:c9:
                    e4:9c:48:10:9a:34:5b:35:8d:31:c2:94:b7:c6:eb:
                    f7:03:e9:08:8e:0e:6e:de:93:dd:68:e7:e7:80:07:
                    19:ab:ef:ad:67:cf:40:13:4e:00:ff:b0:15:9e:5d:
                    1c:f7:58:82:25:72:a7:fd:87:ba:38:69:f7:82:ff:
                    84:a8:17:8e:09:9f:7d:b7:bc:1c:79:8c:0a:28:0d:
                    1e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:55:FF:45:B2:12:2A:F6:52:EF:A4:27:8F:16:31:53:09:B5:19:CB
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232302e302f32332d3233203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:cd:39:d6:6b:1b:da:e4:2c:28:76:54:23:82:28:3c:0f:bb:
         1c:f9:a3:00:74:0b:12:de:80:c7:a5:48:06:8f:4a:62:af:d6:
         cc:40:37:83:ee:ef:7d:12:15:4a:8d:75:2c:96:a7:9b:85:c2:
         d2:12:b3:ad:c3:2d:2f:6b:af:f4:5f:97:3f:06:fc:c8:e6:cd:
         86:0e:3c:e7:68:3a:f6:8e:aa:d2:0a:f0:50:c9:e3:8a:aa:71:
         b8:5e:0c:67:35:9a:b2:70:0d:de:e4:bb:18:96:9e:51:92:64:
         b4:6f:7e:ec:aa:b0:14:60:22:e5:51:f7:8d:fd:79:7c:54:cc:
         f9:09:4b:f6:30:79:56:3c:8e:3a:f3:3a:4d:68:a8:6c:fa:df:
         87:cc:bc:98:11:24:a1:25:a0:35:93:24:69:9b:de:70:44:41:
         dd:f6:0c:fc:03:68:36:6e:cd:19:fd:36:4a:de:96:aa:71:1c:
         39:1f:04:4d:46:18:14:07:d4:26:f9:19:eb:d2:75:97:f9:6a:
         1f:b1:7f:5c:63:32:e3:e9:da:12:cb:16:ee:8d:70:e6:ea:6f:
         86:29:64:d1:14:b9:e9:1e:92:24:0d:72:e9:b4:48:d2:34:58:
         50:8b:4e:62:3f:e5:15:88:38:dc:4f:fd:05:c2:ca:e2:68:16:
         5b:f4:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:33 2024 by rpki-client on console-fra.rpki-client.org