Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa
File:                     3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa (raw, json)
Hash identifier:          iM2NEuvsSKw1A+MqM6mHVOZ6CAcqOirNmZD1FelWTVM=
Subject key identifier:   F9:7B:72:8A:C1:3D:02:4E:73:7F:73:C6:EA:B2:71:B5:76:7B:BA:A6
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       77FE07BA85AF9EE56B6D5395F7032004BADBA5F6
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa
Signing time:             Wed 03 Apr 2024 18:30:36 +0000
ROA not before:           Wed 03 Apr 2024 18:25:36 +0000
ROA not after:            Wed 02 Apr 2025 18:30:36 +0000
asID:                     263994
IP address blocks:        138.255.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fe:07:ba:85:af:9e:e5:6b:6d:53:95:f7:03:20:04:ba:db:a5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Apr  3 18:25:36 2024 GMT
            Not After : Apr  2 18:30:36 2025 GMT
        Subject: CN=F97B728AC13D024E737F73C6EAB271B5767BBAA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:a1:63:08:05:7f:98:70:f6:01:c7:9b:cb:
                    33:cf:3f:e1:b8:fe:e0:6c:24:b7:fe:61:78:5b:38:
                    22:c0:95:49:9e:b2:49:fb:4b:74:f4:63:c9:fc:34:
                    2d:df:2e:95:1a:01:15:8e:f7:8f:8b:78:62:b9:21:
                    b3:9d:0c:a0:3c:a3:50:65:07:1a:43:62:80:18:85:
                    e9:9c:95:36:ac:c1:1a:6a:95:05:08:57:86:60:2c:
                    4e:c3:37:41:1c:68:ca:38:2c:cc:a6:48:ac:d0:5f:
                    34:2e:4c:60:c8:71:f0:68:85:18:20:7f:2d:43:bd:
                    f6:9f:63:d9:67:64:36:03:22:b4:f6:35:87:f1:8a:
                    2f:e8:97:0b:39:00:76:2c:96:d9:53:97:2d:db:d6:
                    1d:60:8b:10:5a:74:06:27:9e:9d:46:27:ba:d8:45:
                    f3:6c:27:f3:6e:a7:f5:82:e1:23:d2:c1:9a:52:da:
                    ae:84:08:e7:c8:3e:73:16:86:fa:ab:7b:cd:f8:6d:
                    1f:39:c7:7d:2e:32:a1:d2:db:41:41:06:42:44:6b:
                    bf:c7:84:4a:ba:81:f4:4c:ce:ce:0d:8a:24:61:96:
                    df:e2:3d:61:64:2a:7c:78:c7:c3:4b:7a:c4:92:9a:
                    42:fc:c2:66:a9:d2:eb:7d:c0:20:d6:93:29:7f:f6:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7B:72:8A:C1:3D:02:4E:73:7F:73:C6:EA:B2:71:B5:76:7B:BA:A6
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32332d3233203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:d7:50:ae:92:28:32:77:c5:34:af:b5:6f:1e:31:71:43:df:
         da:47:bd:fc:38:c8:36:3d:8a:0e:ca:78:fe:b6:fb:b7:6a:68:
         0d:ea:ba:f6:b0:58:18:f0:d8:3a:48:94:c9:d2:a5:26:96:1a:
         ea:1f:ec:a0:d0:88:1f:c7:57:ca:4d:46:61:97:61:02:bf:a6:
         55:be:22:ee:87:ea:13:da:27:0f:6e:34:1c:37:0d:83:0f:97:
         41:2a:f7:3f:a2:f0:00:48:24:bc:df:41:23:2d:f9:99:08:46:
         ea:28:4c:9a:5b:44:34:d6:d8:ac:ea:25:24:5f:b2:48:25:9e:
         4d:1f:b2:91:0e:0f:42:bf:f7:4a:22:94:2a:0a:6b:3b:62:73:
         c5:3a:4c:a7:2b:17:c2:40:d1:53:2f:3b:36:10:c6:07:5f:0f:
         6a:9c:42:e7:03:98:b5:af:72:38:1d:06:6b:bf:d9:28:ae:4b:
         c7:4b:98:d4:38:3f:33:67:07:db:89:e9:ff:ad:7a:3c:26:8e:
         a8:20:aa:6a:f2:66:2c:3a:33:71:c1:da:7e:dd:ad:52:a7:a2:
         c6:d8:b4:2e:0a:f9:e6:c5:a0:42:8a:e9:96:67:23:77:7f:3a:
         5c:ca:46:b8:cf:f0:61:eb:2c:b4:89:f5:e4:8f:b5:c2:fb:4c:
         17:bd:34:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:33 2024 by rpki-client on console-fra.rpki-client.org