Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa
File:                     3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa (raw, json)
Hash identifier:          zD/9qbuZHN+H9UL31kfshHeKceNDT7ndOPf57IRP28U=
Subject key identifier:   56:25:D4:AD:E5:C3:E1:03:88:8D:EF:DC:5F:BC:7F:F8:09:BB:25:A6
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       28A861BCE672607A4B4E85D7F764F6899B40FFCA
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa
Signing time:             Wed 03 Apr 2024 18:30:35 +0000
ROA not before:           Wed 03 Apr 2024 18:25:35 +0000
ROA not after:            Wed 02 Apr 2025 18:30:35 +0000
asID:                     263994
IP address blocks:        138.255.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a8:61:bc:e6:72:60:7a:4b:4e:85:d7:f7:64:f6:89:9b:40:ff:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Apr  3 18:25:35 2024 GMT
            Not After : Apr  2 18:30:35 2025 GMT
        Subject: CN=5625D4ADE5C3E103888DEFDC5FBC7FF809BB25A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:f1:db:ac:32:32:2c:c0:99:ae:52:8e:a0:
                    15:51:12:e8:06:8d:f5:7d:6a:4c:54:3d:e5:ba:45:
                    df:0a:db:23:14:e4:32:4f:d6:a7:dc:fb:64:50:07:
                    bc:3d:56:04:93:c9:fa:13:da:34:43:9c:d3:b9:76:
                    1d:0a:76:7f:8a:f4:3b:64:18:e1:39:7e:07:27:83:
                    95:d5:f3:b3:05:69:54:4b:1b:24:3e:1a:f5:fd:f2:
                    c2:82:b0:c5:1e:62:ba:fd:c5:ea:b8:fc:a5:05:9e:
                    5a:f4:9d:78:39:ec:b6:83:41:e9:b3:c9:87:da:b8:
                    a3:55:97:11:b8:a9:40:2c:21:7a:4b:e2:16:8f:80:
                    03:cb:bc:2d:df:63:d6:02:37:0d:22:b4:1a:42:08:
                    24:e6:aa:aa:86:1b:38:a5:f3:87:66:71:30:aa:51:
                    7d:59:11:e5:49:93:b3:4f:98:a2:f1:c4:70:d7:5e:
                    98:e1:52:ea:18:5a:38:d0:12:0b:22:07:b3:ae:03:
                    e0:c5:6b:d1:15:68:cd:31:84:b2:e2:06:4d:9a:99:
                    a8:ec:8d:76:7b:3c:71:09:0a:fa:28:bc:ea:45:b6:
                    6a:b9:8e:86:be:9f:c0:89:85:e3:35:e5:f1:2e:59:
                    09:2e:eb:a7:3a:7f:c4:ac:da:dc:49:cf:97:8c:21:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:D4:AD:E5:C3:E1:03:88:8D:EF:DC:5F:BC:7F:F8:09:BB:25:A6
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232322e302f32342d3234203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:e3:f4:2f:76:aa:fa:03:52:75:04:47:e7:81:ba:d2:13:c9:
         8a:16:0e:aa:a0:33:b1:03:fc:28:fa:b3:20:1a:10:2d:c0:fe:
         7a:ce:d2:56:cd:15:fc:fb:f2:08:77:89:b6:1d:e5:fa:5b:9c:
         5b:56:e4:cc:22:19:aa:8e:b2:4e:f3:e4:a8:4f:d0:7c:4d:6c:
         62:b4:87:1c:7e:5e:25:bf:42:d2:86:8f:16:2e:66:f7:47:15:
         17:df:50:98:2c:b6:31:ca:96:51:c7:a6:30:15:d7:6e:b8:30:
         50:6a:ca:77:9a:5d:78:c7:28:40:03:73:30:8c:95:1d:fe:aa:
         e9:41:bb:6b:56:71:4d:2f:e2:e5:20:2e:42:13:3e:92:07:17:
         d9:23:10:9c:f0:66:2a:fe:fc:a7:bb:0f:7f:85:33:2a:4c:04:
         82:b9:d7:97:5f:6a:52:27:55:2c:fb:9e:ee:e9:aa:cf:97:0a:
         ba:e7:b1:ae:83:4c:04:a3:5f:bd:74:36:22:7d:91:b2:02:5f:
         83:52:01:ae:ed:7e:dc:17:a9:39:ed:96:72:90:0c:0c:58:dc:
         fb:be:04:6b:b1:ef:5a:0a:4a:77:0e:19:7c:25:97:51:3b:f8:
         46:9d:3d:dd:bd:df:48:68:da:f7:07:12:bd:2f:c2:72:11:fe:
         b6:9a:76:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:07 2024 by rpki-client on console-fra.rpki-client.org