Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa
File:                     3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa (raw, json)
Hash identifier:          kj8l0zSjssaQNc9slOIMW/J3/PdAeGx2Nwmkzj5chPU=
Subject key identifier:   6A:68:A3:AA:F0:70:F4:3E:7C:16:D3:C4:10:2B:48:7B:33:CC:47:96
Certificate issuer:       /CN=6933A3E9616B92D4A6606885C3C206355CC19035
Certificate serial:       70B80286F5B6CB976A068CBA01BFF87D4B90C454
Authority key identifier: 69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa
Signing time:             Wed 03 Apr 2024 18:30:36 +0000
ROA not before:           Wed 03 Apr 2024 18:25:36 +0000
ROA not after:            Wed 02 Apr 2025 18:30:36 +0000
asID:                     263994
IP address blocks:        138.255.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl
                          rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b8:02:86:f5:b6:cb:97:6a:06:8c:ba:01:bf:f8:7d:4b:90:c4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6933A3E9616B92D4A6606885C3C206355CC19035
        Validity
            Not Before: Apr  3 18:25:36 2024 GMT
            Not After : Apr  2 18:30:36 2025 GMT
        Subject: CN=6A68A3AAF070F43E7C16D3C4102B487B33CC4796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:6e:6b:fd:7d:fc:b6:e6:f1:df:fe:07:05:
                    2b:f7:eb:cc:e1:78:1c:ca:46:43:f0:2f:5d:0d:21:
                    a3:56:4a:47:97:68:54:07:d0:ff:cd:bd:5e:64:33:
                    f1:0f:d1:48:be:f3:27:8a:8f:9c:dd:ca:61:bb:80:
                    66:f8:ef:af:77:59:c5:e8:3a:ab:af:f7:fe:f7:aa:
                    82:23:a1:d9:f5:23:30:c4:28:1f:d1:f6:18:44:d6:
                    8e:b8:c8:d1:1b:40:30:aa:8d:ca:80:9b:4f:4f:1b:
                    00:06:a5:67:c4:c5:1f:11:b6:7b:2e:09:e2:8c:65:
                    f8:aa:8b:6c:2e:f7:1e:97:5e:bf:9f:a8:03:d7:22:
                    aa:33:b0:c3:fe:4f:38:bf:22:4e:a6:5c:7b:6b:94:
                    ad:88:2a:9c:ed:96:c6:bc:5e:f1:51:fb:25:9b:4d:
                    fc:da:16:63:61:80:8a:9e:7f:e9:c5:5a:de:76:c1:
                    97:2c:e5:a2:6f:d4:92:96:8f:fe:34:64:b7:2e:d5:
                    24:65:67:e3:9e:44:91:60:3c:b3:24:06:d9:6b:43:
                    95:6e:fb:18:3f:45:9c:13:55:b6:df:97:1a:03:6a:
                    0d:37:d9:f4:70:a2:b8:ca:52:fe:18:41:37:64:a8:
                    7b:03:c5:3a:de:e0:58:84:f9:52:45:b7:c9:d1:f6:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:68:A3:AA:F0:70:F4:3E:7C:16:D3:C4:10:2B:48:7B:33:CC:47:96
            X509v3 Authority Key Identifier:
                keyid:69:33:A3:E9:61:6B:92:D4:A6:60:68:85:C3:C2:06:35:5C:C1:90:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/6933A3E9616B92D4A6606885C3C206355CC19035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6933A3E9616B92D4A6606885C3C206355CC19035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/1/3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:45:31:d8:2d:d7:89:d9:e1:79:bf:35:88:6e:01:b0:9f:
         01:70:70:98:5a:fe:44:c4:49:ef:3e:d8:24:22:67:7f:fa:78:
         01:50:05:7f:63:3a:6b:ac:68:ca:e2:80:76:38:e7:18:58:ce:
         8c:80:ac:dc:ae:54:17:8a:6f:a3:4f:95:a7:b1:fc:c0:b8:78:
         60:c5:ea:17:10:7a:76:7f:2b:90:03:b9:64:c6:26:9c:1d:32:
         5f:d6:8f:ea:a9:9b:13:da:3f:92:ac:4e:85:ac:c8:20:95:5e:
         f1:82:34:eb:40:0d:a8:a9:e9:19:63:9e:15:98:02:1a:a2:ae:
         89:7f:71:46:20:35:99:c7:e9:c7:a9:67:de:e9:3e:8b:41:0c:
         a3:20:bb:1a:cb:ed:ed:4b:c8:51:6b:43:73:5a:e2:a0:c8:26:
         0d:e6:54:3d:47:e4:49:92:9c:d0:ce:9e:b8:47:33:f3:7a:79:
         c7:9b:c2:71:09:46:5a:c5:70:5c:5b:57:81:fc:70:21:40:80:
         ff:ab:d0:89:c9:df:1f:3b:61:a9:19:2a:85:0b:8e:02:46:7a:
         3f:c3:97:d6:45:6b:25:45:a3:90:4a:df:b3:f7:4b:c0:f7:4d:
         69:ae:9f:be:e1:45:42:c0:6e:bc:d0:97:64:2d:9f:44:4d:62:
         af:2f:be:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:07 2024 by rpki-client on console-fra.rpki-client.org