Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32312e302f32342d3234203d3e20323633393531.roa
File:                     3133382e3235352e32312e302f32342d3234203d3e20323633393531.roa (raw, json)
Hash identifier:          LXAP+0nIRbxzumGInK6yJk1gEt58Ww4It+tpBT5txEc=
Subject key identifier:   CC:74:89:A4:08:34:0D:85:74:F9:16:67:34:B3:E9:3D:25:55:A5:81
Certificate issuer:       /CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD
Certificate serial:       76CE3D986C6652DE7C8337B37B73DE9CEF001181
Authority key identifier: 3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32312e302f32342d3234203d3e20323633393531.roa
Signing time:             Sun 21 Apr 2024 19:28:15 +0000
ROA not before:           Sun 21 Apr 2024 19:23:15 +0000
ROA not after:            Sun 20 Apr 2025 19:28:15 +0000
asID:                     263951
IP address blocks:        138.255.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.crl
                          rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ce:3d:98:6c:66:52:de:7c:83:37:b3:7b:73:de:9c:ef:00:11:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD
        Validity
            Not Before: Apr 21 19:23:15 2024 GMT
            Not After : Apr 20 19:28:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:67:92:ad:72:89:13:a2:0b:a0:8e:d0:4b:96:
                    be:de:f2:fe:fd:ad:0b:09:e7:73:19:43:2e:fc:6e:
                    13:9b:23:d1:a0:3c:e5:9c:a7:3b:6c:d3:0a:4b:1a:
                    46:3e:d8:da:85:87:71:e8:11:d7:66:0d:70:29:06:
                    59:8e:3d:c2:04:ca:28:f0:f0:9c:99:5e:b2:5f:e1:
                    68:9b:47:bd:d8:fa:91:ee:4e:96:f7:5d:80:6a:94:
                    16:20:5f:b9:9e:7d:62:38:df:36:2d:22:2a:8c:27:
                    1e:e4:62:82:03:a8:3f:4f:94:91:0d:b4:ae:b4:df:
                    fc:00:ba:ca:50:0f:3e:92:2b:79:64:e6:fa:ed:30:
                    18:80:07:57:9e:a1:d1:c9:ca:02:64:f8:a8:60:2c:
                    b6:36:68:65:bb:d3:05:4b:ac:8c:f7:f3:36:be:30:
                    f5:51:0b:1d:70:0d:40:eb:e3:1f:7d:2e:b7:27:d0:
                    3e:d5:11:0f:e5:1b:d7:88:86:bf:3b:82:26:8e:61:
                    55:1a:e8:5e:c4:d2:3b:23:48:1f:48:94:f2:99:59:
                    2e:60:b7:f7:54:7d:0f:25:6f:85:9b:c8:d4:31:50:
                    8c:3c:98:c4:b6:94:83:61:7b:ed:a6:22:eb:60:0b:
                    c5:4d:a6:80:51:0b:e4:fd:ab:75:24:7e:f3:7f:8e:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:74:89:A4:08:34:0D:85:74:F9:16:67:34:B3:E9:3D:25:55:A5:81
            X509v3 Authority Key Identifier:
                keyid:3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32312e302f32342d3234203d3e20323633393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:a1:2d:bb:71:2a:22:50:a7:10:7f:21:40:52:9f:89:70:
         2b:38:0e:db:40:0d:05:8d:fb:93:25:f8:a4:0d:82:b3:7c:ee:
         8d:60:c3:80:6b:de:29:04:dd:0d:f1:35:05:8a:25:7f:19:f1:
         88:db:73:92:54:50:94:c0:df:bc:1e:76:9a:cb:ea:d1:78:99:
         c5:9c:29:a5:58:56:67:3b:3f:95:56:90:eb:6e:4d:91:ce:92:
         8a:c7:0a:48:d7:fb:d2:e6:23:a3:b3:c1:d5:1f:86:fb:bb:86:
         bc:5c:5c:12:6f:15:40:18:6b:8d:a4:12:e2:59:81:20:1c:ff:
         bd:f9:14:9b:af:4a:48:85:35:23:0b:23:ff:d2:83:11:a0:9f:
         a9:6c:7f:76:84:e3:24:41:c8:50:83:1e:f9:90:aa:11:f7:1a:
         75:ec:f9:f1:24:f8:b1:7b:4b:ee:55:a2:ec:fc:b8:37:94:65:
         9d:8c:51:1b:a4:70:88:ce:89:d3:51:ae:14:2d:80:11:49:55:
         07:5f:78:9f:85:23:9a:34:1f:ee:44:5e:91:b1:5c:35:cf:38:
         08:29:03:14:26:02:94:d1:1f:e7:9a:b8:66:47:52:30:49:b9:
         0e:d8:0e:57:f3:d2:8b:c9:82:4b:a5:c9:86:ba:9e:ca:ac:a9:
         5d:0e:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:07 2024 by rpki-client on console-fra.rpki-client.org