Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32332e302f32342d3234203d3e20323633393531.roa
File:                     3133382e3235352e32332e302f32342d3234203d3e20323633393531.roa (raw, json)
Hash identifier:          Rp88grwp7U83n6x6Ilc9A7gjxwS0Iohsy3eMd2MXb3o=
Subject key identifier:   F3:93:BA:AC:2E:01:B1:4D:3D:DF:E8:6B:0F:1C:56:0B:05:7E:5F:65
Certificate issuer:       /CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD
Certificate serial:       1177CBBDE8DB45A1E5ECEA73ABF914424981DE74
Authority key identifier: 3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32332e302f32342d3234203d3e20323633393531.roa
Signing time:             Sun 21 Apr 2024 19:28:15 +0000
ROA not before:           Sun 21 Apr 2024 19:23:15 +0000
ROA not after:            Sun 20 Apr 2025 19:28:15 +0000
asID:                     263951
IP address blocks:        138.255.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.crl
                          rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:77:cb:bd:e8:db:45:a1:e5:ec:ea:73:ab:f9:14:42:49:81:de:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD
        Validity
            Not Before: Apr 21 19:23:15 2024 GMT
            Not After : Apr 20 19:28:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:11:d8:83:b2:48:00:08:d1:b9:72:30:89:
                    ca:5f:24:a6:a0:c2:aa:b7:1b:00:fe:72:1c:73:f6:
                    1b:a0:e5:64:4c:32:45:3d:b1:4d:16:b9:de:69:1c:
                    07:ed:0b:71:14:a1:ae:c4:aa:4a:fd:9d:c6:35:5a:
                    1e:9d:57:a5:e1:14:99:66:93:d4:4c:1e:7d:b6:a6:
                    e5:1a:c0:1a:5b:89:bb:8d:04:7a:48:c2:81:19:b2:
                    63:8b:9d:05:0d:1a:09:66:b0:45:d8:54:7a:0b:d7:
                    f2:b1:f1:d3:49:14:a7:a0:9a:c2:96:05:7b:7b:78:
                    0a:a4:da:2e:99:f9:60:fb:8d:a5:8b:54:7d:9b:9a:
                    2e:8a:93:a3:22:34:c2:93:12:44:5f:cd:a8:00:5e:
                    00:a2:f0:4e:44:9c:58:13:64:38:db:7b:73:1b:22:
                    83:74:1d:fd:cd:d8:6d:f5:ec:db:75:79:37:d6:ad:
                    80:20:9a:da:28:1f:d1:ba:2d:69:aa:89:99:5a:2d:
                    62:18:06:ab:5f:6f:be:0e:44:7c:5a:e7:52:e6:4d:
                    ec:3d:c7:c8:37:f9:d7:1b:aa:00:59:df:d2:6c:a6:
                    e5:ed:ff:bc:82:4b:f8:1e:99:26:53:0a:56:ec:57:
                    11:96:6c:80:6f:b1:bd:09:02:15:6f:77:f0:0d:9f:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:93:BA:AC:2E:01:B1:4D:3D:DF:E8:6B:0F:1C:56:0B:05:7E:5F:65
            X509v3 Authority Key Identifier:
                keyid:3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3133382e3235352e32332e302f32342d3234203d3e20323633393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:36:8b:6a:13:c6:76:31:96:09:44:a1:a9:7f:a1:ca:2f:03:
         e4:97:4b:4f:cc:06:8f:fa:94:d5:bf:48:58:d2:78:4b:5e:35:
         a7:d5:c1:a1:0f:8d:4c:25:7f:fe:a1:65:1e:b6:fe:d8:32:bd:
         ba:a0:0c:6d:b2:c6:f1:4d:7d:05:ca:03:b5:a3:21:19:01:d6:
         6a:e2:ff:25:98:bc:41:83:6f:a3:f9:9c:6d:bb:55:4e:64:0c:
         73:67:94:e9:8c:68:99:29:3d:81:8b:89:68:8e:f2:a9:d2:33:
         2d:43:ab:12:41:fb:45:34:f4:c5:6f:db:c2:0c:25:2a:7a:ed:
         b5:b8:64:52:7c:46:df:f6:fe:80:d5:b7:ea:b2:e2:00:b3:02:
         18:8f:03:0e:d2:da:d7:fc:16:3a:c9:13:93:61:e0:b8:20:1b:
         d0:2e:cb:4a:e1:66:1a:f3:60:57:71:eb:dd:7f:f8:3f:5d:97:
         e9:11:d1:00:f8:9d:11:56:08:21:fd:ab:db:1f:6d:57:50:14:
         d3:0a:93:77:d3:cd:68:be:4b:fe:74:34:eb:2f:b6:ec:fb:1e:
         ff:6b:93:71:c1:a2:78:2e:91:24:95:b2:8d:2f:a7:17:24:88:
         83:a0:09:72:92:bb:be:77:65:a0:34:88:90:31:0b:99:1e:9d:
         9d:66:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:21 2024 by rpki-client on console-ams.rpki-client.org