Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32332d3233203d3e20323634333131.roa
File:                     3133382e3132322e3130302e302f32332d3233203d3e20323634333131.roa (raw, json)
Hash identifier:          0ZsJ5MSC3dXKYqe31exaonBWDYlHYpcde8JjP7X7nx0=
Subject key identifier:   CD:D9:FE:AA:B0:F4:25:29:B7:05:D1:18:E5:53:A4:D6:1F:4E:6E:6A
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       2BB24DAC92531E42AAC691E6E5B51CC7A8C9CC65
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32332d3233203d3e20323634333131.roa
Signing time:             Wed 03 Apr 2024 18:30:36 +0000
ROA not before:           Wed 03 Apr 2024 18:25:36 +0000
ROA not after:            Wed 02 Apr 2025 18:30:36 +0000
asID:                     264311
IP address blocks:        138.122.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b2:4d:ac:92:53:1e:42:aa:c6:91:e6:e5:b5:1c:c7:a8:c9:cc:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Apr  3 18:25:36 2024 GMT
            Not After : Apr  2 18:30:36 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:44:6a:c5:55:9b:43:c1:17:09:b9:9b:f7:
                    c2:a0:14:27:6a:84:25:8c:28:4c:e3:5d:30:a1:39:
                    06:f2:f4:0b:c7:ff:34:e5:f3:2c:af:64:a5:5c:75:
                    17:b8:6a:cb:b3:8a:bc:70:2c:91:b6:6f:6c:79:ec:
                    6f:f3:68:39:76:83:80:1e:0b:c4:3e:4b:fc:d6:7c:
                    d8:54:89:56:59:d9:28:33:44:f0:f2:90:d6:af:c2:
                    20:8e:56:6c:53:e7:7c:ba:d7:9a:ab:d4:fd:7a:de:
                    9f:8e:70:c5:b8:76:63:7f:a5:9f:e5:f0:f4:92:5a:
                    e2:b8:f1:47:ae:77:0a:66:9e:17:91:37:54:60:da:
                    49:1c:5b:17:67:d5:ac:1e:fc:4e:da:fa:d5:61:4e:
                    59:9c:36:f3:e0:2d:38:e5:cf:1f:45:7e:85:24:92:
                    a5:39:23:f5:4d:3d:8a:f6:e9:f7:5d:60:bb:aa:a2:
                    11:84:c0:dd:69:b0:0a:89:d8:f9:f0:3c:eb:1f:d1:
                    00:8b:a3:f3:75:d9:6a:7b:ca:1e:16:be:8b:4b:b1:
                    8c:2b:85:5b:bf:fd:66:24:b3:d3:79:4a:1b:01:80:
                    fb:7a:82:9d:ae:bd:10:01:a7:e4:c7:44:bf:b0:65:
                    dc:2e:27:64:bd:44:2c:be:2c:f9:72:9c:8b:11:ea:
                    21:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D9:FE:AA:B0:F4:25:29:B7:05:D1:18:E5:53:A4:D6:1F:4E:6E:6A
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130302e302f32332d3233203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:77:df:0a:04:bb:bb:09:a3:a4:36:24:ad:1f:3e:0e:fc:fc:
         b7:66:a6:a7:17:ac:df:6b:ea:03:e0:b4:dd:49:f6:96:e8:11:
         d3:71:1b:45:53:3e:0c:bd:4f:26:37:b1:29:6e:6e:16:3d:91:
         7a:34:15:79:98:19:15:40:c0:6e:43:06:19:ec:93:fc:c1:fc:
         58:80:19:6d:2c:12:30:65:44:ac:68:68:69:18:68:ea:90:0f:
         13:28:fc:88:b8:05:37:58:5f:94:ce:4f:71:06:81:df:15:86:
         e0:71:8b:8c:86:1c:d1:31:5e:83:a2:3c:5f:ee:72:ad:06:c4:
         65:a5:9a:3e:47:4a:a2:fe:d1:1f:13:f6:c6:4f:27:20:a1:e8:
         21:f6:10:b9:cd:e7:07:2d:4d:92:50:86:8b:c3:5a:20:d1:56:
         21:01:32:92:cb:65:7b:7d:66:db:a8:01:d7:8b:02:24:f1:0a:
         3b:e2:e2:f7:0e:90:1c:33:f6:cd:d6:8c:5f:82:9a:88:8f:14:
         16:38:f2:10:04:f9:c4:f8:67:14:39:b8:ca:89:16:3a:92:b9:
         90:71:ab:a6:92:50:8f:a6:08:f3:e7:e7:a5:e8:17:c4:f6:ed:
         3a:bc:e0:1f:37:1b:a5:0a:60:a5:3f:9d:a4:f6:75:2e:6a:c9:
         10:e7:49:af
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUK7JNrJJTHkKqxpHm5bUcx6jJzGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFMEJFM0M0RjczRjg1MkJGRjM1MzU1MzcwMzdDQUU0
ODJBNEVGQTAeFw0yNDA0MDMxODI1MzZaFw0yNTA0MDIxODMwMzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0QxNDQ0NkFDNTU1OUI0M0Mx
MTcwOUI5OUJGN0MyQTAxNDI3NkE4NDI1OEMyODRDRTM1RDMwQTEzOTA2RjJGNDBC
QzdGRjM0RTVGMzJDQUY2NEE1NUM3NTE3Qjg2QUNCQjM4QUJDNzAyQzkxQjY2RjZD
NzlFQzZGRjM2ODM5NzY4MzgwMUUwQkM0M0U0QkZDRDY3Q0Q4NTQ4OTU2NTlEOTI4
MzM0NEYwRjI5MEQ2QUZDMjIwOEU1NjZDNTNFNzdDQkFENzlBQUJENEZEN0FERTlG
OEU3MEM1Qjg3NjYzN0ZBNTlGRTVGMEY0OTI1QUUyQjhGMTQ3QUU3NzBBNjY5RTE3
OTEzNzU0NjBEQTQ5MUM1QjE3NjdENUFDMUVGQzRFREFGQUQ1NjE0RTU5OUMzNkYz
RTAyRDM4RTVDRjFGNDU3RTg1MjQ5MkE1MzkyM0Y1NEQzRDhBRjZFOUY3NUQ2MEJC
QUFBMjExODRDMERENjlCMDBBODlEOEY5RjAzQ0VCMUZEMTAwOEJBM0YzNzVEOTZB
N0JDQTFFMTZCRThCNEJCMThDMkI4NTVCQkZGRDY2MjRCM0QzNzk0QTFCMDE4MEZC
N0E4MjlEQUVCRDEwMDFBN0U0Qzc0NEJGQjA2NURDMkUyNzY0QkQ0NDJDQkUyQ0Y5
NzI5QzhCMTFFQTIxNjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzRREasVVm0PBFwm5m/fCoBQnaoQljChM410woTkG8vQLx/805fMs
r2SlXHUXuGrLs4q8cCyRtm9seexv82g5doOAHgvEPkv81nzYVIlWWdkoM0Tw8pDW
r8IgjlZsU+d8uteaq9T9et6fjnDFuHZjf6Wf5fD0klriuPFHrncKZp4XkTdUYNpJ
HFsXZ9WsHvxO2vrVYU5ZnDbz4C045c8fRX6FJJKlOSP1TT2K9un3XWC7qqIRhMDd
abAKidj58DzrH9EAi6Pzddlqe8oeFr6LS7GMK4Vbv/1mJLPTeUobAYD7eoKdrr0Q
Aafkx0S/sGXcLidkvUQsviz5cpyLEeohZwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FM3Z/qqw9CUptwXRGOVTpNYfTm5qMB8GA1UdIwQYMBaAFLXgvjxPc/hSv/NTVTcD
fK5IKk76MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NDbXdzVEgzZ3F0UUdI
d2VWRGtWVjV6RXdRS1JkUHZVQWNEYWpBUXQ5V1JmLzEvQjVFMEJFM0M0RjczRjg1
MkJGRjM1MzU1MzcwMzdDQUU0ODJBNEVGQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CNUUwQkUzQzRGNzNGODUyQkZGMzUzNTUzNzAzN0NBRTQ4MkE0
RUZBLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DQ213c1RIM2dxdFFHSHdlVkRr
VlY1ekV3UUtSZFB2VUFjRGFqQVF0OVdSZi8xLzMxMzMzODJlMzEzMjMyMmUzMTMw
MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzQzMzMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGKemQwDQYJKoZIhvcNAQELBQADggEBAG533woEu7sJo6Q2JK0fPg78/LdmpqcX
rN9r6gPgtN1J9pboEdNxG0VTPgy9TyY3sSlubhY9kXo0FXmYGRVAwG5DBhnsk/zB
/FiAGW0sEjBlRKxoaGkYaOqQDxMo/Ii4BTdYX5TOT3EGgd8VhuBxi4yGHNExXoOi
PF/ucq0GxGWlmj5HSqL+0R8T9sZPJyCh6CH2ELnN5wctTZJQhovDWiDRViEBMpLL
ZXt9ZtuoAdeLAiTxCjvi4vcOkBwz9s3WjF+CmoiPFBY48hAE+cT4ZxQ5uMqJFjqS
uZBxq6aSUI+mCPPn56XoF8T27Tq84B83G6UKYKU/naT2dS5qyRDnSa8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org