Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa
File:                     3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa (raw, json)
Hash identifier:          5DLxYWgQQyCfePd0iNhHpMKya0VwZ66k1HAFlRpqqT8=
Subject key identifier:   D8:23:79:F0:26:98:82:34:C0:35:F4:F6:CA:FE:30:48:4D:4C:CF:21
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       2737581780700A2C41FD966ABF0C5E957F4BD539
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa
Signing time:             Wed 03 Apr 2024 18:30:36 +0000
ROA not before:           Wed 03 Apr 2024 18:25:36 +0000
ROA not after:            Wed 02 Apr 2025 18:30:36 +0000
asID:                     264311
IP address blocks:        138.122.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:37:58:17:80:70:0a:2c:41:fd:96:6a:bf:0c:5e:95:7f:4b:d5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Apr  3 18:25:36 2024 GMT
            Not After : Apr  2 18:30:36 2025 GMT
        Subject: CN=3082010A0282010100BD932D568815842A0EBAB66A3355D335BCFE6BAB727C413CEFAB796DBAE8CF4DDACDB6649F8EBEE4F5C668749A464E01C8A58A2F6C9A6198AC7F863CCCA73C840BF7B0951CA5B4FB653CCE2D6CABF9CE8B3DA26133E5F6035E3133391A74DB49429FEC7EFF4619F9F2432CA5E211DA6A670955FB41A1A3CF0B1B2F295A1F7E9D730011E5317D6DA86A3822B031EF71928D094E132EF8F01A162B8530B011B51F114FBAAFC731AD6EE97B4FEF5CC45BC2FC1F1BFFA3DC06F4A544EEB5AF7D7B2154C2FD623831E73BEFDA122AEAC8C99BD44CB3D766A5517087C706C83148FC483F9826741218F9F7BC30675CDC809D7864E8B35CA60662E9E9D221553749C4BF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:2d:56:88:15:84:2a:0e:ba:b6:6a:33:55:
                    d3:35:bc:fe:6b:ab:72:7c:41:3c:ef:ab:79:6d:ba:
                    e8:cf:4d:da:cd:b6:64:9f:8e:be:e4:f5:c6:68:74:
                    9a:46:4e:01:c8:a5:8a:2f:6c:9a:61:98:ac:7f:86:
                    3c:cc:a7:3c:84:0b:f7:b0:95:1c:a5:b4:fb:65:3c:
                    ce:2d:6c:ab:f9:ce:8b:3d:a2:61:33:e5:f6:03:5e:
                    31:33:39:1a:74:db:49:42:9f:ec:7e:ff:46:19:f9:
                    f2:43:2c:a5:e2:11:da:6a:67:09:55:fb:41:a1:a3:
                    cf:0b:1b:2f:29:5a:1f:7e:9d:73:00:11:e5:31:7d:
                    6d:a8:6a:38:22:b0:31:ef:71:92:8d:09:4e:13:2e:
                    f8:f0:1a:16:2b:85:30:b0:11:b5:1f:11:4f:ba:af:
                    c7:31:ad:6e:e9:7b:4f:ef:5c:c4:5b:c2:fc:1f:1b:
                    ff:a3:dc:06:f4:a5:44:ee:b5:af:7d:7b:21:54:c2:
                    fd:62:38:31:e7:3b:ef:da:12:2a:ea:c8:c9:9b:d4:
                    4c:b3:d7:66:a5:51:70:87:c7:06:c8:31:48:fc:48:
                    3f:98:26:74:12:18:f9:f7:bc:30:67:5c:dc:80:9d:
                    78:64:e8:b3:5c:a6:06:62:e9:e9:d2:21:55:37:49:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:23:79:F0:26:98:82:34:C0:35:F4:F6:CA:FE:30:48:4D:4C:CF:21
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/3133382e3132322e3130322e302f32332d3233203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:d4:d5:ba:4a:6d:06:bf:c5:14:ff:88:47:95:05:1c:bd:fe:
         42:74:00:47:61:d1:71:36:9d:60:2a:6e:57:27:d7:b6:df:d2:
         ea:d0:9c:c9:58:f1:e9:22:cb:35:c8:35:c1:46:d5:42:42:8d:
         68:c1:b9:9d:f6:a9:a1:a1:08:b4:0d:0c:50:5c:0f:2a:3e:ae:
         5f:7a:df:0f:d4:36:a3:00:3b:6d:97:a5:89:aa:e1:fc:93:80:
         ce:79:05:81:20:5c:43:63:c9:2a:41:1a:53:d1:e9:06:6c:60:
         a3:0f:7a:cc:d9:7e:ed:41:c5:ed:54:8c:98:c5:83:6b:1c:76:
         f0:02:92:b2:39:5d:8d:e8:4c:30:4c:dd:3d:a4:4e:0b:4b:2b:
         05:35:cd:14:d5:5c:bd:72:d4:c8:e8:b0:79:12:fd:b0:af:bb:
         d0:2d:d8:0d:bf:67:c6:a0:7c:e2:fd:05:c3:97:7c:32:db:8c:
         9b:a7:7e:59:8e:a4:5d:30:46:12:82:dc:9b:69:6d:55:09:a7:
         8c:e0:84:ae:09:b4:03:e1:20:98:e4:f4:e1:27:f6:f1:ff:9a:
         b0:11:9f:21:50:bf:62:40:88:97:2c:d7:c2:59:6c:80:62:1c:
         54:bc:6e:9a:77:9f:7d:6b:e4:a6:fe:e6:f7:1e:dd:d6:5f:6c:
         2c:60:19:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org