Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa
File:                     3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa (raw, json)
Hash identifier:          naR7xR43BZEpNhhT5KuYQe/gTN8cI2HLX66xREWgjjs=
Subject key identifier:   99:70:B1:91:99:E1:6B:FE:5B:D7:58:E5:8A:1A:C9:7C:F1:62:5C:23
Certificate issuer:       /CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
Certificate serial:       27F07D834887B73F6DC3611300F2D9126AEAAC45
Authority key identifier: D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa
Signing time:             Mon 07 Oct 2024 19:09:57 +0000
ROA not before:           Mon 07 Oct 2024 19:04:57 +0000
ROA not after:            Mon 06 Oct 2025 19:09:57 +0000
asID:                     263975
IP address blocks:        138.255.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl
                          rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f0:7d:83:48:87:b7:3f:6d:c3:61:13:00:f2:d9:12:6a:ea:ac:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6274A390B48BA4705B9758D16F2C8FAB648BE56
        Validity
            Not Before: Oct  7 19:04:57 2024 GMT
            Not After : Oct  6 19:09:57 2025 GMT
        Subject: CN=9970B19199E16BFE5BD758E58A1AC97CF1625C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:53:e7:7c:54:65:65:62:42:91:74:1a:1a:
                    78:a3:0c:fb:60:9c:4d:85:8b:7b:5f:ff:c3:62:1e:
                    a2:4a:eb:eb:5d:f7:16:8d:f8:12:7b:09:7e:d7:fe:
                    43:88:fa:b2:dd:88:8b:bf:97:9d:eb:1e:ec:b6:fe:
                    18:89:96:1d:57:35:ce:8c:f4:54:5e:7f:1c:d3:ea:
                    2b:84:38:28:c1:e4:69:6e:fa:9f:61:4f:9f:01:fa:
                    f3:07:8f:aa:36:50:bf:00:18:f6:14:5d:26:4d:67:
                    14:b8:79:b3:5a:58:7d:17:64:2d:97:87:30:8e:bc:
                    8c:82:c2:64:c5:af:eb:a4:36:90:c3:17:23:54:13:
                    b3:7d:43:62:46:e0:62:99:12:36:6d:ac:9f:60:df:
                    71:71:7b:04:c0:be:ce:fb:15:66:ae:c8:dc:6e:81:
                    1c:aa:a3:b5:96:b6:8d:0e:d7:ce:90:a9:c6:bf:27:
                    9a:33:6f:07:8c:05:19:80:1c:6d:af:f0:5c:61:d4:
                    55:08:3d:cc:e8:db:3c:7a:ca:cd:2a:60:a1:41:4d:
                    03:3c:4b:a0:86:39:dc:35:ae:44:1c:2a:33:c6:15:
                    c9:07:8c:3c:0a:37:6c:44:57:30:94:45:47:7d:2f:
                    08:bf:bb:ef:3e:28:a4:df:42:6c:99:19:d5:96:b7:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:70:B1:91:99:E1:6B:FE:5B:D7:58:E5:8A:1A:C9:7C:F1:62:5C:23
            X509v3 Authority Key Identifier:
                keyid:D6:27:4A:39:0B:48:BA:47:05:B9:75:8D:16:F2:C8:FA:B6:48:BE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/D6274A390B48BA4705B9758D16F2C8FAB648BE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6274A390B48BA4705B9758D16F2C8FAB648BE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DtoXTcHQEi1KintiFz6wGtFAUQocXpHiW9oAfEi3ukGs/0/3133382e3235352e3136302e302f32342d3234203d3e20323633393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:72:dd:52:be:97:be:6e:2a:55:0c:12:5a:45:89:c0:38:e3:
         80:c9:79:14:30:e2:a7:85:9f:b8:46:55:5e:8e:cb:69:c4:42:
         31:94:98:ac:13:07:f0:3b:6e:de:d4:3a:28:a4:8a:55:3e:7d:
         7c:c7:a4:a8:cd:3f:2f:9c:89:f9:7c:55:cd:0c:f4:08:38:18:
         56:ca:44:55:0c:b7:f3:8a:50:51:c4:96:57:a3:1c:cf:6f:80:
         7a:b9:c6:32:c1:cf:64:9f:ea:63:19:f4:10:82:6e:54:43:c4:
         dc:e1:fd:ce:e0:84:8d:e6:4e:6e:5d:b5:47:8a:6d:e0:69:95:
         12:bf:3c:bd:1c:7e:66:db:9f:f3:51:06:ef:5a:a6:c7:65:d9:
         21:af:66:5f:bb:63:7f:21:ef:c9:d7:15:0c:4d:9f:84:ba:32:
         44:a1:5c:f4:9d:b6:7d:30:8c:24:36:02:34:05:6c:77:14:e5:
         f7:8a:b8:1a:5f:ae:7f:c4:c8:87:ba:08:23:a7:de:2d:2a:62:
         c2:56:69:dd:52:97:a7:4f:1c:88:f9:52:56:85:c5:af:d5:6e:
         b0:62:25:26:d9:8f:f2:13:16:88:f3:08:e4:70:47:5a:e1:ed:
         d9:43:50:34:5a:c9:6b:7a:ba:55:e8:35:50:ed:6f:63:e8:93:
         d9:5f:21:aa
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJ/B9g0iHtz9tw2ETAPLZEmrqrEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYyNzRBMzkwQjQ4QkE0NzA1Qjk3NThEMTZGMkM4RkFC
NjQ4QkU1NjAeFw0yNDEwMDcxOTA0NTdaFw0yNTEwMDYxOTA5NTdaMDMxMTAvBgNV
BAMTKDk5NzBCMTkxOTlFMTZCRkU1QkQ3NThFNThBMUFDOTdDRjE2MjVDMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnFPnfFRlZWJCkXQaGnijDPtg
nE2Fi3tf/8NiHqJK6+td9xaN+BJ7CX7X/kOI+rLdiIu/l53rHuy2/hiJlh1XNc6M
9FRefxzT6iuEOCjB5Glu+p9hT58B+vMHj6o2UL8AGPYUXSZNZxS4ebNaWH0XZC2X
hzCOvIyCwmTFr+ukNpDDFyNUE7N9Q2JG4GKZEjZtrJ9g33FxewTAvs77FWauyNxu
gRyqo7WWto0O186Qqca/J5ozbweMBRmAHG2v8Fxh1FUIPczo2zx6ys0qYKFBTQM8
S6CGOdw1rkQcKjPGFckHjDwKN2xEVzCURUd9Lwi/u+8+KKTfQmyZGdWWtwfTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmXCxkZnha/5b11jlihrJfPFiXCMwHwYDVR0j
BBgwFoAU1idKOQtIukcFuXWNFvLI+rZIvlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHRvWFRjSFFFaTFLaW50aUZ6NndHdEZBVVFvY1hwSGlXOW9BZkVpM3Vr
R3MvMC9ENjI3NEEzOTBCNDhCQTQ3MDVCOTc1OEQxNkYyQzhGQUI2NDhCRTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2Mjc0QTM5MEI0OEJBNDcw
NUI5NzU4RDE2RjJDOEZBQjY0OEJFNTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R0b1hUY0hRRWkxS2ludGlGejZ3R3RGQVVRb2NYcEhpVzlvQWZFaTN1a0dzLzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr/oDANBgkqhkiG9w0BAQsFAAOCAQEAOXLd
Ur6Xvm4qVQwSWkWJwDjjgMl5FDDip4WfuEZVXo7LacRCMZSYrBMH8Dtu3tQ6KKSK
VT59fMekqM0/L5yJ+XxVzQz0CDgYVspEVQy384pQUcSWV6Mcz2+AernGMsHPZJ/q
Yxn0EIJuVEPE3OH9zuCEjeZObl21R4pt4GmVEr88vRx+Ztuf81EG71qmx2XZIa9m
X7tjfyHvydcVDE2fhLoyRKFc9J22fTCMJDYCNAVsdxTl94q4Gl+uf8TIh7oII6fe
LSpiwlZp3VKXp08ciPlSVoXFr9VusGIlJtmP8hMWiPMI5HBHWuHt2UNQNFrJa3q6
Veg1UO1vY+iT2V8hqg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:30 2025 by rpki-client