Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa
File:                     3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa (raw, json)
Hash identifier:          U28MmpQy78cpUStc/G/d7A0kvdiT8T96i+BE4YiqF/Q=
Subject key identifier:   58:49:42:DD:E7:00:2F:F4:7C:F0:7A:5A:91:9A:32:27:55:B7:35:A8
Certificate issuer:       /CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
Certificate serial:       492CFA312F69DC81D0FF6A894D169253710DA8D6
Authority key identifier: CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa
Signing time:             Thu 04 Apr 2024 16:54:17 +0000
ROA not before:           Thu 04 Apr 2024 16:49:17 +0000
ROA not after:            Thu 03 Apr 2025 16:54:17 +0000
asID:                     264512
IP address blocks:        138.255.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl
                          rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2c:fa:31:2f:69:dc:81:d0:ff:6a:89:4d:16:92:53:71:0d:a8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE444325009DC85BE712BCD01156510F2B6F4AB9
        Validity
            Not Before: Apr  4 16:49:17 2024 GMT
            Not After : Apr  3 16:54:17 2025 GMT
        Subject: CN=584942DDE7002FF47CF07A5A919A322755B735A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:cc:1d:34:21:2d:9a:2c:c7:73:7f:ee:5d:
                    e5:e1:b0:7e:c1:9a:6e:34:a4:22:ca:e4:d0:64:90:
                    4d:21:cf:79:43:66:cc:5f:8a:1d:1e:85:cb:9a:d0:
                    bd:14:20:4d:43:cf:dc:b5:c0:ad:c8:c3:8a:73:5d:
                    cb:ec:64:d6:4f:24:0a:5a:81:7c:3d:d1:09:5b:88:
                    26:f6:93:91:96:15:94:78:f9:8c:23:30:ad:78:34:
                    d8:fb:58:3e:16:5b:df:b7:8b:ca:9a:66:62:13:c8:
                    b6:61:53:5b:8f:5c:d6:2d:df:10:0d:db:e8:a2:42:
                    81:c9:56:2c:a1:20:86:4a:67:65:96:de:b3:3e:33:
                    b7:0a:c5:e8:53:1e:8a:b9:60:5d:b8:82:ee:d4:1f:
                    c1:6e:5a:d4:79:c0:90:87:c7:b7:44:0e:ed:92:88:
                    ad:28:02:16:62:b9:21:d5:f9:71:62:52:95:4e:50:
                    79:f5:00:42:32:03:b9:92:4b:fd:8e:d0:81:f7:e5:
                    66:e8:99:54:d8:0a:fe:ce:fb:c8:38:1c:17:90:2c:
                    49:19:b3:45:dc:e9:0c:c9:2d:48:5f:93:46:c4:cd:
                    20:3b:9a:38:c5:e8:cd:34:a9:de:99:7b:fe:1b:2f:
                    a5:d5:03:6e:a9:17:14:d4:69:4b:7b:64:ff:7c:6c:
                    c5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:49:42:DD:E7:00:2F:F4:7C:F0:7A:5A:91:9A:32:27:55:B7:35:A8
            X509v3 Authority Key Identifier:
                keyid:CE:44:43:25:00:9D:C8:5B:E7:12:BC:D0:11:56:51:0F:2B:6F:4A:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE444325009DC85BE712BCD01156510F2B6F4AB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/1/3133382e3235352e3230302e302f32322d3234203d3e20323634353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:21:e6:97:d4:1b:69:bc:55:0b:4a:45:96:64:d7:5a:9e:ad:
         f7:64:30:26:db:75:a2:d0:af:be:90:8b:10:bd:09:62:f6:80:
         cc:02:cf:c9:1d:35:e3:2f:4f:28:c2:b3:8e:ef:90:38:ae:4b:
         f5:72:ac:45:0b:e0:03:3a:1f:2b:03:85:64:7d:03:06:a6:43:
         41:10:68:71:8c:3e:7c:c2:03:b5:c2:2d:50:eb:61:8d:39:9b:
         78:32:2d:0e:0a:78:b4:8b:f3:d7:08:1c:f0:52:2f:40:0f:7b:
         18:25:7f:26:03:05:6e:71:08:00:fa:84:f9:c8:38:ce:ba:18:
         e7:d5:7d:ba:33:ae:c5:b9:ad:b4:a0:14:c9:e4:dd:ce:0a:6e:
         90:58:98:43:d2:44:d7:1d:d7:01:31:3c:ac:57:89:be:76:89:
         eb:ca:b5:71:49:1c:55:9c:bf:0a:48:df:9b:2a:0a:ad:27:ca:
         25:65:89:fc:16:18:70:41:7a:ff:01:fd:58:39:63:92:ef:71:
         43:80:b5:fb:2f:b4:a6:9b:ba:14:e1:8f:9f:0e:f1:4e:6f:31:
         f2:0c:c9:fb:e6:a5:63:fb:e0:39:a3:f3:f8:38:88:30:4f:37:
         1b:9e:e6:4e:ba:9e:79:94:8d:66:7a:4e:1d:1b:e7:92:33:a0:
         20:80:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:07 2024 by rpki-client on console-ams.rpki-client.org