Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa
File:                     3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa (raw, json)
Hash identifier:          WrPGC5eOtPuA1JGinXeYQgmDO3qGMJRpS2GEgokPKx0=
Subject key identifier:   B1:B2:DB:60:A8:23:7C:D0:FD:31:55:CF:C7:3E:2B:2E:89:F9:79:8D
Certificate issuer:       /CN=A231E2070327B78340403E3C1D060C59505210CE
Certificate serial:       0DF7020234C2BFE83057D42E719E32431EED54CB
Authority key identifier: A2:31:E2:07:03:27:B7:83:40:40:3E:3C:1D:06:0C:59:50:52:10:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa
Signing time:             Wed 03 Apr 2024 22:53:26 +0000
ROA not before:           Wed 03 Apr 2024 22:48:26 +0000
ROA not after:            Wed 02 Apr 2025 22:53:26 +0000
asID:                     263940
IP address blocks:        138.185.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f7:02:02:34:c2:bf:e8:30:57:d4:2e:71:9e:32:43:1e:ed:54:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A231E2070327B78340403E3C1D060C59505210CE
        Validity
            Not Before: Apr  3 22:48:26 2024 GMT
            Not After : Apr  2 22:53:26 2025 GMT
        Subject: CN=B1B2DB60A8237CD0FD3155CFC73E2B2E89F9798D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:f4:e8:fe:4b:80:f0:8b:3b:55:70:47:4b:
                    a1:20:f9:4f:fe:5d:01:0d:84:0a:c4:46:ef:39:ac:
                    79:dd:74:33:80:c4:6a:63:b2:32:47:d8:98:a1:a4:
                    41:0c:89:04:f3:de:e1:fa:88:66:74:b3:53:c6:7a:
                    74:2a:a9:4c:45:05:6b:5c:64:ee:b1:1d:b5:42:c8:
                    5c:52:7e:99:08:92:ca:d2:15:35:04:76:40:7a:b8:
                    bf:3a:5c:19:f7:93:00:39:6f:5d:d3:f7:17:bd:06:
                    21:1f:dc:df:1b:ce:6f:c6:7a:50:d6:49:72:87:8c:
                    41:23:a5:80:02:de:38:bd:d5:3a:79:61:0a:f0:5b:
                    63:00:41:4b:c8:dc:10:5a:58:af:21:81:81:fe:bb:
                    70:16:50:02:3c:1f:56:8d:6b:1c:67:4e:f8:1c:f0:
                    70:9a:88:33:05:b2:b1:8b:a1:61:52:fa:d4:70:69:
                    2a:c9:86:2f:50:e6:8b:9a:0a:62:92:8c:fd:14:5d:
                    f6:96:34:07:7f:be:81:cd:03:b9:fa:72:d5:43:7d:
                    15:c4:cc:9b:59:ec:c0:34:20:83:3e:5c:6e:66:d2:
                    34:14:b9:9a:32:6f:0e:ad:34:d4:de:92:6d:ee:6c:
                    5e:9d:9a:e0:bf:8b:f0:60:4d:ab:23:35:ab:52:1a:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B2:DB:60:A8:23:7C:D0:FD:31:55:CF:C7:3E:2B:2E:89:F9:79:8D
            X509v3 Authority Key Identifier:
                keyid:A2:31:E2:07:03:27:B7:83:40:40:3E:3C:1D:06:0C:59:50:52:10:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:75:95:cc:cd:2d:9d:ee:84:7e:f9:1e:7c:2b:35:da:fb:ae:
         c0:92:cd:39:7e:cb:35:4a:20:be:f7:61:44:a2:19:91:ce:63:
         47:fe:4b:44:2d:4c:e8:80:76:58:3c:b5:7a:78:3b:f9:21:c6:
         1f:c0:78:8a:77:a8:96:da:4f:28:91:31:95:17:91:fd:0f:47:
         51:a8:e9:fb:4a:55:99:3f:a0:af:28:4d:68:cb:da:f6:34:31:
         0e:79:c2:7c:48:5a:5b:44:72:7f:17:9e:d9:42:4a:48:ed:b8:
         80:59:bc:57:e7:23:ad:13:89:92:56:04:11:b0:16:0c:9e:43:
         88:81:ac:33:ab:b3:f4:60:75:77:ec:67:85:db:42:98:47:2e:
         1b:3e:8d:de:73:41:5f:ed:5a:df:7b:7f:5d:27:53:2e:9b:b8:
         98:cd:75:5e:b1:12:2f:55:8f:c8:4f:1f:f9:60:64:89:db:67:
         d0:58:4d:b0:a2:a6:c3:99:00:61:87:19:20:ee:ca:38:a4:28:
         6f:59:89:d9:24:b2:29:ce:6f:0c:92:a6:3b:8c:f5:f4:8f:51:
         d7:81:16:b3:10:f9:43:ef:69:0b:b2:c0:45:30:49:d1:91:a7:
         c9:b2:80:48:88:6d:c7:73:42:e2:10:76:ab:30:dc:2d:25:1e:
         b3:89:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:58 2024 by rpki-client on console-ams.rpki-client.org