Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3133322e3235352e3134342e302f32322d3234203d3e20323632343539.roa
File:                     3133322e3235352e3134342e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          lA4l58K/Pj67WcWJqgc9+wItqfIWnEgsgwaztGdTO5o=
Subject key identifier:   44:D0:6D:2C:45:79:ED:E7:12:09:9C:A8:CA:B5:7D:58:F9:20:66:40
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       15A38A155628ABA768DD631A80F85A752CA6A9B2
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3133322e3235352e3134342e302f32322d3234203d3e20323632343539.roa
Signing time:             Thu 04 Apr 2024 03:00:30 +0000
ROA not before:           Thu 04 Apr 2024 02:55:30 +0000
ROA not after:            Thu 03 Apr 2025 03:00:30 +0000
asID:                     262459
IP address blocks:        132.255.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a3:8a:15:56:28:ab:a7:68:dd:63:1a:80:f8:5a:75:2c:a6:a9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Apr  4 02:55:30 2024 GMT
            Not After : Apr  3 03:00:30 2025 GMT
        Subject: CN=44D06D2C4579EDE712099CA8CAB57D58F9206640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:3d:71:85:4a:44:4b:a6:fc:8b:45:2d:2c:
                    bd:b3:01:12:fb:ed:e5:7e:b7:d8:2d:ff:b1:b8:0a:
                    98:2a:68:75:1c:bd:35:09:54:e2:8b:50:b3:08:c3:
                    3f:84:2c:87:32:e5:63:19:98:3c:5f:74:3b:7f:d3:
                    5f:c0:90:f1:23:b5:29:08:51:2c:90:04:25:5c:f8:
                    5b:00:fe:ee:c4:60:5b:ce:ec:bd:f4:ed:d0:63:21:
                    9a:ed:4a:32:4e:56:c0:76:80:b9:82:4c:70:0b:8f:
                    e6:c0:0f:5b:64:84:66:1d:3e:7c:eb:b8:a0:6b:b3:
                    25:18:1d:94:58:b8:76:fb:b8:65:ef:d0:cc:56:9e:
                    0c:30:c6:b0:66:31:63:9a:d8:8b:83:0f:5b:86:57:
                    53:cb:3b:fe:d6:0d:41:a7:51:45:89:bf:46:e9:01:
                    57:ae:fb:75:a1:0e:c3:de:03:b7:d8:ea:d8:54:9c:
                    9e:6e:b4:51:19:2f:7c:12:9f:53:a9:89:6c:e9:76:
                    3f:7a:03:2c:61:4d:80:5a:d5:94:b7:2c:2e:52:44:
                    e1:02:13:c9:68:61:d0:55:bd:e4:ee:87:76:e0:3d:
                    bc:a0:ea:64:d5:4f:4a:dd:37:4a:29:93:bf:de:16:
                    c1:67:81:8a:26:e7:99:b5:77:7e:51:f5:45:32:06:
                    2b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D0:6D:2C:45:79:ED:E7:12:09:9C:A8:CA:B5:7D:58:F9:20:66:40
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3133322e3235352e3134342e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:0a:f6:c6:4d:e9:d2:cd:12:c3:55:e1:de:0c:2a:43:0f:
         47:1c:8f:1f:27:c4:f8:ad:ca:1c:1c:cb:3a:a1:4f:63:52:ff:
         d3:f6:93:cb:b3:77:7c:df:dd:2b:ae:45:5c:9b:b9:e9:2b:1f:
         f7:b2:6d:f4:ec:cc:33:63:f9:44:e4:05:11:fa:67:cf:bf:b6:
         6d:ec:2b:53:25:29:8d:d3:a9:6f:3e:12:d9:02:97:06:b5:b4:
         c9:b8:ab:b8:2b:65:8e:be:83:10:3a:f1:79:32:72:c1:0f:9e:
         0c:d1:96:5e:5c:55:89:d0:d2:74:2b:17:14:e1:84:f7:1f:01:
         c3:a0:59:98:ed:8b:2b:e7:99:61:a3:fa:cf:f3:46:2b:b1:1a:
         0b:9b:ee:20:f3:a9:7e:70:14:58:5f:d4:be:ba:6e:96:9a:69:
         d0:47:60:70:cb:f4:43:76:4f:e2:af:d5:97:a6:e2:e9:f6:7c:
         1d:ec:73:f0:7b:8f:27:c9:b4:05:c2:77:99:10:b0:46:39:74:
         ba:08:15:1b:e2:f4:14:ea:6f:18:81:ff:81:49:1c:2d:a1:84:
         cb:1b:b1:d5:76:37:11:26:1b:f2:8d:54:db:73:10:75:89:d7:
         da:83:30:d5:65:84:06:f2:b1:56:cf:fd:c7:ae:9f:bb:d9:21:
         05:84:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org