Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133322e3235352e39362e302f32322d3237203d3e2031393136.roa
File:                     3133322e3235352e39362e302f32322d3237203d3e2031393136.roa (raw, json)
Hash identifier:          Cw+SzlTj9xA+7S9/h18Q/1dAYVh+shvitMueYnmHblE=
Subject key identifier:   43:1C:F6:AB:EC:F4:94:06:8E:E6:FD:87:53:4E:67:F3:34:B9:A2:1D
Certificate issuer:       /CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
Certificate serial:       06CB6D5665F1624D2C5B905728252FA724A32272
Authority key identifier: AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133322e3235352e39362e302f32322d3237203d3e2031393136.roa
Signing time:             Fri 16 Aug 2024 19:23:26 +0000
ROA not before:           Fri 16 Aug 2024 19:18:26 +0000
ROA not after:            Fri 15 Aug 2025 19:23:26 +0000
asID:                     1916
IP address blocks:        132.255.96.0/22 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cb:6d:56:65:f1:62:4d:2c:5b:90:57:28:25:2f:a7:24:a3:22:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE46E32CB1462419CCCB89B5C498495E919B5CF
        Validity
            Not Before: Aug 16 19:18:26 2024 GMT
            Not After : Aug 15 19:23:26 2025 GMT
        Subject: CN=431CF6ABECF494068EE6FD87534E67F334B9A21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c8:a2:c5:4d:6d:a8:5b:f5:19:5e:80:63:ea:
                    99:87:4e:ea:9c:d9:04:00:ad:35:dc:37:8b:bc:47:
                    e5:fb:d6:31:d7:b1:99:ac:26:73:9e:66:b5:c3:98:
                    77:03:f1:50:a6:f0:d4:34:12:c6:a7:41:b6:43:93:
                    3a:fc:f5:52:b3:b0:7d:c8:3a:2e:2d:eb:ee:96:62:
                    92:de:6f:f7:a7:d8:57:b9:9c:2e:75:64:33:dd:e6:
                    c0:aa:0c:5a:c2:2e:b3:0b:33:64:27:14:2d:ae:33:
                    6d:ba:b4:15:94:5f:82:70:4f:79:db:c7:31:af:b1:
                    73:a5:e0:52:e4:a8:8f:fb:8f:2c:f0:d7:69:9e:c6:
                    43:1e:a9:16:12:8c:a6:d9:72:28:51:c5:8b:c5:bc:
                    2a:4b:32:02:38:d4:02:6f:94:7a:91:f5:c8:b8:f4:
                    8c:28:4d:70:2a:96:13:d1:2e:12:60:bd:b8:d3:0e:
                    b1:b0:ba:98:d9:75:70:19:55:eb:c2:30:e2:ca:34:
                    f6:6a:19:ef:e3:1a:a3:d3:7a:e7:98:28:fc:80:59:
                    0b:93:0e:df:f7:17:b4:c2:5b:b0:58:e3:03:42:1f:
                    a2:8b:78:4f:00:80:78:2f:c6:24:f2:85:54:2c:2f:
                    31:46:5a:3b:a8:99:dd:25:95:d4:88:63:e1:35:48:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1C:F6:AB:EC:F4:94:06:8E:E6:FD:87:53:4E:67:F3:34:B9:A2:1D
            X509v3 Authority Key Identifier:
                keyid:AE:E4:6E:32:CB:14:62:41:9C:CC:B8:9B:5C:49:84:95:E9:19:B5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/AEE46E32CB1462419CCCB89B5C498495E919B5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE46E32CB1462419CCCB89B5C498495E919B5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3133322e3235352e39362e302f32322d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:04:ba:bc:12:99:6e:f5:b0:20:1d:ac:b9:ee:de:14:c5:f7:
         49:a7:e6:4b:69:b6:21:8f:5e:99:a2:03:c0:c9:50:d5:be:b2:
         b7:60:d8:4d:74:7c:7f:01:c2:ff:dd:cd:2c:d8:77:de:b7:6f:
         07:84:77:9b:02:9e:c2:b1:c1:3c:f3:17:68:4a:b2:d6:7c:37:
         ca:95:76:2e:6c:55:65:ee:22:38:d1:77:32:0f:93:f3:7f:44:
         9b:04:76:f2:43:30:c5:f5:0d:c3:4e:26:91:4a:dc:ea:4b:67:
         26:8a:10:a5:c6:73:d7:3b:b4:df:53:b2:6f:a8:c1:92:67:f0:
         f8:8e:93:b6:7d:40:83:94:5d:42:e4:c9:e7:41:eb:a0:00:36:
         40:aa:d5:0c:f0:b7:6c:16:01:36:cc:07:e5:67:ec:9d:8f:6c:
         a5:ba:97:5f:b9:f8:29:08:10:77:f7:32:2e:19:ba:bd:d2:85:
         c5:f3:fe:6c:3b:35:2b:1f:6e:a4:cc:ae:19:2f:8a:1c:d2:48:
         83:53:fd:62:a8:43:18:66:38:50:0c:ad:35:66:a4:6f:07:8a:
         94:cf:5a:37:b5:20:f6:9c:87:56:c3:7c:48:7a:2e:5b:c4:03:
         d9:1a:9c:99:d6:41:29:55:8f:5f:c4:fa:37:32:7a:b8:18:83:
         71:4a:db:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:10 2024 by rpki-client on console-fra.rpki-client.org