Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230392e302f32342d3234203d3e20323634353235.roa
File:                     3132382e3230312e3230392e302f32342d3234203d3e20323634353235.roa (raw, json)
Hash identifier:          Oorq5p5o8w6PmYDBOj9L4a9vy2W14TfaVTnGsOOxi8I=
Subject key identifier:   B2:DB:0F:F4:DD:E4:FA:2A:B8:E9:E0:5B:CB:FA:27:09:D3:4E:6B:8D
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       319BD2E05CE44553D50387B54202267B03E65DED
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230392e302f32342d3234203d3e20323634353235.roa
Signing time:             Tue 20 Aug 2024 12:36:56 +0000
ROA not before:           Tue 20 Aug 2024 12:31:56 +0000
ROA not after:            Tue 19 Aug 2025 12:36:56 +0000
asID:                     264525
IP address blocks:        128.201.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9b:d2:e0:5c:e4:45:53:d5:03:87:b5:42:02:26:7b:03:e6:5d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Aug 20 12:31:56 2024 GMT
            Not After : Aug 19 12:36:56 2025 GMT
        Subject: CN=B2DB0FF4DDE4FA2AB8E9E05BCBFA2709D34E6B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:7b:b1:9c:1e:11:bc:aa:d3:06:65:49:eb:
                    c9:dd:df:13:62:7d:03:b6:f2:82:cc:a9:5b:28:c2:
                    e0:9f:81:fd:18:2b:84:96:2c:01:69:dd:31:aa:4e:
                    94:9e:2f:fa:89:4c:85:57:b8:50:fc:c7:0a:ac:59:
                    27:53:5e:85:70:a2:af:02:33:85:47:2d:ce:32:a1:
                    f8:01:c9:e9:7b:03:c7:b8:2b:82:65:9c:f1:9b:ee:
                    0a:59:21:72:80:e7:3f:29:b4:a1:58:45:10:75:2f:
                    08:d9:17:de:13:58:0c:78:1c:85:67:f7:57:08:76:
                    d4:ba:a0:96:5a:35:ea:5a:da:40:17:eb:f0:e7:72:
                    28:85:ad:de:9e:52:e9:7c:b0:b9:5f:d3:47:c9:c3:
                    34:71:69:d4:12:c4:4d:74:1d:2b:11:ae:3f:a4:51:
                    80:c5:01:aa:82:63:82:ec:73:58:5f:09:b9:16:cf:
                    e8:b9:72:14:da:d1:ed:3f:80:6f:f3:4b:5b:c8:f6:
                    82:55:1b:18:f0:78:fa:b5:4c:b7:d2:fa:6f:02:ce:
                    5b:66:8b:88:3f:5d:30:91:30:28:0a:f7:69:db:55:
                    52:c7:31:9d:6e:e7:0e:f0:2d:73:fd:63:49:cc:59:
                    13:69:87:f1:4a:a5:62:00:18:c2:7d:e1:09:e2:09:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DB:0F:F4:DD:E4:FA:2A:B8:E9:E0:5B:CB:FA:27:09:D3:4E:6B:8D
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3230392e302f32342d3234203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:9d:bd:eb:4a:bc:34:f0:3a:92:aa:96:2e:08:e9:27:ae:62:
         34:43:a8:09:4d:c3:55:f8:80:38:44:ad:7c:46:e3:32:08:c2:
         e7:09:d2:26:92:ad:4d:36:0b:3a:d4:a8:f5:65:3c:3d:86:19:
         6c:e0:02:e5:00:c7:54:9a:1d:23:e2:d2:7b:7f:e7:10:fa:0b:
         6b:29:b2:69:1e:4c:05:10:bf:c5:98:ce:4b:7d:6b:9c:8c:1c:
         c6:5f:d7:18:d0:9f:ab:a9:37:d6:ff:d1:95:bc:b6:04:cd:c2:
         74:d1:f8:97:2a:e4:ca:ee:91:03:4b:66:8a:86:90:d0:72:fd:
         a3:fb:de:be:65:74:d1:3a:32:55:0f:f9:8e:69:d0:0e:cb:79:
         fa:9b:a8:0f:fc:4d:13:d2:d1:6b:64:82:79:43:ed:21:36:6f:
         02:c5:39:8e:9c:c8:6c:80:92:96:45:2f:52:5f:48:97:9b:13:
         10:b0:33:87:53:a8:96:62:f1:41:13:57:19:02:0c:a9:f2:51:
         11:29:50:46:58:3b:f4:60:2b:e4:45:ff:7c:ef:52:d2:71:ad:
         3f:03:dd:7b:54:a7:8c:25:d2:39:83:3b:e2:53:6b:d6:01:4f:
         b9:b4:6c:19:c6:99:94:62:4f:ae:5f:49:7d:b0:ea:8e:9b:36:
         54:8e:44:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:01 2024 by rpki-client on console-fra.rpki-client.org