Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3231302e302f32332d3233203d3e20323634353235.roa
File:                     3132382e3230312e3231302e302f32332d3233203d3e20323634353235.roa (raw, json)
Hash identifier:          KIIkA+qmxuWCYHbRHes53giMd99xjF9ezMDufJut/RU=
Subject key identifier:   6B:59:39:4E:11:C2:F3:15:CB:8A:11:7A:31:CB:45:CD:54:34:A2:E9
Certificate issuer:       /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial:       144833FFBD6F4F4C8DEC8B81A9E4E5A7F1816BCE
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3231302e302f32332d3233203d3e20323634353235.roa
Signing time:             Tue 30 Apr 2024 21:04:45 +0000
ROA not before:           Tue 30 Apr 2024 20:59:45 +0000
ROA not after:            Tue 29 Apr 2025 21:04:45 +0000
asID:                     264525
IP address blocks:        128.201.210.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
                          rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:48:33:ff:bd:6f:4f:4c:8d:ec:8b:81:a9:e4:e5:a7:f1:81:6b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
        Validity
            Not Before: Apr 30 20:59:45 2024 GMT
            Not After : Apr 29 21:04:45 2025 GMT
        Subject: CN=6B59394E11C2F315CB8A117A31CB45CD5434A2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:41:93:f0:b3:87:63:ad:3a:ba:a3:ab:eb:
                    3f:ee:2a:86:13:c6:88:23:42:ab:f2:52:40:11:05:
                    41:4f:2a:fe:d5:9e:e1:cd:c1:72:7c:07:d3:4a:bc:
                    2f:46:ec:35:17:0a:c9:fa:60:be:1d:b8:10:ba:9a:
                    2f:cc:cb:a2:41:2a:e0:54:90:2b:1a:65:62:69:c6:
                    70:f8:c2:ef:20:98:d5:de:8a:00:80:7b:d4:aa:e8:
                    48:9f:71:f9:20:ca:ec:8e:f2:40:d3:8d:19:80:9e:
                    17:33:fd:04:06:e2:1c:03:7a:84:14:97:90:88:6d:
                    d3:b9:26:fa:d7:16:6e:f4:ce:88:05:4f:6b:54:e4:
                    f1:a1:56:84:c2:91:ea:e6:d1:90:ad:0a:e8:3f:20:
                    9c:15:39:61:50:4b:3c:ab:e5:80:e9:96:f5:0d:fd:
                    5d:f8:26:c1:75:8f:c0:aa:c8:2b:ba:8b:37:0a:fc:
                    52:f9:ed:bc:0a:96:84:ff:52:51:3c:5b:9f:73:3c:
                    0f:4c:7a:ac:00:e4:ac:42:6d:be:29:e9:01:90:3e:
                    b2:6a:86:1d:d9:ed:7f:77:18:ce:af:7a:23:2f:a2:
                    a7:d3:e0:db:cf:08:a3:d9:1e:73:48:68:0a:02:de:
                    ab:3c:2b:c6:b0:65:ea:37:0c:77:e3:6a:80:3b:bf:
                    22:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:59:39:4E:11:C2:F3:15:CB:8A:11:7A:31:CB:45:CD:54:34:A2:E9
            X509v3 Authority Key Identifier:
                keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3132382e3230312e3231302e302f32332d3233203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:9e:b4:48:29:03:94:c6:c8:39:3b:6c:73:6d:ac:7e:7a:3f:
         e7:ad:05:ff:08:30:66:44:56:77:32:6a:9f:a0:e9:04:b6:af:
         46:a6:09:74:00:6b:97:88:60:f0:47:ef:c3:77:19:3c:72:b0:
         c0:83:f6:d3:e8:ef:cd:2e:29:1d:bc:2a:2f:7f:fe:10:04:ed:
         34:d8:8b:bb:52:b5:db:7e:3f:86:48:77:16:65:f0:e8:c0:26:
         bc:41:9b:39:7d:bb:fc:6c:01:9c:b5:32:42:83:e6:37:ed:35:
         f7:56:e9:a3:ca:de:40:c0:49:01:0a:f0:5a:fb:28:8f:3f:ab:
         a5:2e:da:20:eb:a7:bc:da:ce:23:47:2d:28:45:2d:e0:17:14:
         8d:c1:28:e4:7e:c7:37:ef:76:44:35:a7:35:f0:4d:ec:17:ca:
         34:6d:be:c4:c6:0a:bf:57:3e:6f:73:b5:1c:26:59:ff:d0:9a:
         b1:87:fe:8d:f3:ae:c6:0b:1b:e0:a3:45:d0:d0:1a:02:0d:b7:
         2a:eb:cf:d6:74:67:3f:07:d3:9e:ee:67:35:bf:ea:4e:b5:12:
         17:d7:94:58:b7:9c:f5:7f:4e:04:35:05:7d:77:ab:e0:a9:98:
         99:c4:0b:4e:4d:60:c1:8b:85:40:ff:a4:bf:6b:2a:7a:2d:46:
         7a:60:2f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:01 2024 by rpki-client on console-fra.rpki-client.org