Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32332d3233203d3e20323634353039.roa
File:                     3133322e3235352e3136382e302f32332d3233203d3e20323634353039.roa (raw, json)
Hash identifier:          WCdMwCLDq0XodTuF5eJ8cqo5x8tX0pd8mp1WQwEhIQE=
Subject key identifier:   D5:EA:B1:C2:AE:4A:59:D1:E7:6B:F8:2B:C8:A0:03:AF:6A:40:D4:25
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       1D5C1F5DE5A59250973626C66EE734EF1E1B9E2B
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32332d3233203d3e20323634353039.roa
Signing time:             Tue 27 Aug 2024 16:19:09 +0000
ROA not before:           Tue 27 Aug 2024 16:14:09 +0000
ROA not after:            Tue 26 Aug 2025 16:19:09 +0000
asID:                     264509
IP address blocks:        132.255.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5c:1f:5d:e5:a5:92:50:97:36:26:c6:6e:e7:34:ef:1e:1b:9e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Aug 27 16:14:09 2024 GMT
            Not After : Aug 26 16:19:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:c0:45:7c:97:df:6e:29:d5:6d:37:50:ae:
                    56:05:04:e1:64:d6:3c:19:35:5d:c9:c0:56:d5:68:
                    a7:6d:94:9d:b6:22:26:94:88:df:35:4e:ed:39:84:
                    e7:90:53:1b:93:ab:9f:86:c3:e0:ef:64:3b:01:0e:
                    0b:d3:a7:da:46:5c:db:4c:db:99:37:0c:32:bc:bd:
                    47:ea:11:f1:89:0e:1f:52:19:0b:c9:5f:fe:84:e2:
                    78:84:4c:68:42:3d:4c:15:7c:86:90:e0:3a:4f:39:
                    12:57:c3:76:4d:83:83:17:dd:c5:9a:06:2f:b1:2f:
                    3d:cb:9f:68:67:0e:1a:0c:0b:55:e5:33:d8:51:ee:
                    95:66:b8:36:99:4d:cb:0e:dc:21:94:4e:6f:8b:61:
                    32:d6:29:e5:bd:5b:06:a3:eb:99:ba:68:2e:af:7b:
                    ef:1c:fc:55:6b:72:72:e1:ae:02:c3:38:ca:2e:9f:
                    1f:16:f6:1b:22:1d:44:01:8c:99:de:ff:b6:0b:ad:
                    a5:d1:0d:84:12:cb:d4:6d:e5:69:61:7d:35:9d:58:
                    37:a2:ac:54:6d:16:6a:24:79:23:12:2b:54:66:c4:
                    9b:82:e8:bd:37:0b:2c:4b:e4:5e:71:0c:81:f7:6e:
                    68:67:50:a0:52:f5:b3:7d:7a:68:e0:6e:cd:fc:6e:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EA:B1:C2:AE:4A:59:D1:E7:6B:F8:2B:C8:A0:03:AF:6A:40:D4:25
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136382e302f32332d3233203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:d1:4f:c0:c4:49:9d:b1:12:fd:a5:ac:48:07:a6:45:dc:bb:
         1e:b3:71:ea:71:01:ee:0c:ec:60:97:d7:73:62:8a:a1:52:69:
         6d:47:4f:24:89:74:79:cf:bb:48:66:1b:79:97:aa:4a:9c:f7:
         a8:58:08:27:41:87:e6:25:5d:c0:a7:cb:39:02:fc:99:fe:7d:
         a4:eb:3b:04:be:3d:6a:a0:76:b4:51:98:ac:13:16:5d:1f:4e:
         1b:09:89:89:69:ea:51:85:e2:13:98:55:5b:8b:97:b0:54:e1:
         73:03:f1:0b:1a:6d:20:ca:9d:3a:d1:b0:de:b9:76:91:72:47:
         ac:1f:29:49:95:0a:db:99:ca:1d:08:bc:c1:a2:98:fc:bb:e8:
         c6:e8:bc:63:79:c4:f7:81:93:cb:bc:71:f8:92:c0:20:ac:b7:
         d4:d7:8d:8e:7f:a6:4b:20:59:a0:e9:db:d2:04:60:0f:b5:ad:
         c0:63:9f:d8:4f:69:a5:45:e1:0c:1b:48:86:08:2d:34:89:36:
         8b:11:0e:2b:85:24:d9:84:8b:e8:46:fb:7b:c2:82:4c:7e:dc:
         22:93:e5:5e:78:6d:d3:c5:69:46:7e:87:e7:4b:ef:59:8a:71:
         21:43:8f:88:0b:e1:c1:e5:37:15:32:a5:8c:d7:28:9c:5f:0d:
         59:c5:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:27 2024 by rpki-client on console-ams.rpki-client.org