Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136392e302f32342d3234203d3e20323634353039.roa
File:                     3133322e3235352e3136392e302f32342d3234203d3e20323634353039.roa (raw, json)
Hash identifier:          ctT7immhyX9Lqu2zwBFNoO/cgG97qhO08Ib5hSnJN2c=
Subject key identifier:   4F:6C:60:DB:5D:02:55:ED:74:7E:50:29:CE:86:73:C1:52:67:7A:2E
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       659B1C01F15BC09C3341CF6E5D737BAF3EDC8AAD
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136392e302f32342d3234203d3e20323634353039.roa
Signing time:             Wed 03 Apr 2024 18:31:37 +0000
ROA not before:           Wed 03 Apr 2024 18:26:37 +0000
ROA not after:            Wed 02 Apr 2025 18:31:37 +0000
asID:                     264509
IP address blocks:        132.255.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9b:1c:01:f1:5b:c0:9c:33:41:cf:6e:5d:73:7b:af:3e:dc:8a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Apr  3 18:26:37 2024 GMT
            Not After : Apr  2 18:31:37 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:30:15:3b:31:2e:09:71:7d:a7:10:cf:9e:
                    48:4f:07:c8:51:12:27:23:39:1e:f7:64:2f:8e:df:
                    fa:3e:f9:37:2d:9f:0d:25:7f:d2:82:2a:a2:09:85:
                    c3:29:b0:33:b7:89:ec:00:e0:5f:f4:12:a0:e6:9a:
                    62:52:82:4e:cc:e7:a5:c9:a9:a0:aa:a4:88:5c:b4:
                    4b:5d:25:bf:d7:e4:90:e5:ef:2a:8b:32:ed:66:c8:
                    7a:6d:dc:97:38:57:94:80:ca:c9:97:ea:c8:58:36:
                    71:31:f7:93:67:47:94:8b:bc:30:8f:5f:00:26:f8:
                    26:8c:4e:48:1b:71:07:d6:43:64:09:c9:7a:ae:3f:
                    c8:26:0d:02:28:be:62:8f:68:e0:d0:e3:8a:ee:27:
                    17:71:7f:06:a6:c9:83:3b:eb:cc:ee:62:e7:62:77:
                    71:58:b8:c3:47:0f:2d:9d:95:98:f1:06:f2:83:af:
                    54:e1:9d:95:9d:fb:0f:bd:5b:58:39:4c:13:25:a0:
                    ce:2a:94:e3:88:b9:7f:4d:2d:38:a4:72:3e:b5:f8:
                    f6:d0:2a:e7:c6:ab:a5:1e:4e:17:d0:0e:15:3b:47:
                    a8:7f:b1:70:6f:3e:9b:2a:c0:73:9d:2e:24:63:61:
                    be:b0:fd:e7:da:e4:a2:77:1c:42:84:4d:28:7d:21:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:60:DB:5D:02:55:ED:74:7E:50:29:CE:86:73:C1:52:67:7A:2E
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3136392e302f32342d3234203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:83:0e:0f:4a:98:5e:30:66:a4:a2:3e:05:21:59:47:21:77:
         bc:e0:3c:87:aa:80:55:2a:56:66:b2:27:47:09:b9:2f:50:73:
         5d:c9:ed:7b:e9:cb:e1:30:31:01:a4:0a:50:80:e8:4f:13:df:
         aa:96:c2:66:35:f3:12:25:99:f7:5f:ce:0a:5f:3e:0b:54:99:
         9b:1e:2a:5d:d3:79:49:ae:39:5a:2a:da:ff:2d:8e:d7:c5:ee:
         27:da:4e:2f:ea:70:f6:37:27:9c:bd:c4:49:61:6d:50:03:84:
         6d:2e:58:10:7b:78:b2:a2:c4:47:a3:18:23:ce:84:80:08:a8:
         9d:c5:56:99:b0:e5:16:80:78:fa:24:ea:04:ce:de:9a:bc:f9:
         a9:43:10:be:f4:56:9f:29:e8:c7:9c:ee:18:07:c9:f9:b6:fb:
         9f:8a:fc:7e:55:8e:c7:a3:e9:0d:c2:96:1a:f0:62:88:b5:30:
         be:a5:96:e4:f3:90:5c:96:48:91:10:a5:34:16:d5:1a:79:59:
         18:1c:29:cf:0d:23:d6:63:85:8c:51:94:51:67:d5:21:52:6d:
         8b:37:4c:85:32:2c:bb:d9:25:4a:da:77:e4:0f:0d:b6:7e:e1:
         8d:84:aa:a1:bb:3a:e3:71:16:99:c1:8d:70:ef:18:fa:93:a5:
         61:66:1c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org