Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32332d3233203d3e20323634353039.roa
File:                     3133322e3235352e3137302e302f32332d3233203d3e20323634353039.roa (raw, json)
Hash identifier:          1RB/kNegag/kbGg7xbdO5UXwRjLLVqKBfPa5mO0Auus=
Subject key identifier:   67:C6:35:BD:A9:2C:D8:86:B8:0F:2F:B6:77:D9:1D:0C:B0:EE:4B:E1
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       0BFE81EBBB5404D5A335257FACE1C4DE9180D4A7
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32332d3233203d3e20323634353039.roa
Signing time:             Wed 03 Apr 2024 18:31:38 +0000
ROA not before:           Wed 03 Apr 2024 18:26:38 +0000
ROA not after:            Wed 02 Apr 2025 18:31:38 +0000
asID:                     264509
IP address blocks:        132.255.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:fe:81:eb:bb:54:04:d5:a3:35:25:7f:ac:e1:c4:de:91:80:d4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Apr  3 18:26:38 2024 GMT
            Not After : Apr  2 18:31:38 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6c:b3:2a:ef:fb:9b:a9:29:fe:8b:66:73:ca:
                    6a:48:45:50:62:e1:a0:fa:cb:8a:36:e4:48:06:24:
                    3a:56:94:56:b0:8a:45:6f:09:df:db:5c:c1:13:df:
                    3d:fc:ab:04:e1:93:4d:f7:c1:1c:09:23:94:f3:87:
                    29:42:82:4f:bf:a4:b4:01:3c:f6:68:f8:8d:0a:c2:
                    f5:a0:39:e9:b7:fb:d1:a1:bb:ba:61:86:8e:45:ff:
                    86:fc:9b:48:1b:7b:16:95:4b:77:cc:14:07:98:2f:
                    74:d3:3d:4c:d9:b0:71:91:5f:2d:3d:9d:cc:2d:d8:
                    e2:65:b5:72:5d:c1:82:af:82:16:6e:c3:7b:39:36:
                    82:aa:27:98:ca:0b:33:f5:9b:34:ac:a3:0e:6b:67:
                    b1:f0:8c:0a:9f:99:c9:ca:78:96:a1:41:51:44:8b:
                    7b:26:88:32:2d:c6:cf:88:3d:d5:e7:d3:cf:e2:d7:
                    7a:ac:f1:b8:6c:e5:e1:5e:bd:0a:a0:c4:12:8f:9a:
                    7c:24:22:d3:17:b2:17:e8:9c:91:88:bf:dd:64:3e:
                    a2:85:9c:41:ac:8f:04:88:23:3c:50:25:fe:51:af:
                    f5:74:35:5f:77:6a:24:9d:2c:12:c7:19:aa:6b:bb:
                    25:04:74:77:d7:65:ca:34:91:23:b6:52:c1:b9:ea:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C6:35:BD:A9:2C:D8:86:B8:0F:2F:B6:77:D9:1D:0C:B0:EE:4B:E1
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/3133322e3235352e3137302e302f32332d3233203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:e7:db:ee:1f:e5:33:9d:3a:7b:db:08:98:72:72:94:f8:3b:
         78:ab:db:8b:05:93:cd:19:e5:af:c0:12:1b:54:d2:93:43:50:
         65:2e:70:aa:9b:d6:b1:1b:f6:2c:72:b3:81:22:b0:af:56:e8:
         bc:f5:aa:27:da:37:3c:18:be:86:af:69:a7:01:c3:24:6a:f4:
         8e:46:a6:48:69:12:e1:fb:ef:7a:13:9c:c3:b1:09:38:9b:07:
         5c:01:9d:17:df:7f:4a:48:84:e3:65:e4:33:dd:07:15:de:18:
         7a:d1:79:8e:77:d6:9e:c1:68:6e:1f:ff:e6:d6:0a:67:26:b6:
         87:5c:83:07:2a:ae:15:23:66:8d:09:a2:23:6c:d3:c2:57:10:
         0b:2b:6e:d4:ee:5a:21:97:12:1c:b6:2b:3a:1e:67:29:1a:da:
         77:3f:4d:6c:97:f0:e6:18:1f:c6:cb:8a:c3:c4:13:d7:e6:55:
         c3:74:7a:7f:c0:93:fc:84:35:6c:bb:70:82:4f:4b:93:e0:2f:
         d6:95:45:dd:6b:d1:a7:16:2d:90:9a:b4:aa:e8:68:43:cd:33:
         cf:da:57:84:13:f8:60:7c:ba:f7:5b:75:56:7c:de:cc:94:d4:
         0e:18:77:f0:b7:c3:bf:9d:e5:97:fd:fd:86:d8:18:03:d4:2a:
         2f:b9:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:27 2024 by rpki-client on console-ams.rpki-client.org