Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS262673.roa
File:                     AS262673.roa (raw, json)
Hash identifier:          fT5qaeZBSzgd135I2Appjxpx0/dIBMlOYrmUUADcQxg=
Subject key identifier:   DE:44:05:2A:06:D3:D2:C4:5F:F8:30:5B:40:5A:A7:C6:74:AE:26:91
Certificate issuer:       /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial:       41BFBF6537782518BCEA0B225FD0FAB5E9D45387
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS262673.roa
Signing time:             Mon 25 Nov 2024 16:59:36 +0000
ROA not before:           Mon 25 Nov 2024 16:54:36 +0000
ROA not after:            Mon 24 Nov 2025 16:59:36 +0000
asID:                     262673
IP address blocks:        177.184.96.0/20 maxlen: 24
                          177.184.112.0/20 maxlen: 24
                          186.235.192.0/20 maxlen: 24
                          186.235.208.0/20 maxlen: 24
                          187.73.64.0/19 maxlen: 24
                          201.162.64.0/18 maxlen: 24
                          2804:187c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bf:bf:65:37:78:25:18:bc:ea:0b:22:5f:d0:fa:b5:e9:d4:53:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
        Validity
            Not Before: Nov 25 16:54:36 2024 GMT
            Not After : Nov 24 16:59:36 2025 GMT
        Subject: CN=DE44052A06D3D2C45FF8305B405AA7C674AE2691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:cd:4c:16:6a:3f:20:72:8e:21:e6:0d:05:
                    1a:22:bf:b8:60:8c:8d:f2:f6:ca:1e:e1:dd:0b:ca:
                    67:4f:9a:96:33:1b:09:ca:d5:ba:d2:35:f7:d0:2d:
                    d6:fb:91:6f:74:5e:72:1e:38:70:b3:fd:8b:67:03:
                    82:35:a0:86:5a:4e:58:6c:31:db:53:31:16:7b:fe:
                    eb:35:74:24:c3:ff:e3:3b:a3:43:f9:b8:dc:0e:7d:
                    75:9b:7c:ee:b2:29:62:dd:9d:ef:a6:c4:fc:cd:80:
                    73:d4:69:2f:59:66:a9:48:1f:8f:6c:ba:fa:98:51:
                    13:fa:13:4a:52:5b:5d:53:c5:09:27:ee:54:8e:0f:
                    b3:3a:2c:6b:b1:af:5b:20:4c:e8:93:f0:23:3a:c0:
                    4e:a1:46:02:01:ac:b9:1c:81:bc:90:ae:ca:32:d0:
                    5f:bb:0a:ea:23:d5:43:8a:ce:be:69:2f:00:b0:f3:
                    34:61:3b:15:c5:80:04:0a:aa:c2:02:b5:8c:16:21:
                    30:1b:a3:42:79:83:d7:4f:73:fa:33:2a:c3:a8:c9:
                    2c:e4:8c:c9:27:16:ed:71:a0:c9:23:de:b8:67:d6:
                    c6:f3:38:9b:42:ea:28:ac:e6:fb:04:be:86:a1:fd:
                    86:a4:1d:95:c9:4e:3f:5f:e4:89:78:4e:db:ce:38:
                    a9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:44:05:2A:06:D3:D2:C4:5F:F8:30:5B:40:5A:A7:C6:74:AE:26:91
            X509v3 Authority Key Identifier:
                keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS262673.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.96.0/19
                  186.235.192.0/19
                  187.73.64.0/19
                  201.162.64.0/18
                IPv6:
                  2804:187c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:3a:de:15:a9:71:00:41:01:d2:75:87:74:ff:11:a3:8f:1c:
         28:ab:44:d8:d3:f7:5e:17:87:f3:fa:16:84:a1:13:4e:9b:b9:
         86:bf:6f:a3:b7:50:ed:49:45:7c:fb:32:72:66:a3:82:51:7c:
         09:46:48:f5:76:84:8a:2a:a7:df:91:be:b4:01:07:6f:48:75:
         2c:84:35:62:5a:50:ef:97:ce:b5:a6:bc:be:30:f9:a3:c0:f3:
         fa:fe:ba:a4:d1:0a:52:8f:65:a9:3c:6a:83:70:f8:cc:e8:88:
         ff:b5:34:0a:86:58:b9:71:17:93:88:bb:7d:e5:b4:f7:56:32:
         de:e8:70:4a:7a:56:31:9f:b8:b0:d2:81:99:9d:02:72:3a:0b:
         c8:1a:b4:3f:2b:4a:1a:29:03:2c:70:01:a1:33:d3:cb:0d:07:
         e3:e8:8f:03:90:a2:9e:c0:75:ca:a8:57:88:1e:60:85:23:42:
         ac:a0:8e:22:fa:99:29:80:06:86:7f:0d:f5:c1:c8:c1:b5:0c:
         9e:10:d3:74:0f:b3:67:c1:9c:7c:6c:2f:f7:fe:f3:66:21:be:
         b5:bf:16:7a:16:c5:f1:0e:ba:8b:a4:61:02:bf:68:4a:cc:cc:
         33:46:2f:37:f5:19:0f:6e:56:ec:1e:79:5a:b9:73:18:b7:f5:
         2d:e0:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:35 2024 by rpki-client on console-fra.rpki-client.org