Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263032.roa
File:                     AS263032.roa (raw, json)
Hash identifier:          bWdR9Dc1ebR0Ac+A/FaB5xQt/jAY5oq6fEquIOEyJEY=
Subject key identifier:   45:27:5D:20:05:53:13:65:18:86:90:C0:68:AA:D1:ED:1B:70:53:0B
Certificate issuer:       /CN=D4206C10F587084E3266C97EDA0F65643299E1B8
Certificate serial:       624F3AD6065DBB5B1102C0698FD66B9038EE219A
Authority key identifier: D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263032.roa
Signing time:             Mon 25 Nov 2024 16:59:39 +0000
ROA not before:           Mon 25 Nov 2024 16:54:39 +0000
ROA not after:            Mon 24 Nov 2025 16:59:39 +0000
asID:                     263032
IP address blocks:        168.90.44.0/22 maxlen: 24
                          170.238.192.0/22 maxlen: 24
                          177.137.56.0/21 maxlen: 24
                          186.250.36.0/22 maxlen: 24
                          2804:2d24::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4f:3a:d6:06:5d:bb:5b:11:02:c0:69:8f:d6:6b:90:38:ee:21:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4206C10F587084E3266C97EDA0F65643299E1B8
        Validity
            Not Before: Nov 25 16:54:39 2024 GMT
            Not After : Nov 24 16:59:39 2025 GMT
        Subject: CN=45275D2005531365188690C068AAD1ED1B70530B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:57:a0:4b:f6:d0:e1:4a:83:86:31:19:de:
                    79:30:94:ee:86:3d:2a:11:c6:10:a8:e4:90:5c:de:
                    24:c7:80:3c:c3:5e:a1:87:73:d9:db:27:6f:ca:c9:
                    31:53:34:6e:27:dc:ac:8f:a3:be:d0:13:86:2a:01:
                    55:65:18:ca:d2:f5:96:62:34:eb:e8:65:32:fc:c9:
                    f1:17:77:72:90:c2:a6:cc:8c:0a:6c:4f:b6:c5:3d:
                    f3:a0:c6:c4:da:38:d6:98:61:de:d7:30:22:de:31:
                    64:57:04:99:8f:b3:f9:1e:3b:dc:a1:ec:7d:7b:de:
                    05:d8:13:72:96:8b:31:34:9b:d4:e4:c2:48:37:c9:
                    88:c7:5a:93:06:5f:8c:11:f0:38:ba:ca:bd:49:bc:
                    7e:bf:b6:2e:56:c3:5c:09:2f:4e:ff:47:27:ae:21:
                    98:75:1f:a6:f2:c2:4b:a7:05:ad:e4:81:d2:0c:eb:
                    2f:bc:0f:47:97:6d:74:48:5c:ed:40:24:66:d8:e0:
                    df:87:41:45:3a:46:b1:8e:aa:34:2c:1f:ba:b2:b1:
                    98:d8:d2:81:bb:ae:25:99:3b:c6:47:1f:fb:cb:b6:
                    35:77:79:56:b5:6c:de:8c:8a:58:6f:b4:4d:1b:b6:
                    ff:c7:f3:9b:09:f9:64:c2:2a:d0:14:21:bb:6c:bc:
                    96:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:27:5D:20:05:53:13:65:18:86:90:C0:68:AA:D1:ED:1B:70:53:0B
            X509v3 Authority Key Identifier:
                keyid:D4:20:6C:10:F5:87:08:4E:32:66:C9:7E:DA:0F:65:64:32:99:E1:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/D4206C10F587084E3266C97EDA0F65643299E1B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4206C10F587084E3266C97EDA0F65643299E1B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/3/AS263032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.44.0/22
                  170.238.192.0/22
                  177.137.56.0/21
                  186.250.36.0/22
                IPv6:
                  2804:2d24::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:95:a9:57:c7:47:b9:22:1c:a4:e0:b5:73:8b:76:81:27:9c:
         5d:dc:e2:36:05:73:21:09:32:8b:55:20:c5:d2:41:db:f1:2c:
         fc:6f:ed:2f:4b:01:40:87:43:e9:45:20:f3:7a:24:43:45:3f:
         ad:10:6b:17:55:1f:72:80:5b:a0:3f:3a:27:c9:aa:46:15:ab:
         c6:2e:42:f0:44:76:1d:e1:81:73:72:e2:cc:95:bf:0c:f4:4c:
         bf:e8:c5:f7:4e:a4:31:6d:b7:ad:01:b0:45:9a:ea:d8:cb:fb:
         81:50:3c:cd:31:f5:7d:ea:67:52:84:f2:e7:c6:ff:99:83:6a:
         4d:e5:ad:d6:58:0b:9f:16:2a:92:74:01:9a:0d:98:ec:f9:96:
         81:63:49:ed:a1:1d:e7:24:11:ca:a0:07:2b:ed:59:cd:ee:cc:
         22:5f:7e:38:62:85:18:44:3f:78:e2:b9:6b:68:e1:58:5b:c5:
         75:50:84:ad:0b:dc:b1:0d:e7:75:1d:3f:93:ec:65:5b:e2:35:
         b8:44:fa:11:62:56:fa:16:ca:7e:ba:9d:59:c1:cc:9d:ad:98:
         ca:48:67:70:fc:bf:fd:ea:e5:1a:82:9e:49:77:e7:11:49:1b:
         d9:f3:de:74:96:d0:b7:6d:ee:8e:17:9c:75:3e:3a:80:25:ec:
         15:3b:0c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:35 2024 by rpki-client on console-fra.rpki-client.org