Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/3133322e3235352e3137362e302f32342d3234203d3e203533303438.roa
File:                     3133322e3235352e3137362e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          2SgcxUBlY8iXxm+1OmtjeikUXEcxemZ4FlXZUn+AV3Y=
Subject key identifier:   D4:09:CA:6F:96:0C:04:51:B3:93:D0:1F:58:E8:A2:F2:19:38:E5:E6
Certificate issuer:       /CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
Certificate serial:       49C6112AFE01D7EC9610E98B65D00A9D0B4BA5E0
Authority key identifier: DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/3133322e3235352e3137362e302f32342d3234203d3e203533303438.roa
Signing time:             Thu 04 Apr 2024 17:31:51 +0000
ROA not before:           Thu 04 Apr 2024 17:26:51 +0000
ROA not after:            Thu 03 Apr 2025 17:31:51 +0000
asID:                     53048
IP address blocks:        132.255.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.crl
                          rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c6:11:2a:fe:01:d7:ec:96:10:e9:8b:65:d0:0a:9d:0b:4b:a5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
        Validity
            Not Before: Apr  4 17:26:51 2024 GMT
            Not After : Apr  3 17:31:51 2025 GMT
        Subject: CN=D409CA6F960C0451B393D01F58E8A2F21938E5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:af:da:fb:d4:a2:bd:c9:c8:5d:1b:cb:e2:
                    5d:61:c0:1f:06:ac:92:06:7f:2d:0d:74:a2:d1:59:
                    64:55:33:00:1c:9f:be:04:1f:f6:e2:2c:7f:df:e4:
                    6c:c4:c0:a5:83:2c:44:1a:77:97:9b:5c:55:29:11:
                    19:8c:78:83:f6:2b:f5:d7:6c:60:9b:13:c6:41:21:
                    33:6e:59:3c:49:4f:1b:93:e3:cb:6a:7f:d1:bd:c4:
                    4e:30:dc:cd:b9:f8:ac:b9:21:5d:39:80:eb:49:02:
                    20:bd:07:ae:bd:e8:3b:71:88:9b:82:4b:d3:63:60:
                    96:ef:d4:60:2d:45:f3:8a:c0:4f:b2:42:85:ec:16:
                    ca:8b:1d:65:3c:fd:19:89:f2:02:fd:a3:8c:6d:e2:
                    ca:a4:9f:b1:4a:76:90:d2:b1:48:a7:71:7a:62:bc:
                    4d:bd:46:fb:ae:28:fb:fe:21:84:28:03:aa:bf:d0:
                    13:55:ee:36:4d:4d:32:da:4d:af:f5:39:97:38:af:
                    a3:94:29:4d:a6:de:4d:00:02:b8:e3:b4:e8:73:c0:
                    ed:92:60:9c:e0:34:72:ab:0c:d8:6a:5a:27:b8:3a:
                    ae:51:a7:99:56:ea:c5:47:aa:0c:e6:c3:3b:18:9f:
                    93:58:aa:0b:93:b6:40:73:11:d1:42:2a:8b:2a:53:
                    22:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:09:CA:6F:96:0C:04:51:B3:93:D0:1F:58:E8:A2:F2:19:38:E5:E6
            X509v3 Authority Key Identifier:
                keyid:DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/3133322e3235352e3137362e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:d1:67:85:00:96:31:5c:14:6c:18:47:2c:f4:85:65:a9:
         55:3c:ee:89:61:e4:97:63:90:a4:39:c2:2b:0c:d8:31:3f:c1:
         f8:02:fb:2f:73:d3:79:a9:c4:52:23:cb:5f:70:33:d3:53:cf:
         61:f4:54:34:b9:44:d1:ec:70:fc:99:3f:98:38:d4:61:48:40:
         e5:8b:77:c3:d8:e0:25:b5:e9:09:56:63:48:7f:91:f6:34:b7:
         51:10:7c:49:69:7c:06:10:16:f6:8a:e8:43:10:e8:98:51:a5:
         64:14:59:8f:f7:fc:c9:8f:d6:58:e0:00:29:ba:d0:99:47:8d:
         36:ae:fe:b5:51:d9:fa:0e:6b:7d:76:a1:b3:9a:78:ee:b5:8b:
         87:f3:fc:7e:39:70:89:cb:a6:9b:2e:72:85:75:3c:1f:2d:86:
         a7:c6:26:f5:f1:98:8d:08:d4:f9:b2:70:27:78:5e:5d:46:ef:
         94:26:d7:39:0e:a6:e8:68:d2:b9:fb:82:d6:24:c6:4b:37:4a:
         31:0b:b7:86:2d:3b:7c:33:a8:43:7a:9d:18:01:48:11:d0:a7:
         7c:da:c4:3d:1e:5c:30:34:d3:95:6e:75:13:76:26:53:70:28:
         6b:7c:a5:15:69:b6:79:bb:ff:8e:e5:db:a6:79:43:21:a6:12:
         ad:4b:d0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:35 2024 by rpki-client on console-fra.rpki-client.org