Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/3133322e3235352e3137372e302f32342d3234203d3e203533303438.roa
File:                     3133322e3235352e3137372e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          38nKtQ/8mjsA5rvZn/sn9r72T0pgmqFFGmAe/dew88o=
Subject key identifier:   CF:7A:AD:88:91:0D:C9:43:16:CA:5C:F5:DE:23:5B:77:42:AA:16:15
Certificate issuer:       /CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
Certificate serial:       16543578781A6077B0841A881BE9CD88C0A05559
Authority key identifier: DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/3133322e3235352e3137372e302f32342d3234203d3e203533303438.roa
Signing time:             Thu 04 Apr 2024 17:31:50 +0000
ROA not before:           Thu 04 Apr 2024 17:26:50 +0000
ROA not after:            Thu 03 Apr 2025 17:31:50 +0000
asID:                     53048
IP address blocks:        132.255.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.crl
                          rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:54:35:78:78:1a:60:77:b0:84:1a:88:1b:e9:cd:88:c0:a0:55:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5
        Validity
            Not Before: Apr  4 17:26:50 2024 GMT
            Not After : Apr  3 17:31:50 2025 GMT
        Subject: CN=CF7AAD88910DC94316CA5CF5DE235B7742AA1615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:9f:a9:2c:fe:81:3a:2d:d5:00:05:02:e4:
                    06:3a:a1:9a:c1:c9:9b:2d:25:6b:35:8b:93:61:a7:
                    f2:12:9d:a0:94:87:67:ad:59:40:ed:0a:de:91:a9:
                    1f:8e:f6:e6:05:2b:35:de:6d:2c:23:19:52:ff:ea:
                    96:a3:8b:6f:f6:2d:98:63:22:79:3b:c5:a1:f6:ce:
                    69:67:89:14:07:a5:f4:4e:97:90:02:32:52:62:03:
                    88:eb:76:67:31:3e:2b:4e:54:de:7c:ef:46:a6:88:
                    e4:1c:75:b3:bf:e3:38:6d:7f:a8:0a:b4:7c:17:cc:
                    94:54:cb:20:1c:27:43:86:eb:2e:1b:8e:3f:11:35:
                    9f:e2:d4:99:a7:c2:8f:1a:31:5f:d9:3f:c5:3f:51:
                    4d:28:ab:19:a0:b7:d8:76:d4:1a:9b:28:15:9c:2f:
                    f7:3b:8b:56:0b:89:f1:b3:38:3a:b2:b1:7a:75:05:
                    c6:a5:8e:b7:48:fc:7e:be:bf:55:22:56:08:a6:08:
                    c2:cd:3b:0b:19:86:dc:1b:c7:54:56:3b:07:22:e7:
                    f0:5e:66:72:5d:80:91:e7:1e:8d:99:e5:13:03:41:
                    72:a7:6d:81:d9:8d:54:f7:a9:08:be:9a:b8:e5:9f:
                    36:be:37:76:4d:b3:45:58:95:09:cd:fa:a8:fa:16:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7A:AD:88:91:0D:C9:43:16:CA:5C:F5:DE:23:5B:77:42:AA:16:15
            X509v3 Authority Key Identifier:
                keyid:DB:0F:B5:DC:10:22:40:8D:3B:32:D7:E9:47:B0:03:1E:5E:C1:8C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB0FB5DC1022408D3B32D7E947B0031E5EC18CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/1/3133322e3235352e3137372e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:e8:81:27:45:86:4d:09:82:b4:bb:a6:c7:55:2a:41:f2:
         ec:91:af:a5:98:c5:73:50:e6:b5:99:d8:18:7a:3c:2f:b1:42:
         ac:01:54:fc:89:a6:6a:ab:e4:8b:9f:8d:86:e0:14:ee:74:b9:
         aa:f5:bc:64:fb:b5:c9:8f:5b:72:6d:da:fc:a9:7d:9b:1d:3e:
         7d:ff:b0:7c:72:c3:2d:26:8d:c4:ae:0d:e0:3c:37:3e:13:eb:
         c4:23:d6:47:d8:94:ba:56:cf:6c:54:fe:9f:cd:47:a3:d9:e8:
         46:49:70:e3:34:b9:93:1e:d0:6f:8a:a4:ad:de:f3:e6:3d:6b:
         08:e2:26:68:4f:5c:b8:e1:fd:14:ae:62:13:c8:b6:ac:9e:3c:
         fa:c6:21:06:3f:f3:f2:2b:67:15:99:9b:4a:a8:a7:92:f4:b6:
         0a:68:ce:ef:9b:ef:f9:38:02:a3:6b:e8:df:51:3b:42:e6:9f:
         58:7c:e5:4d:98:41:19:5f:4b:c5:6e:b2:19:cc:9b:57:28:22:
         f0:05:f5:f2:13:d4:43:1a:a6:7a:09:6e:82:33:6e:36:98:bb:
         5a:53:d6:6c:a8:77:5e:8d:d9:b8:ec:db:85:9d:49:e6:b9:e7:
         d7:47:b2:e4:fe:59:17:b8:92:2d:32:fe:20:3f:6c:5f:2b:70:
         48:50:ee:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:35 2024 by rpki-client on console-fra.rpki-client.org