Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133322e3235352e3137322e302f32322d3332203d3e20323634353137.roa
File:                     3133322e3235352e3137322e302f32322d3332203d3e20323634353137.roa (raw, json)
Hash identifier:          6HYEPTud7dpOa0GWIVx+HGwgjdoLv1v3s9VZnoWfQJA=
Subject key identifier:   B3:F0:45:35:BD:6A:A3:15:45:02:59:2B:CF:C8:E7:02:EE:5F:C0:AC
Certificate issuer:       /CN=CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B
Certificate serial:       105E8CF3AB59FA835F19AFA2CCFC5FB90385E75B
Authority key identifier: CE:8B:3E:AB:C5:F6:A5:A9:F6:C8:BA:E8:DF:C1:C1:27:61:2D:6E:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133322e3235352e3137322e302f32322d3332203d3e20323634353137.roa
Signing time:             Mon 17 Jun 2024 20:16:05 +0000
ROA not before:           Mon 17 Jun 2024 20:11:05 +0000
ROA not after:            Mon 16 Jun 2025 20:16:05 +0000
asID:                     264517
IP address blocks:        132.255.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.crl
                          rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5e:8c:f3:ab:59:fa:83:5f:19:af:a2:cc:fc:5f:b9:03:85:e7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B
        Validity
            Not Before: Jun 17 20:11:05 2024 GMT
            Not After : Jun 16 20:16:05 2025 GMT
        Subject: CN=B3F04535BD6AA3154502592BCFC8E702EE5FC0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:a9:90:66:d8:88:ff:7e:7a:eb:7b:fd:c9:
                    80:8f:b8:14:b8:cb:59:4a:b0:19:0c:33:8c:50:22:
                    ea:92:0e:cd:45:9a:58:c7:41:44:fd:8b:4b:fd:27:
                    bf:a6:60:a3:6f:90:2c:87:59:5a:dc:f6:e1:a7:8d:
                    9f:6b:9c:e1:85:0f:de:11:7e:a3:16:ce:1f:0d:15:
                    c0:04:34:f7:1b:1f:fe:fe:f5:82:fb:c2:e6:fb:e1:
                    b6:28:58:b3:a5:72:41:d6:c1:e6:93:c9:d1:f8:e2:
                    7b:ea:b8:d0:ed:5c:65:66:23:31:4e:d5:9e:3f:1b:
                    85:cc:99:8d:04:2f:a9:be:8d:8b:8e:2d:cf:7d:aa:
                    4e:bc:38:7d:e8:9c:0d:73:0c:67:27:3a:37:f3:e8:
                    4c:b4:9c:b9:9c:f8:08:05:27:1e:15:32:64:5b:25:
                    a5:df:f9:f6:4b:13:04:bb:28:cc:44:b8:f8:6f:73:
                    77:61:ea:de:37:f0:3d:1e:ce:89:97:57:b0:5e:38:
                    7f:e5:a1:46:c4:51:f1:5f:92:9b:71:70:6b:69:2b:
                    de:89:32:b5:c5:03:7f:36:b7:c8:84:2d:e4:70:1b:
                    f7:cd:96:47:b2:53:3c:ca:a9:12:5d:be:a4:85:5c:
                    07:f8:ba:38:ea:0e:5d:19:68:08:7b:73:5f:7e:4c:
                    c9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F0:45:35:BD:6A:A3:15:45:02:59:2B:CF:C8:E7:02:EE:5F:C0:AC
            X509v3 Authority Key Identifier:
                keyid:CE:8B:3E:AB:C5:F6:A5:A9:F6:C8:BA:E8:DF:C1:C1:27:61:2D:6E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8B3EABC5F6A5A9F6C8BAE8DFC1C127612D6E4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/3133322e3235352e3137322e302f32322d3332203d3e20323634353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:0e:1d:fa:7f:fd:4b:dd:a9:2d:ea:fc:f6:9a:85:7b:26:7b:
         a6:f1:f9:1a:7c:e4:4e:9d:77:1a:b2:8e:65:45:e9:bb:ce:f7:
         05:93:68:20:d3:be:d6:65:77:a6:58:50:e4:c4:62:6a:18:61:
         da:e6:7a:f2:91:3d:d1:e3:30:c9:c2:d7:8b:4f:ac:d8:66:e4:
         74:09:c0:e5:d6:a0:2d:5f:bb:5f:ff:e0:6f:45:cf:bc:56:03:
         e0:2b:93:71:70:da:29:4c:90:82:05:8c:1d:bd:26:89:7c:9c:
         e7:2f:63:54:9e:15:32:ff:79:4a:fd:cc:3c:c5:3c:bb:82:26:
         e4:f1:c6:21:e0:e9:07:b2:09:30:af:38:b2:ef:0e:c3:d4:5f:
         c9:08:40:7d:ed:78:03:cc:95:94:c5:82:65:2d:19:de:9e:bf:
         4f:43:4f:d2:20:54:52:8e:16:2b:b5:24:59:d1:86:e4:c1:aa:
         f3:d4:2a:57:f5:7b:53:8e:d8:97:11:b5:f5:a4:9e:e8:2d:07:
         22:e0:86:35:db:07:f1:96:dd:ed:0a:f5:46:0e:33:8e:e3:56:
         da:51:a9:de:65:ca:17:03:5a:5a:0a:f8:4e:df:a0:7d:8d:17:
         56:91:b3:ef:92:fa:96:0e:56:0b:1c:7d:b1:d4:bd:03:4b:3e:
         ba:b8:e3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:36 2024 by rpki-client on console-ams.rpki-client.org