Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262605.roa
File:                     AS262605.roa (raw, json)
Hash identifier:          2fj8pVo46ONzYndVkJlfsJCbFTVFl5k81/NPvgsWL7A=
Subject key identifier:   32:14:47:C2:1B:F2:B2:A3:33:1B:D7:24:D4:0B:4F:F8:0C:12:3E:81
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       7769A6530859449BC36C922A4E6E11014C4E03AC
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262605.roa
Signing time:             Wed 10 Apr 2024 22:01:14 +0000
ROA not before:           Wed 10 Apr 2024 21:56:14 +0000
ROA not after:            Wed 09 Apr 2025 22:01:14 +0000
asID:                     262605
IP address blocks:        132.255.252.0/22 maxlen: 24
                          138.99.84.0/22 maxlen: 24
                          143.202.108.0/22 maxlen: 24
                          170.80.104.0/22 maxlen: 24
                          177.84.232.0/22 maxlen: 24
                          177.128.44.0/22 maxlen: 24
                          177.184.248.0/21 maxlen: 24
                          186.250.8.0/22 maxlen: 24
                          186.250.12.0/22 maxlen: 24
                          2804:24c::/32 maxlen: 48
                          2804:da8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:69:a6:53:08:59:44:9b:c3:6c:92:2a:4e:6e:11:01:4c:4e:03:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Apr 10 21:56:14 2024 GMT
            Not After : Apr  9 22:01:14 2025 GMT
        Subject: CN=321447C21BF2B2A3331BD724D40B4FF80C123E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:be:c1:d6:0a:3a:c0:b5:4c:c3:b2:bf:26:
                    1b:88:91:f4:8e:bc:fb:6e:da:7e:ba:3c:f4:90:9a:
                    24:ca:c9:da:d0:c5:e7:c3:fa:59:ec:b0:da:77:46:
                    fc:f5:cf:1a:3c:2a:60:26:77:b2:df:d6:60:f3:76:
                    97:10:56:32:2b:39:d7:91:a2:c4:67:00:3d:84:be:
                    e9:b8:0e:de:a6:ac:dc:46:d1:27:41:92:37:aa:e7:
                    87:2e:b5:7d:3b:0c:43:54:c2:10:2e:d9:c4:39:66:
                    bd:ca:d6:ed:2c:d0:44:68:7d:76:a0:4c:c0:b2:47:
                    b7:85:64:e6:09:a1:a6:a2:4f:1a:7a:4a:d6:d1:c6:
                    d9:61:f4:b8:ae:f8:c5:3b:c3:eb:4c:52:5e:91:2f:
                    1e:c6:43:6c:fe:1d:37:44:f8:c7:49:85:58:10:b8:
                    6a:9e:81:d5:9d:dc:c2:e6:b9:90:36:df:39:f2:e7:
                    9b:29:a2:3c:c4:44:e4:1b:a7:d8:bd:e8:62:94:e2:
                    54:c7:f7:88:76:64:6a:13:a1:91:d8:6e:fc:82:84:
                    e7:99:b6:c0:64:5e:69:80:e9:82:a9:70:00:cb:2f:
                    e9:0d:c7:23:72:04:0a:25:41:2b:59:6f:79:79:f6:
                    92:bb:7c:57:9c:8e:6d:21:72:3c:96:c0:a7:d2:55:
                    31:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:14:47:C2:1B:F2:B2:A3:33:1B:D7:24:D4:0B:4F:F8:0C:12:3E:81
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS262605.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.252.0/22
                  138.99.84.0/22
                  143.202.108.0/22
                  170.80.104.0/22
                  177.84.232.0/22
                  177.128.44.0/22
                  177.184.248.0/21
                  186.250.8.0/21
                IPv6:
                  2804:24c::/32
                  2804:da8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:71:57:3d:a7:f0:c5:72:44:29:e6:e6:6a:46:70:0c:71:a1:
         1c:bd:b1:a1:fe:61:b2:ac:03:83:a8:2d:31:7c:65:cd:6a:b8:
         e7:f3:3a:19:cb:ea:6b:9a:6f:8e:e7:7b:bf:70:08:04:8b:b1:
         81:69:76:3e:1d:fe:32:cd:c2:ee:51:e2:c3:cc:05:a9:1a:56:
         f1:4e:5b:df:d0:c9:d0:3a:c7:db:02:da:3c:6d:c6:57:3b:bb:
         75:f2:38:f1:77:20:75:c7:54:55:ed:76:7c:47:fe:ae:dd:94:
         80:6d:0e:15:42:3b:2f:db:0b:bb:d5:99:56:a9:36:46:15:d7:
         5d:45:1e:42:4d:95:83:64:0b:f6:5a:28:6c:dc:22:32:53:2e:
         30:f5:de:23:1c:56:7d:2a:4b:9b:f5:c9:0b:48:e8:24:c9:e6:
         6e:19:01:44:df:f9:f6:4e:fa:e4:84:84:fc:fc:22:f6:df:d3:
         98:f0:3c:62:0e:14:e2:7e:32:d2:d8:23:e7:92:c3:b9:d9:c4:
         42:c3:a1:9a:27:b3:4d:ea:a3:b4:54:b4:56:f0:00:92:5c:f3:
         50:46:0e:2b:bd:21:6e:82:c4:69:b5:a9:93:8f:ba:cb:ee:35:
         09:a6:1f:a9:23:2b:8a:c4:bd:80:67:09:56:2b:d5:17:06:1f:
         75:c7:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:44 2024 by rpki-client on console-fra.rpki-client.org