Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/3133322e3235352e33362e302f32322d3234203d3e20323634343535.roa
File:                     3133322e3235352e33362e302f32322d3234203d3e20323634343535.roa (raw, json)
Hash identifier:          Xws8/z8t+dmQL0rCpcdT8h0+LATTL37q5s4HeOvfFOw=
Subject key identifier:   C9:9D:62:5E:26:D1:D0:05:7C:BE:B0:7B:C0:E5:A6:DF:30:AE:5A:ED
Certificate issuer:       /CN=6978D60B1B16174093F2F0F0E30A137CA94DE3A4
Certificate serial:       51AAB5A42A854A9CD47B8DA3874C3B3E3605BB7A
Authority key identifier: 69:78:D6:0B:1B:16:17:40:93:F2:F0:F0:E3:0A:13:7C:A9:4D:E3:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/3133322e3235352e33362e302f32322d3234203d3e20323634343535.roa
Signing time:             Thu 04 Apr 2024 10:47:31 +0000
ROA not before:           Thu 04 Apr 2024 10:42:31 +0000
ROA not after:            Thu 03 Apr 2025 10:47:31 +0000
asID:                     264455
IP address blocks:        132.255.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.crl
                          rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:aa:b5:a4:2a:85:4a:9c:d4:7b:8d:a3:87:4c:3b:3e:36:05:bb:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6978D60B1B16174093F2F0F0E30A137CA94DE3A4
        Validity
            Not Before: Apr  4 10:42:31 2024 GMT
            Not After : Apr  3 10:47:31 2025 GMT
        Subject: CN=C99D625E26D1D0057CBEB07BC0E5A6DF30AE5AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:8a:a1:d7:ce:32:ff:7a:0f:1b:7e:1e:ef:
                    77:0a:cf:28:25:c3:10:a2:55:62:0e:72:7b:56:1f:
                    9d:d9:bf:59:d8:eb:cf:fe:f2:a4:7e:9a:6f:0d:ad:
                    74:13:18:a9:fc:b8:e4:48:55:89:22:b7:16:ab:fd:
                    60:01:06:d3:59:a0:7a:cb:fa:58:73:2a:f9:78:02:
                    ac:53:91:1f:b0:e5:1c:23:64:59:57:69:9b:a7:ac:
                    86:df:77:c2:6f:25:a8:ab:17:4e:27:17:7e:57:fe:
                    00:a2:0f:51:0c:bf:61:67:89:3d:bf:53:e7:fe:a2:
                    6b:ee:b3:b9:6a:79:c4:5b:37:33:f4:f8:62:f0:5e:
                    1a:f6:85:72:05:f1:ff:14:07:4e:08:a5:d4:52:69:
                    ac:d7:e8:d4:dd:91:48:2a:b8:c8:fe:5b:c5:b6:78:
                    08:30:4d:84:f1:7f:f1:64:2e:5b:82:dd:b4:68:85:
                    aa:7e:a3:e9:ca:99:5d:62:00:1a:db:48:8d:45:e6:
                    a3:bf:66:df:73:41:83:d3:14:84:4c:9e:00:ca:46:
                    87:69:70:11:ea:56:b5:1c:af:06:34:dd:f8:e3:0f:
                    32:73:c3:e8:d2:ef:6e:d7:7f:29:62:65:af:9c:e5:
                    85:07:13:03:c9:eb:c7:d8:9d:97:ac:f4:83:67:43:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9D:62:5E:26:D1:D0:05:7C:BE:B0:7B:C0:E5:A6:DF:30:AE:5A:ED
            X509v3 Authority Key Identifier:
                keyid:69:78:D6:0B:1B:16:17:40:93:F2:F0:F0:E3:0A:13:7C:A9:4D:E3:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6978D60B1B16174093F2F0F0E30A137CA94DE3A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/72tGcT91MLUpYtjyAapo6PCowYWWzUMjuyvwo7Ysmhwo/1/3133322e3235352e33362e302f32322d3234203d3e20323634343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:84:f9:1d:95:cc:0d:a3:c9:2b:6a:76:b7:36:3c:c0:7d:bb:
         5a:b2:d5:a5:af:1e:5b:dc:cc:70:8c:2a:2f:4c:b8:b8:43:6f:
         8a:41:54:c6:0c:e1:b5:57:b0:be:bb:a6:2b:ea:46:1a:a9:07:
         85:7b:fd:84:8f:ce:6b:44:96:df:ef:97:0b:45:d4:cc:02:16:
         3f:bb:22:b0:84:65:ce:d2:7f:49:06:52:07:93:31:06:b4:53:
         67:70:5c:8a:b7:e3:ca:8c:e2:13:1d:3e:b6:f2:83:14:a3:43:
         75:38:c1:ed:b9:1f:b9:9d:ac:5d:34:7c:9f:20:9c:f8:c1:11:
         26:70:32:31:8c:37:71:a0:cb:71:95:30:ff:9a:c1:0d:ce:c9:
         d5:5f:47:7e:36:77:ba:f0:a6:d5:2b:23:4d:f3:ab:5b:f6:0d:
         a2:68:64:0b:e2:d6:d6:66:8d:10:fb:99:f8:ec:e8:48:ef:7e:
         0e:e9:3e:35:13:07:0a:5c:1e:fe:72:0f:b4:8b:53:c9:af:0e:
         c2:70:22:9f:04:c4:dc:b5:fd:c7:a8:73:f5:ea:bc:ff:63:36:
         21:96:e7:2a:19:48:ab:13:f8:3f:c2:52:fa:10:ce:4f:c3:b1:
         42:e8:d8:7f:84:1c:45:48:0f:77:2c:76:5e:40:2e:52:6a:b5:
         0b:61:75:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:35 2024 by rpki-client on console-fra.rpki-client.org