Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35322e302f32342d3234203d3e20323636363238.roa
File:                     3132382e3230312e35322e302f32342d3234203d3e20323636363238.roa (raw, json)
Hash identifier:          t8COUzRX9ljGTwtZY9ZGFObB6OuFgokA/J2RMZRB7RU=
Subject key identifier:   7A:FF:EF:17:2D:7D:97:12:19:D6:42:DE:5B:D0:B3:77:A6:B5:26:2E
Certificate issuer:       /CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
Certificate serial:       72849E75714C78B15C6A3E2C4D41E9073F6EBD43
Authority key identifier: 9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35322e302f32342d3234203d3e20323636363238.roa
Signing time:             Tue 27 Aug 2024 22:39:58 +0000
ROA not before:           Tue 27 Aug 2024 22:34:58 +0000
ROA not after:            Tue 26 Aug 2025 22:39:58 +0000
asID:                     266628
IP address blocks:        128.201.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl
                          rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:84:9e:75:71:4c:78:b1:5c:6a:3e:2c:4d:41:e9:07:3f:6e:bd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
        Validity
            Not Before: Aug 27 22:34:58 2024 GMT
            Not After : Aug 26 22:39:58 2025 GMT
        Subject: CN=7AFFEF172D7D971219D642DE5BD0B377A6B5262E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:1a:9e:6b:d8:66:59:bf:7c:9b:50:cc:04:
                    51:c9:b3:7c:60:fb:7a:0b:49:e2:4d:25:8d:1f:f3:
                    21:a7:ce:67:ab:67:64:83:a2:e2:bd:6d:53:21:1c:
                    09:e2:15:38:2c:70:2e:a5:dc:0d:c1:5f:e5:74:82:
                    51:0e:52:fa:ea:3d:77:cb:cc:f4:ab:5b:43:b1:be:
                    2f:9e:ff:da:7f:9e:34:06:a3:b4:e6:d7:96:a2:0b:
                    d3:ca:5c:9d:10:75:ee:4a:0f:03:32:f4:88:5d:1d:
                    c1:b8:53:87:4b:88:0c:5a:bb:41:1b:fc:96:dd:72:
                    9a:8d:5c:59:44:42:1f:5d:d0:e8:37:90:5d:a2:74:
                    fe:6a:b3:a0:30:5a:9b:15:33:8e:5e:63:e1:b7:d3:
                    3c:6e:6e:ed:da:f4:95:73:45:23:ce:3e:fd:69:88:
                    e5:9b:f1:56:08:23:aa:ba:b7:f8:5f:5e:b1:0a:47:
                    fb:7f:90:7a:2c:9c:9b:71:11:57:95:93:1b:38:76:
                    81:f6:58:a8:76:b0:57:73:ed:aa:c6:82:26:df:42:
                    3b:72:2e:3b:69:2c:3c:16:04:0d:a0:b8:f5:73:3d:
                    56:9f:7b:62:4e:39:f9:e5:b2:c3:2b:48:6d:24:1a:
                    ab:0d:d3:33:65:01:72:18:ac:36:fa:4e:e4:72:f1:
                    0f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FF:EF:17:2D:7D:97:12:19:D6:42:DE:5B:D0:B3:77:A6:B5:26:2E
            X509v3 Authority Key Identifier:
                keyid:9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35322e302f32342d3234203d3e20323636363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e7:e2:61:28:25:99:9b:a8:e2:f3:17:ab:55:58:18:d2:ba:
         83:12:23:1f:e6:ff:f2:22:c1:95:36:2a:ad:03:a1:7c:9f:f3:
         57:ac:d2:d2:6c:fb:6b:32:fa:35:65:af:f6:80:a5:3f:c1:62:
         a8:ea:b8:36:aa:63:c8:19:34:88:64:3b:18:b2:3f:de:d7:df:
         b0:be:38:6d:d7:6f:cb:a4:f7:42:fc:44:b8:f1:ce:1c:14:79:
         6a:c6:15:27:c9:ae:67:4e:12:e3:a2:b3:ab:e6:d2:32:c2:c8:
         98:7d:c4:f0:73:a1:80:e7:40:f6:7a:04:04:cd:13:6f:63:7e:
         bd:34:85:e5:28:52:b5:e2:05:5b:95:bc:a2:a8:49:c9:33:3a:
         68:ed:96:17:08:61:f9:2e:ea:fb:6e:9a:c6:62:5e:12:00:a1:
         fc:4e:f8:de:43:92:77:f1:a7:75:d5:86:8d:55:0e:cb:26:a5:
         c6:f1:e3:8c:c7:6b:49:ea:8f:f6:35:b3:d2:85:87:92:9c:35:
         e2:a4:4f:5c:e8:0b:5e:20:ae:29:9b:70:59:21:39:79:86:de:
         13:25:b2:04:a9:bb:ff:54:fc:b7:52:25:12:d0:20:94:27:ab:
         c8:a8:e7:59:e4:8c:0c:9c:96:49:fa:c2:59:5f:b7:34:65:58:
         dd:cd:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org