Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35332e302f32342d3234203d3e20323636363238.roa
File:                     3132382e3230312e35332e302f32342d3234203d3e20323636363238.roa (raw, json)
Hash identifier:          M7Z+LgQEENGFsjHIXhyH77f85/COAfAGznjjrpOzbgw=
Subject key identifier:   F4:5E:4D:E9:30:F0:0C:AD:E2:AE:A7:E8:15:97:F1:E5:F4:52:13:3E
Certificate issuer:       /CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
Certificate serial:       70C57E1908BDA3A60C04F269187129C96B888D02
Authority key identifier: 9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35332e302f32342d3234203d3e20323636363238.roa
Signing time:             Tue 27 Aug 2024 22:40:28 +0000
ROA not before:           Tue 27 Aug 2024 22:35:28 +0000
ROA not after:            Tue 26 Aug 2025 22:40:28 +0000
asID:                     266628
IP address blocks:        128.201.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl
                          rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c5:7e:19:08:bd:a3:a6:0c:04:f2:69:18:71:29:c9:6b:88:8d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CFB76D20D558F08024B5656A94D7209D3BD1F09
        Validity
            Not Before: Aug 27 22:35:28 2024 GMT
            Not After : Aug 26 22:40:28 2025 GMT
        Subject: CN=F45E4DE930F00CADE2AEA7E81597F1E5F452133E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:49:76:84:fb:b8:b4:f1:aa:7f:3d:51:41:
                    a9:2a:4b:1b:2d:7b:3c:65:20:a2:1f:48:9f:02:70:
                    b8:82:02:1e:5f:b9:0f:ae:b4:8c:73:a8:a6:cd:3c:
                    10:b8:25:53:ee:c8:53:5e:24:f9:c5:bd:2e:28:63:
                    84:c5:c5:92:16:36:f6:e2:92:ae:28:39:36:b3:d5:
                    ab:19:9b:2c:ba:03:1f:dc:78:09:dc:c8:45:20:ac:
                    73:e6:b7:d1:ac:fd:f3:d5:fd:b8:4c:ba:91:81:a1:
                    36:b3:96:26:40:36:fe:c6:50:53:ea:12:c8:75:10:
                    89:14:e5:19:e6:d4:ad:9d:70:13:c3:9f:3a:83:58:
                    fd:cd:40:0b:b0:e5:13:64:78:ca:07:df:f8:d5:ca:
                    99:f4:c6:f8:b7:d6:42:e3:b9:9a:31:fd:16:0e:9e:
                    44:7e:ef:dd:31:70:7b:e8:15:18:01:5a:2b:9d:c7:
                    aa:4c:65:01:3c:4f:ee:ae:91:d3:e9:7e:c5:cc:bf:
                    fa:c3:a7:10:04:e0:64:15:02:5a:fd:bc:b6:8a:9e:
                    f3:c5:25:cb:d3:bb:4a:c5:59:7d:39:13:3f:d4:7c:
                    91:f6:f0:4b:01:f5:1e:0b:63:72:4e:2a:04:74:6c:
                    c5:aa:1b:ee:0a:bb:5f:b0:6c:57:e0:a5:88:dd:69:
                    5f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5E:4D:E9:30:F0:0C:AD:E2:AE:A7:E8:15:97:F1:E5:F4:52:13:3E
            X509v3 Authority Key Identifier:
                keyid:9C:FB:76:D2:0D:55:8F:08:02:4B:56:56:A9:4D:72:09:D3:BD:1F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CFB76D20D558F08024B5656A94D7209D3BD1F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uf5smC91d3vaox2z1Lw7v2TUSDf5K7bkggvEzF4NePA/1/3132382e3230312e35332e302f32342d3234203d3e20323636363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:6b:cd:5a:d2:1d:ee:db:2c:03:72:ee:38:6e:d4:11:08:17:
         4c:7d:d3:35:a9:a0:c3:67:5a:0e:71:e6:b0:ef:0e:56:ce:8e:
         cf:ed:f6:90:32:cf:47:b6:47:cb:b7:6c:55:1f:bc:7a:bf:62:
         20:f3:b1:73:1a:77:0b:7c:f4:2e:d4:46:64:91:45:66:8d:52:
         5a:e7:1b:68:59:9a:90:61:c9:17:96:a5:19:b5:25:65:b5:17:
         67:f5:d0:f3:d2:b3:90:be:70:3a:43:de:83:4c:92:c6:7b:4d:
         f3:cc:59:22:c0:5e:32:d6:39:44:11:aa:44:fa:78:54:a2:4b:
         15:73:1e:96:33:4a:88:85:3b:37:1a:d2:d7:f6:f5:1c:00:9c:
         7c:d5:70:ae:d8:63:e2:e2:00:e1:5d:27:2a:4e:a1:8e:f4:1e:
         a1:21:6c:b3:d8:3e:5b:6a:75:f2:a3:ff:40:8e:be:26:1f:02:
         af:d9:47:93:0f:b2:d9:2a:06:5d:26:98:f5:f8:b1:d2:9a:8d:
         0a:8e:6f:5d:5a:9a:c6:1a:a2:f1:d7:6e:42:cd:b9:ec:dd:8f:
         25:16:c7:14:96:9a:df:81:16:9c:f9:7d:0e:0e:91:9f:9a:32:
         6c:25:aa:f8:ed:31:59:56:8d:eb:59:82:3a:4b:60:67:bf:9a:
         9b:ca:17:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org