Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34342e302f32322d3234203d3e20323637333838.roa
File:                     3133322e3235352e34342e302f32322d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          rRZlzsSa/lWXzPeZsYUB8hbmGR1bwR30oGUGDXDZY5k=
Subject key identifier:   B9:C8:22:87:DA:6A:9E:CF:B3:5E:E7:47:BB:41:A0:DE:F6:4F:60:C3
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       5F2B980A2A10057C847D6F94F3DC2FDA84AF69DA
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34342e302f32322d3234203d3e20323637333838.roa
Signing time:             Wed 13 Nov 2024 13:40:51 +0000
ROA not before:           Wed 13 Nov 2024 13:35:51 +0000
ROA not after:            Wed 12 Nov 2025 13:40:51 +0000
asID:                     267388
IP address blocks:        132.255.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2b:98:0a:2a:10:05:7c:84:7d:6f:94:f3:dc:2f:da:84:af:69:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Nov 13 13:35:51 2024 GMT
            Not After : Nov 12 13:40:51 2025 GMT
        Subject: CN=B9C82287DA6A9ECFB35EE747BB41A0DEF64F60C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:ed:e1:11:3f:63:69:68:21:3c:c6:42:35:
                    5a:09:89:11:37:ba:1e:22:85:64:b2:ed:93:73:19:
                    3a:ab:aa:32:7a:aa:aa:2d:c8:d2:c4:6e:19:71:a5:
                    a2:f6:4d:94:07:d9:e2:a2:2a:3c:19:3d:29:20:bc:
                    f3:d3:30:6a:6d:6c:23:bd:47:5c:af:bf:c7:0b:3f:
                    4b:af:ad:7d:91:3c:b0:f6:8c:5c:f0:1a:af:e8:b6:
                    03:3c:a3:28:7c:0a:e1:1a:86:cd:f2:93:53:da:3d:
                    0f:41:6f:0c:bc:de:0e:87:6d:ab:00:31:0c:e6:42:
                    d6:cf:49:3c:9e:0b:23:94:c3:97:05:5d:0f:62:dc:
                    f1:eb:ed:2f:40:95:09:ef:c1:74:21:1a:86:4c:5f:
                    7f:b3:44:43:b7:52:1f:8f:aa:94:b5:ba:59:74:2c:
                    3a:70:ed:29:25:9d:32:34:20:4a:6e:4a:84:49:d1:
                    09:9b:68:aa:06:f3:6d:c5:e7:01:a3:cb:58:c0:f8:
                    dd:a8:db:90:af:bb:27:42:b3:bb:89:96:ac:30:94:
                    56:83:22:71:6c:3f:87:1d:8f:e2:65:94:64:54:71:
                    3c:c9:47:bf:b8:b3:ae:fc:a5:f7:ab:7d:d0:45:2a:
                    9d:05:77:8f:8a:37:3d:c3:b3:64:14:c6:23:1a:90:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C8:22:87:DA:6A:9E:CF:B3:5E:E7:47:BB:41:A0:DE:F6:4F:60:C3
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34342e302f32322d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:0a:24:28:b1:15:30:03:b8:98:1d:93:60:a2:b2:9b:4b:8e:
         b0:66:e2:81:92:3c:aa:48:7c:7e:55:9e:9f:5f:72:65:55:29:
         f3:75:8b:22:a0:99:1a:2a:dc:ca:59:6a:44:67:d5:c4:5a:3a:
         89:0e:9c:f3:12:09:db:6d:7e:c3:a3:59:a8:0d:69:f1:d8:a8:
         ca:5c:96:45:8e:ff:de:ea:48:61:c1:a4:b6:23:13:ba:27:cb:
         1b:67:27:11:e5:8a:70:dc:5c:dd:e8:43:f7:3d:23:74:cb:c3:
         f1:90:07:1a:38:98:d5:2a:37:e8:77:58:aa:37:89:67:2b:ac:
         f3:d5:44:96:ff:a6:ea:a3:aa:cd:12:d3:e5:f5:ca:35:6a:10:
         ca:7d:9e:8a:a7:d5:5d:1d:f6:37:85:a5:a0:a2:a4:50:c1:57:
         5c:42:f5:bc:16:b6:8d:73:8b:b2:0f:33:28:22:4b:41:4d:87:
         46:df:d0:9a:ca:5d:b9:65:73:e4:79:ff:5e:df:c9:6e:66:88:
         ba:21:c3:17:23:b6:16:c0:c7:b5:9b:d6:16:25:ac:e0:88:d9:
         51:43:61:7c:70:0b:38:52:51:4c:5e:e1:c1:38:01:25:d3:79:
         59:46:ff:20:58:9e:d1:3c:66:2b:4d:90:de:f8:3c:b7:4b:de:
         70:1d:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:38 2024 by rpki-client on console-ams.rpki-client.org