Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130342e302f32322d3232203d3e20323633333535.roa
File:                     3133322e3235352e3130342e302f32322d3232203d3e20323633333535.roa (raw, json)
Hash identifier:          RMe4as9gA3zOlZjwDvjwwWXCQ8iXDbVRXjhJqGV4w7Y=
Subject key identifier:   35:A3:13:F9:BE:48:07:62:B5:A1:2A:FD:79:CE:4A:4E:4A:2A:77:C0
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       79606990D234C79B56F6E697E43C7412EB5800F3
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130342e302f32322d3232203d3e20323633333535.roa
Signing time:             Tue 22 Oct 2024 17:52:12 +0000
ROA not before:           Tue 22 Oct 2024 17:47:12 +0000
ROA not after:            Tue 21 Oct 2025 17:52:12 +0000
asID:                     263355
IP address blocks:        132.255.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:60:69:90:d2:34:c7:9b:56:f6:e6:97:e4:3c:74:12:eb:58:00:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Oct 22 17:47:12 2024 GMT
            Not After : Oct 21 17:52:12 2025 GMT
        Subject: CN=35A313F9BE480762B5A12AFD79CE4A4E4A2A77C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5b:d7:4a:c2:e8:a9:9a:a2:a4:97:91:d9:7c:
                    bc:53:02:0c:3b:e6:03:04:79:aa:44:c1:ac:8d:db:
                    b5:2a:81:cb:bd:3f:2b:60:df:f3:e2:90:99:6a:2d:
                    b9:67:5b:aa:01:90:07:34:42:a7:f2:8f:5f:9f:37:
                    3e:4e:d6:0d:a7:59:ef:25:08:d3:68:bf:80:47:c4:
                    6b:07:9b:c4:ae:b8:94:0d:fe:fa:6b:2e:ec:0f:6e:
                    a8:c7:d9:24:a5:bc:b1:58:9d:df:e9:0a:29:2e:c8:
                    63:7f:cb:34:d2:ef:c1:a5:06:7c:82:11:b1:01:10:
                    e4:b3:ae:9e:3b:37:23:6d:6a:ea:42:b2:e4:06:87:
                    58:a4:80:5a:06:1b:2f:6f:29:a5:78:c9:f3:de:b3:
                    70:bb:70:60:ec:3c:71:b6:5f:03:3d:c3:d9:65:3c:
                    c7:6a:dc:60:0a:f4:5e:13:4e:dd:e2:b0:69:11:20:
                    ca:47:c1:da:0e:cc:46:b8:b3:b8:c0:87:76:67:07:
                    c8:53:a3:01:56:ae:67:e1:c2:49:b1:03:00:e5:c8:
                    07:b4:e9:2e:cb:16:31:fd:e2:f8:3b:65:ff:69:27:
                    72:c6:2d:88:66:9b:8f:1f:19:4a:d5:3b:9f:e0:8e:
                    95:cc:9f:c6:41:42:e9:df:2c:99:6f:8b:43:a9:80:
                    6e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A3:13:F9:BE:48:07:62:B5:A1:2A:FD:79:CE:4A:4E:4A:2A:77:C0
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130342e302f32322d3232203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:cf:92:07:b8:68:5c:3d:d1:a4:21:dc:82:99:51:37:cc:7e:
         b7:b9:bc:dc:df:34:c7:8b:11:ba:7f:0f:55:dc:da:9b:0d:51:
         39:b1:f3:84:da:57:db:cd:a6:14:ac:75:8a:e4:96:99:d2:f0:
         cd:9f:80:82:97:27:4e:98:60:5b:bb:17:8f:28:08:60:5a:da:
         c9:86:31:b5:f7:cd:ab:f0:1f:ad:d0:3e:74:99:99:95:be:c6:
         41:70:55:80:c6:de:51:c8:fd:d6:8e:00:7d:47:e7:21:9f:8e:
         c0:52:dd:24:2b:46:17:d8:66:17:10:7a:c8:77:25:4f:73:51:
         15:a9:f2:d4:4f:ec:c2:b0:aa:20:8b:55:af:a1:07:81:0e:a0:
         a5:08:fb:2f:03:f8:27:f0:50:35:07:ab:df:db:cb:e1:03:6c:
         36:62:86:4d:aa:41:7c:9b:f4:52:2d:15:18:97:b1:a7:83:8c:
         f5:47:b6:0f:ac:7a:2a:30:87:64:5c:0a:a1:89:9d:ec:0a:a7:
         0f:ce:97:e7:48:1a:f1:2d:14:55:ca:07:94:ae:fc:3f:93:b8:
         4f:8e:12:f5:42:25:21:b3:68:d6:f2:87:ef:3f:d4:35:82:52:
         ea:f5:ab:74:d5:96:bb:03:42:a2:89:60:c5:e4:81:25:98:66:
         1f:dd:b9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:49 2024 by rpki-client on console-fra.rpki-client.org