Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130362e302f32332d3233203d3e20323633333535.roa
File:                     3133322e3235352e3130362e302f32332d3233203d3e20323633333535.roa (raw, json)
Hash identifier:          Kbq8D3XwveBTQVDnYhw2sQdvck26QoKsPGtqSDAqTUY=
Subject key identifier:   D5:AD:8E:58:7C:7A:EE:6F:DE:28:69:29:CB:6B:CC:EB:FD:75:58:62
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       10681BFA69561C7F4A238197520501BB0090FC47
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130362e302f32332d3233203d3e20323633333535.roa
Signing time:             Tue 22 Oct 2024 17:52:13 +0000
ROA not before:           Tue 22 Oct 2024 17:47:13 +0000
ROA not after:            Tue 21 Oct 2025 17:52:13 +0000
asID:                     263355
IP address blocks:        132.255.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:68:1b:fa:69:56:1c:7f:4a:23:81:97:52:05:01:bb:00:90:fc:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Oct 22 17:47:13 2024 GMT
            Not After : Oct 21 17:52:13 2025 GMT
        Subject: CN=D5AD8E587C7AEE6FDE286929CB6BCCEBFD755862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:1f:d0:56:5d:40:31:f2:7b:2b:c4:2b:47:
                    11:c2:e0:7d:9d:b5:e3:b1:4e:a3:26:32:ab:15:fe:
                    7b:e4:e6:c4:5c:30:ff:73:ee:91:d6:f0:c2:fc:87:
                    05:23:e1:e4:72:a9:14:56:38:22:c8:2e:82:49:a3:
                    92:f8:98:e5:55:40:b6:ba:66:6f:ea:9e:19:42:e7:
                    66:49:2b:60:a9:40:00:cb:58:bb:33:8a:c3:a7:1b:
                    4b:17:31:46:76:cd:4d:6e:7f:f5:06:40:b9:57:b3:
                    67:ff:1d:10:27:3b:17:df:c5:3e:b6:4b:22:d2:81:
                    19:36:09:75:c1:39:b7:6d:7e:e1:c4:03:4a:82:be:
                    89:bd:31:05:f4:b8:c5:8f:b0:ff:7f:98:7b:7d:c0:
                    96:7c:af:1f:a2:d7:d8:ab:da:2e:8b:6a:32:a7:0d:
                    99:c0:54:4b:3a:6b:8d:bf:36:9b:b8:ce:1f:76:c8:
                    83:f3:33:43:c0:2f:06:bb:3e:f4:b4:a0:da:9a:fe:
                    69:4b:3a:b5:da:41:fa:58:0d:49:c7:21:9b:20:7c:
                    0a:79:7b:ce:b1:3e:90:fe:91:22:0d:48:af:b1:a1:
                    0a:1a:fd:f4:9f:ab:ae:7d:5e:2e:d2:d5:d9:50:8e:
                    af:3c:4f:1b:05:a3:3d:6d:79:48:11:14:b1:12:2b:
                    33:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AD:8E:58:7C:7A:EE:6F:DE:28:69:29:CB:6B:CC:EB:FD:75:58:62
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130362e302f32332d3233203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:ff:9a:de:5a:3e:7c:24:92:70:3d:68:4b:60:08:ea:da:55:
         ee:81:f6:4e:b7:04:46:f4:c9:91:a7:31:d8:4e:95:a7:81:8e:
         e7:0a:b0:a6:56:62:6f:72:c3:bd:5a:a9:b0:2d:73:ba:3c:24:
         79:e8:d5:ca:45:38:70:b3:b1:f4:03:e4:69:61:af:8c:92:aa:
         ee:0e:49:51:f7:ca:78:82:83:13:f4:85:25:38:6f:67:66:d7:
         19:bf:22:28:66:fe:09:bd:23:8a:8d:a0:8c:0d:1c:3e:4b:7a:
         cc:1c:49:24:25:07:47:3f:d3:6e:d5:6b:e7:9b:2c:0d:53:13:
         5a:0a:72:9c:8d:3a:16:1c:b8:88:06:e1:5e:73:b1:f8:93:a0:
         fc:bd:b9:72:0f:94:a4:4b:97:51:42:57:34:0b:01:a1:d3:36:
         b2:41:d6:f5:5d:55:99:bd:76:33:15:c6:f5:07:fe:3d:f1:29:
         56:59:d1:8c:22:70:50:dd:20:bd:0f:96:13:eb:2b:3a:dc:67:
         4e:0f:be:44:73:1f:33:d2:02:75:48:62:ab:c9:15:33:dc:a9:
         c2:c9:91:b7:61:77:17:42:07:56:a4:31:d6:bb:19:ab:b0:61:
         d9:8c:8c:b8:84:30:db:9e:58:a3:d3:97:db:dd:81:64:a3:04:
         8b:b5:ef:e2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEGgb+mlWHH9KI4GXUgUBuwCQ/EcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2Njc2OTg2QzgxMkExN0IwMDYzNTQ4NEIxNDdCNTFC
NzVBREQ0QjAeFw0yNDEwMjIxNzQ3MTNaFw0yNTEwMjExNzUyMTNaMDMxMTAvBgNV
BAMTKEQ1QUQ4RTU4N0M3QUVFNkZERTI4NjkyOUNCNkJDQ0VCRkQ3NTU4NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShx/QVl1AMfJ7K8QrRxHC4H2d
teOxTqMmMqsV/nvk5sRcMP9z7pHW8ML8hwUj4eRyqRRWOCLILoJJo5L4mOVVQLa6
Zm/qnhlC52ZJK2CpQADLWLszisOnG0sXMUZ2zU1uf/UGQLlXs2f/HRAnOxffxT62
SyLSgRk2CXXBObdtfuHEA0qCvom9MQX0uMWPsP9/mHt9wJZ8rx+i19ir2i6LajKn
DZnAVEs6a42/Npu4zh92yIPzM0PALwa7PvS0oNqa/mlLOrXaQfpYDUnHIZsgfAp5
e86xPpD+kSINSK+xoQoa/fSfq659Xi7S1dlQjq88TxsFoz1teUgRFLESKzNxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1a2OWHx67m/eKGkpy2vM6/11WGIwHwYDVR0j
BBgwFoAUKmZ2mGyBKhewBjVISxR7Ubda3UswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOERmQjhEV3V0d2dQaXNtcjJjdDJOTFJZU3F4c29BSEJyS0FaZUxSaGht
U3cvMC8yQTY2NzY5ODZDODEyQTE3QjAwNjM1NDg0QjE0N0I1MUI3NUFERDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjY3Njk4NkM4MTJBMTdC
MDA2MzU0ODRCMTQ3QjUxQjc1QURENEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhEZkI4RFd1dHdnUGlzbXIyY3QyTkxSWVNxeHNvQUhCcktBWmVMUmhobVN3LzAv
MzEzMzMyMmUzMjM1MzUyZTMxMzAzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzMzMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYT/ajANBgkqhkiG9w0BAQsFAAOCAQEAaf+a
3lo+fCSScD1oS2AI6tpV7oH2TrcERvTJkacx2E6Vp4GO5wqwplZib3LDvVqpsC1z
ujwkeejVykU4cLOx9APkaWGvjJKq7g5JUffKeIKDE/SFJThvZ2bXGb8iKGb+Cb0j
io2gjA0cPkt6zBxJJCUHRz/TbtVr55ssDVMTWgpynI06Fhy4iAbhXnOx+JOg/L25
cg+UpEuXUUJXNAsBodM2skHW9V1Vmb12MxXG9Qf+PfEpVlnRjCJwUN0gvQ+WE+sr
OtxnTg++RHMfM9ICdUhiq8kVM9ypwsmRt2F3F0IHVqQx1rsZq7Bh2YyMuIQw255Y
o9OX292BZKMEi7Xv4g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:49 2024 by rpki-client on console-fra.rpki-client.org