Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130362e302f32342d3234203d3e20323633333535.roa
File:                     3133322e3235352e3130362e302f32342d3234203d3e20323633333535.roa (raw, json)
Hash identifier:          eOy27mVR3hhmdWCQwgBfbYqnvVSeErqWHMxo72SHorg=
Subject key identifier:   4C:0D:13:59:40:2B:E5:D3:37:C2:69:FA:D0:C0:06:E8:2F:08:63:B3
Certificate issuer:       /CN=2A6676986C812A17B00635484B147B51B75ADD4B
Certificate serial:       464F33F97B66EFAFBDDC5F8DD10FD0AA01253EAA
Authority key identifier: 2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130362e302f32342d3234203d3e20323633333535.roa
Signing time:             Tue 22 Oct 2024 17:52:12 +0000
ROA not before:           Tue 22 Oct 2024 17:47:12 +0000
ROA not after:            Tue 21 Oct 2025 17:52:12 +0000
asID:                     263355
IP address blocks:        132.255.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl
                          rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4f:33:f9:7b:66:ef:af:bd:dc:5f:8d:d1:0f:d0:aa:01:25:3e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6676986C812A17B00635484B147B51B75ADD4B
        Validity
            Not Before: Oct 22 17:47:12 2024 GMT
            Not After : Oct 21 17:52:12 2025 GMT
        Subject: CN=4C0D1359402BE5D337C269FAD0C006E82F0863B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:91:da:cf:24:70:5a:eb:63:3f:26:ba:2e:33:
                    f2:56:cf:12:04:11:f7:1d:7e:4c:37:6c:6e:76:87:
                    49:d3:37:05:36:f6:f6:d3:37:6f:b6:d4:79:73:48:
                    bb:fe:60:c3:fc:57:94:e1:2a:e3:05:e6:3c:50:69:
                    b2:c1:6b:bc:e6:da:38:3f:73:5e:06:e1:48:ab:36:
                    f7:74:19:33:cc:07:af:c4:5a:f6:89:10:75:f0:f8:
                    33:a5:cd:7e:6f:09:5a:43:7e:a0:94:52:cb:2d:65:
                    a6:6d:74:52:5a:61:ce:9a:3e:f8:f7:33:23:bb:50:
                    38:20:28:85:eb:57:00:36:b5:fc:b0:59:64:f7:5f:
                    68:0a:19:a8:4c:8f:fd:38:f3:4a:07:ba:7c:27:b5:
                    48:74:3c:dc:29:ec:b0:ac:e0:b2:8f:7d:28:e7:f0:
                    a3:80:e8:f2:d5:34:ca:a4:e3:7b:9a:b7:9a:a4:bb:
                    86:42:4f:b5:a4:0f:ea:08:91:47:44:c9:9a:50:b1:
                    01:c7:a8:02:37:da:0a:7b:b1:8d:5e:45:fd:6e:8b:
                    d1:fa:62:85:c5:a9:89:42:5e:f5:67:5c:ed:98:30:
                    50:28:24:da:58:87:e9:17:49:38:75:c6:03:12:eb:
                    9c:14:b7:a5:87:88:fe:5f:b8:dd:6b:68:b5:c3:00:
                    ba:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0D:13:59:40:2B:E5:D3:37:C2:69:FA:D0:C0:06:E8:2F:08:63:B3
            X509v3 Authority Key Identifier:
                keyid:2A:66:76:98:6C:81:2A:17:B0:06:35:48:4B:14:7B:51:B7:5A:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/2A6676986C812A17B00635484B147B51B75ADD4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A6676986C812A17B00635484B147B51B75ADD4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DfB8DWutwgPismr2ct2NLRYSqxsoAHBrKAZeLRhhmSw/0/3133322e3235352e3130362e302f32342d3234203d3e20323633333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:4f:04:73:cb:dc:a4:cc:85:90:62:9b:67:aa:6c:0a:fd:6f:
         22:de:86:4e:17:b2:1c:d1:5c:1f:18:b8:ff:46:89:a0:72:b4:
         2e:0c:e8:e7:bb:45:da:79:f0:7b:27:bb:24:ff:4d:45:99:9d:
         2c:0f:e9:e5:80:96:83:82:99:35:92:df:e8:9e:2d:26:c8:65:
         cb:cc:8f:82:ca:c3:bb:64:f0:7c:13:67:2e:21:5d:f1:d6:ac:
         02:98:68:bb:81:75:2c:a0:c4:74:43:53:1f:19:34:79:da:80:
         5e:1c:65:3f:f6:da:b1:2b:ba:76:2d:35:60:83:ae:58:28:93:
         d6:60:d9:34:35:c7:06:a3:9a:21:4e:c8:57:e3:cd:e3:f7:86:
         14:51:a5:c7:3b:62:0f:fa:d3:6b:af:2d:94:bc:8f:70:59:a6:
         fe:49:0a:86:02:a7:b2:13:da:4d:d5:88:f2:65:9d:72:21:20:
         1b:eb:76:4f:d7:b0:d7:aa:56:61:2c:2d:db:fd:72:b9:f6:c8:
         4a:25:1a:d4:e0:0f:93:44:31:fe:6d:f8:36:16:09:43:1e:81:
         b7:fd:2d:c8:c3:1c:21:68:a5:c0:b0:26:9c:f2:6b:0b:f9:41:
         d8:34:d4:89:27:89:a9:00:c1:e3:96:74:7c:b7:14:d1:93:32:
         de:f9:d1:da
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURk8z+Xtm76+93F+N0Q/QqgElPqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2Njc2OTg2QzgxMkExN0IwMDYzNTQ4NEIxNDdCNTFC
NzVBREQ0QjAeFw0yNDEwMjIxNzQ3MTJaFw0yNTEwMjExNzUyMTJaMDMxMTAvBgNV
BAMTKDRDMEQxMzU5NDAyQkU1RDMzN0MyNjlGQUQwQzAwNkU4MkYwODYzQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkdrPJHBa62M/JrouM/JWzxIE
Efcdfkw3bG52h0nTNwU29vbTN2+21HlzSLv+YMP8V5ThKuMF5jxQabLBa7zm2jg/
c14G4UirNvd0GTPMB6/EWvaJEHXw+DOlzX5vCVpDfqCUUsstZaZtdFJaYc6aPvj3
MyO7UDggKIXrVwA2tfywWWT3X2gKGahMj/0480oHunwntUh0PNwp7LCs4LKPfSjn
8KOA6PLVNMqk43uat5qku4ZCT7WkD+oIkUdEyZpQsQHHqAI32gp7sY1eRf1ui9H6
YoXFqYlCXvVnXO2YMFAoJNpYh+kXSTh1xgMS65wUt6WHiP5fuN1raLXDALodAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTA0TWUAr5dM3wmn60MAG6C8IY7MwHwYDVR0j
BBgwFoAUKmZ2mGyBKhewBjVISxR7Ubda3UswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOERmQjhEV3V0d2dQaXNtcjJjdDJOTFJZU3F4c29BSEJyS0FaZUxSaGht
U3cvMC8yQTY2NzY5ODZDODEyQTE3QjAwNjM1NDg0QjE0N0I1MUI3NUFERDRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjY3Njk4NkM4MTJBMTdC
MDA2MzU0ODRCMTQ3QjUxQjc1QURENEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhEZkI4RFd1dHdnUGlzbXIyY3QyTkxSWVNxeHNvQUhCcktBWmVMUmhobVN3LzAv
MzEzMzMyMmUzMjM1MzUyZTMxMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMzMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIT/ajANBgkqhkiG9w0BAQsFAAOCAQEAlU8E
c8vcpMyFkGKbZ6psCv1vIt6GTheyHNFcHxi4/0aJoHK0Lgzo57tF2nnweye7JP9N
RZmdLA/p5YCWg4KZNZLf6J4tJshly8yPgsrDu2TwfBNnLiFd8dasAphou4F1LKDE
dENTHxk0edqAXhxlP/basSu6di01YIOuWCiT1mDZNDXHBqOaIU7IV+PN4/eGFFGl
xztiD/rTa68tlLyPcFmm/kkKhgKnshPaTdWI8mWdciEgG+t2T9ew16pWYSwt2/1y
ufbISiUa1OAPk0Qx/m34NhYJQx6Bt/0tyMMcIWilwLAmnPJrC/lB2DTUiSeJqQDB
45Z0fLcU0ZMy3vnR2g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:33 2024 by rpki-client on console-ams.rpki-client.org