Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/3133322e3235352e35362e302f32322d3234203d3e20323634343533.roa
File:                     3133322e3235352e35362e302f32322d3234203d3e20323634343533.roa (raw, json)
Hash identifier:          6/JCDAi5gsaXd8fGTxZsRTwC8tg4wa/SAmQMgqXREWU=
Subject key identifier:   88:10:62:74:F7:4D:AB:14:58:93:FF:1F:BC:9A:EF:EC:0D:C3:E6:16
Certificate issuer:       /CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
Certificate serial:       477467E465699AA088718A989541A8A13F4F168A
Authority key identifier: 0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/3133322e3235352e35362e302f32322d3234203d3e20323634343533.roa
Signing time:             Wed 05 Jun 2024 19:19:53 +0000
ROA not before:           Wed 05 Jun 2024 19:14:53 +0000
ROA not after:            Wed 04 Jun 2025 19:19:53 +0000
asID:                     264453
IP address blocks:        132.255.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl
                          rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:74:67:e4:65:69:9a:a0:88:71:8a:98:95:41:a8:a1:3f:4f:16:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184
        Validity
            Not Before: Jun  5 19:14:53 2024 GMT
            Not After : Jun  4 19:19:53 2025 GMT
        Subject: CN=88106274F74DAB145893FF1FBC9AEFEC0DC3E616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:00:d0:f0:14:3a:38:d5:3a:b2:e0:66:10:
                    6b:fa:f3:61:b4:8b:3a:4e:bb:48:9d:78:aa:62:07:
                    4e:8a:f2:76:1c:12:ea:70:88:e9:75:7f:98:b3:66:
                    4e:5e:95:a8:52:30:a7:3c:a7:bc:99:5c:3c:32:39:
                    a5:ec:f6:b8:b7:cb:7b:65:f8:9c:c0:64:ca:3a:c9:
                    32:31:8b:1e:25:06:75:bf:c8:88:8d:ed:cd:02:8f:
                    69:e4:34:a4:2e:e1:8a:c9:2c:03:a5:b5:2d:09:b5:
                    48:0b:d1:66:95:13:6a:11:c1:65:23:bd:c0:f0:e4:
                    57:99:d2:7d:b3:41:e5:e7:42:af:67:e1:1f:20:b1:
                    a1:ac:8d:5e:6e:b9:66:cc:c4:22:d0:f8:66:8b:e1:
                    c5:42:94:96:80:8b:f1:b1:2c:43:27:ba:61:96:0f:
                    1a:84:d1:25:94:50:b0:22:8d:8d:b8:47:be:cb:a2:
                    4b:5a:e6:83:cc:a7:fc:71:60:b9:62:f0:f0:2a:70:
                    4c:88:62:16:e5:25:35:78:8b:a9:86:bf:5f:9a:36:
                    9c:6c:fd:4b:cd:1a:6a:71:c2:91:71:d6:76:d1:d3:
                    e3:d3:46:e0:90:3f:6f:87:a6:8d:6b:28:e2:3e:c6:
                    32:3a:ba:63:1d:1a:89:c3:0a:d6:2b:04:2f:6e:2f:
                    f5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:10:62:74:F7:4D:AB:14:58:93:FF:1F:BC:9A:EF:EC:0D:C3:E6:16
            X509v3 Authority Key Identifier:
                keyid:0C:65:DE:B6:7B:30:70:5A:31:3E:F8:FA:D7:A0:D6:E2:BE:22:D1:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C65DEB67B30705A313EF8FAD7A0D6E2BE22D184.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kN3M1ueQ5wZ7mvNtxUMDpJJkfdkWZaLSavQKWFDc9CZ/0/3133322e3235352e35362e302f32322d3234203d3e20323634343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:22:17:d3:0d:64:ee:84:a2:13:19:1d:8f:c8:8b:45:85:a3:
         53:ef:29:b8:e2:d7:f3:fe:34:2c:7a:6b:f6:af:e1:61:a6:3b:
         b5:0d:7b:bb:da:30:12:ad:44:b2:a8:c3:e3:52:09:7a:cf:49:
         d1:4c:a9:7f:69:1b:97:49:75:2f:66:7c:32:c3:f1:da:5e:7b:
         ea:db:ae:fa:a5:32:a0:62:bd:d6:bb:01:fa:30:b4:24:c8:ea:
         f6:de:e0:e7:d5:87:d7:3c:45:e9:0b:6d:ce:78:e2:38:1a:2f:
         05:69:14:ca:af:9a:7b:96:67:d0:69:b2:b9:17:d9:2c:f2:14:
         7a:99:b0:15:9a:34:7b:0c:c3:cc:9e:6a:4d:58:a0:2d:cd:83:
         14:f1:ac:1d:de:cb:82:ef:4f:86:a4:41:af:d2:e8:5e:92:1e:
         c9:2a:5e:ca:04:9a:a2:90:73:47:11:fd:6a:39:b3:fa:8c:75:
         a9:5c:09:d1:be:e7:fd:f6:6c:ad:28:4a:74:c5:68:ae:e5:6c:
         32:42:77:34:ad:49:8b:ae:e3:5e:e1:4b:0b:f9:08:35:ee:ff:
         78:16:47:90:79:38:a2:53:02:3f:3b:ed:a6:0c:50:03:d1:27:
         30:7e:6b:ba:76:34:8e:f8:b2:8a:ef:b5:ca:30:c5:14:26:4f:
         5b:71:77:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:30:59 2024 by rpki-client on console-ams.rpki-client.org