Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3133322e3235352e3138382e302f32322d3234203d3e20323638353436.roa
File:                     3133322e3235352e3138382e302f32322d3234203d3e20323638353436.roa (raw, json)
Hash identifier:          tc7SG2citk7CkG+phOn+SUwER8HEwhecnb+nHRZ7ODE=
Subject key identifier:   C5:16:2F:C6:C0:05:A9:2A:D6:E9:79:26:F0:7D:2F:A1:BE:D0:A5:8A
Certificate issuer:       /CN=37CA3286264D504D79210CC12A74E15D2E230251
Certificate serial:       24C02C826DC90CACDA1A3920DD05CC9ED2B04D8A
Authority key identifier: 37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3133322e3235352e3138382e302f32322d3234203d3e20323638353436.roa
Signing time:             Mon 12 Aug 2024 13:16:55 +0000
ROA not before:           Mon 12 Aug 2024 13:11:55 +0000
ROA not after:            Mon 11 Aug 2025 13:16:55 +0000
asID:                     268546
IP address blocks:        132.255.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl
                          rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c0:2c:82:6d:c9:0c:ac:da:1a:39:20:dd:05:cc:9e:d2:b0:4d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37CA3286264D504D79210CC12A74E15D2E230251
        Validity
            Not Before: Aug 12 13:11:55 2024 GMT
            Not After : Aug 11 13:16:55 2025 GMT
        Subject: CN=C5162FC6C005A92AD6E97926F07D2FA1BED0A58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:a4:14:f7:2d:c0:1b:68:95:49:6f:ff:18:
                    3f:e5:55:90:4b:e7:86:af:38:8f:06:37:8c:6a:51:
                    b0:f1:c2:73:84:bf:0f:5d:86:b7:64:eb:c7:cd:f5:
                    e2:7a:c3:e0:94:8c:8d:ef:18:09:0b:e1:8c:bc:60:
                    18:b4:2b:7b:4d:ab:a7:a0:c6:36:53:6a:f9:a8:2c:
                    2e:28:02:c4:bc:05:dc:5e:82:17:8f:47:e3:37:ab:
                    fb:22:31:2a:bf:da:94:cd:19:22:98:b3:9b:e6:35:
                    41:31:58:23:46:3c:f8:8f:2b:da:ad:ec:c5:ab:fa:
                    9f:b1:df:1c:9a:63:bc:3e:ad:c5:9d:41:30:67:19:
                    c8:2d:05:bf:ba:54:35:03:a3:00:21:70:b2:a0:a8:
                    e5:33:b9:71:d5:29:9b:63:ef:cc:f2:c5:92:97:e1:
                    97:7b:3a:00:d4:65:19:5f:f3:66:ed:44:57:e1:55:
                    bb:31:e4:d6:bf:4a:1b:36:3d:72:f9:f1:ab:73:cc:
                    18:5e:d1:57:c4:9e:f1:0b:c2:a5:bf:c6:0d:7f:ac:
                    15:f8:c0:07:e5:83:31:63:55:ee:3b:c8:c5:48:8a:
                    7a:60:5f:08:c7:de:f6:d6:a0:d5:65:f2:21:b6:0e:
                    ef:17:ac:de:e8:36:18:66:df:1b:5d:4d:61:b8:b6:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:16:2F:C6:C0:05:A9:2A:D6:E9:79:26:F0:7D:2F:A1:BE:D0:A5:8A
            X509v3 Authority Key Identifier:
                keyid:37:CA:32:86:26:4D:50:4D:79:21:0C:C1:2A:74:E1:5D:2E:23:02:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/37CA3286264D504D79210CC12A74E15D2E230251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37CA3286264D504D79210CC12A74E15D2E230251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BHkGVdB2hRozdqhJFffGnNdicB8hnpt6JrRoXmcgHg53/0/3133322e3235352e3138382e302f32322d3234203d3e20323638353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:da:06:bd:1a:c5:a8:d4:cf:81:6f:b4:28:40:66:86:36:f7:
         8c:a0:12:1f:aa:59:fc:9b:43:fe:fe:7f:65:4e:3c:20:32:c5:
         82:25:f6:13:2a:02:e2:66:93:e6:ea:65:d4:2a:44:7d:9e:e8:
         4c:d5:24:24:09:3e:84:e0:55:12:a4:42:fc:bd:72:71:41:7a:
         6b:f1:71:68:8f:80:70:9e:d9:1e:0a:f8:9b:39:ac:c4:db:eb:
         cb:7f:93:21:18:13:b3:c7:05:6c:92:ec:49:73:2f:66:34:b0:
         39:92:b3:91:93:b2:e0:e1:e5:23:7e:14:7d:bc:07:cd:38:ec:
         8a:5e:3a:2d:bc:13:78:82:1e:90:2b:6a:52:34:52:b3:20:d0:
         da:b1:c1:77:db:1c:83:3e:ed:cb:85:bd:2c:df:b0:bb:a2:b6:
         f5:0b:62:c3:9a:0e:d9:fd:34:e1:8e:f1:96:3d:1c:c3:4f:ed:
         57:21:25:12:9f:54:25:7d:3b:b4:84:82:94:3d:33:22:bc:62:
         f3:a2:da:e3:07:b6:6d:73:29:7c:42:f6:a2:b7:8e:69:cc:5e:
         bc:d6:1d:f6:ba:c2:be:79:f2:f2:9b:da:c8:27:79:1a:1a:e0:
         5a:77:58:93:ba:57:83:5f:34:da:b1:eb:13:52:03:8a:1d:b5:
         5d:df:40:f7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJMAsgm3JDKzaGjkg3QXMntKwTYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdDQTMyODYyNjRENTA0RDc5MjEwQ0MxMkE3NEUxNUQy
RTIzMDI1MTAeFw0yNDA4MTIxMzExNTVaFw0yNTA4MTExMzE2NTVaMDMxMTAvBgNV
BAMTKEM1MTYyRkM2QzAwNUE5MkFENkU5NzkyNkYwN0QyRkExQkVEMEE1OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0KQU9y3AG2iVSW//GD/lVZBL
54avOI8GN4xqUbDxwnOEvw9dhrdk68fN9eJ6w+CUjI3vGAkL4Yy8YBi0K3tNq6eg
xjZTavmoLC4oAsS8BdxeghePR+M3q/siMSq/2pTNGSKYs5vmNUExWCNGPPiPK9qt
7MWr+p+x3xyaY7w+rcWdQTBnGcgtBb+6VDUDowAhcLKgqOUzuXHVKZtj78zyxZKX
4Zd7OgDUZRlf82btRFfhVbsx5Na/Shs2PXL58atzzBhe0VfEnvELwqW/xg1/rBX4
wAflgzFjVe47yMVIinpgXwjH3vbWoNVl8iG2Du8XrN7oNhhm3xtdTWG4toGVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxRYvxsAFqSrW6Xkm8H0vob7QpYowHwYDVR0j
BBgwFoAUN8oyhiZNUE15IQzBKnThXS4jAlEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkhrR1ZkQjJoUm96ZHFoSkZmZkduTmRpY0I4aG5wdDZKclJvWG1jZ0hn
NTMvMC8zN0NBMzI4NjI2NEQ1MDRENzkyMTBDQzEyQTc0RTE1RDJFMjMwMjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3Q0EzMjg2MjY0RDUwNEQ3
OTIxMENDMTJBNzRFMTVEMkUyMzAyNTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JIa0dWZEIyaFJvemRxaEpGZmZHbk5kaWNCOGhucHQ2SnJSb1htY2dIZzUzLzAv
MzEzMzMyMmUzMjM1MzUyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzODM1MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoT/vDANBgkqhkiG9w0BAQsFAAOCAQEAQtoG
vRrFqNTPgW+0KEBmhjb3jKASH6pZ/JtD/v5/ZU48IDLFgiX2EyoC4maT5upl1CpE
fZ7oTNUkJAk+hOBVEqRC/L1ycUF6a/FxaI+AcJ7ZHgr4mzmsxNvry3+TIRgTs8cF
bJLsSXMvZjSwOZKzkZOy4OHlI34UfbwHzTjsil46LbwTeIIekCtqUjRSsyDQ2rHB
d9scgz7ty4W9LN+wu6K29Qtiw5oO2f004Y7xlj0cw0/tVyElEp9UJX07tISClD0z
Irxi86La4we2bXMpfEL2oreOacxevNYd9rrCvnny8pvayCd5GhrgWndYk7pXg180
2rHrE1IDih21Xd9A9w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:38 2024 by rpki-client on console-ams.rpki-client.org