Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/3133322e3235352e3139362e302f32322d3234203d3e20323634353133.roa
File:                     3133322e3235352e3139362e302f32322d3234203d3e20323634353133.roa (raw, json)
Hash identifier:          KuCo3dKA7P7C/6TCpUz89ocaX7GM3fSCyITQYM5zdXw=
Subject key identifier:   F4:FD:6E:2B:7B:CB:68:2C:65:A8:AE:A1:82:06:B8:AB:4D:06:00:1A
Certificate issuer:       /CN=B63B26C9AEBF6A09AB233C518334CF88C6AFE55B
Certificate serial:       7DCEEEC9B05E0CD1A172CC9AD05E4D58BD11EA44
Authority key identifier: B6:3B:26:C9:AE:BF:6A:09:AB:23:3C:51:83:34:CF:88:C6:AF:E5:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/3133322e3235352e3139362e302f32322d3234203d3e20323634353133.roa
Signing time:             Thu 04 Apr 2024 16:15:12 +0000
ROA not before:           Thu 04 Apr 2024 16:10:12 +0000
ROA not after:            Thu 03 Apr 2025 16:15:12 +0000
asID:                     264513
IP address blocks:        132.255.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.crl
                          rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ce:ee:c9:b0:5e:0c:d1:a1:72:cc:9a:d0:5e:4d:58:bd:11:ea:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B63B26C9AEBF6A09AB233C518334CF88C6AFE55B
        Validity
            Not Before: Apr  4 16:10:12 2024 GMT
            Not After : Apr  3 16:15:12 2025 GMT
        Subject: CN=F4FD6E2B7BCB682C65A8AEA18206B8AB4D06001A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:39:e3:6b:e8:24:c6:19:9a:88:86:d8:63:
                    e6:c1:bd:7d:4c:7c:70:c0:fe:90:ab:93:77:3c:cc:
                    f8:29:05:b0:36:f7:da:bc:c6:b6:57:60:17:f1:e0:
                    cd:be:c6:c8:ae:52:a2:56:78:07:20:4a:22:d0:e2:
                    42:e6:29:0c:9a:c6:41:0f:f3:fe:2a:d6:90:b7:72:
                    f8:c8:d3:61:65:6c:aa:e0:e5:cd:17:2c:a4:f5:82:
                    34:0b:7e:3a:c3:e3:16:34:28:f4:7c:ea:21:f6:82:
                    bb:78:56:1d:3b:a0:07:1f:33:b4:51:5f:11:bf:8d:
                    b4:91:ba:00:71:51:d8:f0:31:c1:fc:52:bb:d2:9a:
                    24:a6:8d:c2:3b:c5:9e:1f:79:96:a4:6d:0e:fa:7a:
                    b9:61:c9:df:fa:c3:89:8b:a9:81:c9:d5:6b:f9:05:
                    f4:2e:c6:91:8b:8a:a6:b0:16:aa:cd:80:7c:98:5b:
                    a7:e6:6a:3c:59:23:9a:20:0f:f2:31:a4:df:c7:4a:
                    cd:3e:ea:0f:9c:bf:5e:34:33:dd:5a:09:87:fb:c5:
                    f5:4b:47:fa:f9:b1:ee:d5:de:a9:3b:0e:44:94:88:
                    95:71:25:30:73:b1:ab:ba:d8:2e:a2:a2:8e:23:cd:
                    d3:8c:f2:c1:bb:d5:5d:cd:d8:4a:e5:3a:44:2e:7e:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FD:6E:2B:7B:CB:68:2C:65:A8:AE:A1:82:06:B8:AB:4D:06:00:1A
            X509v3 Authority Key Identifier:
                keyid:B6:3B:26:C9:AE:BF:6A:09:AB:23:3C:51:83:34:CF:88:C6:AF:E5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B63B26C9AEBF6A09AB233C518334CF88C6AFE55B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/1/3133322e3235352e3139362e302f32322d3234203d3e20323634353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:42:a2:d6:20:56:a7:37:7f:87:e4:01:21:23:ad:46:2d:e6:
         a5:7d:92:69:77:98:72:1e:27:b2:1c:f6:9b:ff:e1:ee:79:36:
         08:a1:59:1e:bb:54:c4:91:87:97:4a:9b:5c:d9:5d:62:32:6d:
         35:bb:9b:e8:cf:a0:e2:57:11:43:a3:30:91:b3:ce:96:9a:cf:
         dc:83:c8:94:31:20:d1:65:82:af:e8:79:3c:7d:70:38:c5:1c:
         32:3c:a2:07:be:6c:c1:7c:8c:4b:72:88:1c:a3:50:05:46:f5:
         92:11:c5:73:06:da:13:16:f7:30:cd:13:46:1f:7d:41:9d:42:
         56:4d:ca:d8:09:ff:4c:80:67:5a:ab:19:51:e0:b3:48:de:de:
         c4:89:84:66:bd:f8:22:3a:25:3a:fe:b7:a6:32:f2:bc:8d:28:
         45:67:eb:ff:58:e2:5d:a2:eb:1a:0c:5d:c4:0c:5e:42:dc:66:
         77:04:c4:cc:5f:f7:a6:07:3d:10:81:0a:bc:d9:08:ef:6e:c0:
         8a:06:10:0b:2c:9f:16:f9:97:d4:86:1a:4c:7d:8f:37:96:d7:
         56:a6:1d:0f:e0:92:fb:73:28:25:f0:35:7d:2f:ce:c4:57:35:
         10:b4:3f:05:7f:ec:ad:79:04:01:9b:01:35:05:66:04:ee:b0:
         3e:d2:03:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:10 2024 by rpki-client on console-fra.rpki-client.org