Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32322d3232203d3e20323636363531.roa
File:                     3132382e3230312e34302e302f32322d3232203d3e20323636363531.roa (raw, json)
Hash identifier:          Jqw1vYo1oV+775mF5XhFkmyNa9WrUcY511DpQCaPWy8=
Subject key identifier:   D9:BE:BE:A1:28:7D:88:A4:5E:42:99:33:C3:7E:A8:C4:69:CD:F9:18
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       17D62AF705BE3CF87336A50D6EB26BC9C38DF2FC
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32322d3232203d3e20323636363531.roa
Signing time:             Thu 25 Jul 2024 17:48:25 +0000
ROA not before:           Thu 25 Jul 2024 17:43:25 +0000
ROA not after:            Thu 24 Jul 2025 17:48:25 +0000
asID:                     266651
IP address blocks:        128.201.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d6:2a:f7:05:be:3c:f8:73:36:a5:0d:6e:b2:6b:c9:c3:8d:f2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jul 25 17:43:25 2024 GMT
            Not After : Jul 24 17:48:25 2025 GMT
        Subject: CN=D9BEBEA1287D88A45E429933C37EA8C469CDF918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:c0:e5:79:17:1a:0f:a9:a5:a9:27:67:ea:
                    97:55:0c:1f:61:02:a2:bf:08:6e:3a:e7:4f:55:5e:
                    17:f3:09:35:7d:76:a6:28:10:4c:85:60:fd:26:ba:
                    34:8d:ae:de:28:10:5e:d8:1d:1a:15:f9:c8:69:51:
                    5d:e3:5c:90:b9:ac:bf:cf:70:97:ef:90:f7:45:64:
                    a3:3b:78:b0:1a:fe:85:28:e9:7a:fe:db:83:58:90:
                    20:12:76:a2:65:28:f7:cf:74:a4:01:c0:3f:21:7b:
                    5e:9d:e1:08:85:5a:d8:4e:bb:1d:6d:19:0b:53:ad:
                    97:31:f5:c4:9f:fa:20:71:99:64:ec:ad:dc:cd:70:
                    3e:3b:03:33:10:b3:9a:b1:0a:87:80:93:f9:57:93:
                    23:64:81:b1:81:37:33:a8:91:91:71:11:c5:42:ee:
                    0e:3c:be:ae:5c:60:08:58:5a:71:2e:59:b0:a6:7b:
                    5f:d2:e2:04:41:a1:e0:4d:06:08:8f:77:b3:e1:75:
                    0c:f8:c2:bf:d3:ed:bf:c3:31:a5:ee:1f:c8:f9:f0:
                    94:af:da:03:3e:53:19:6b:9c:06:63:e7:7d:3b:33:
                    c5:e6:87:3b:80:9b:63:0f:57:38:dd:fa:48:4e:89:
                    0e:ad:45:32:e3:2c:90:bf:a0:a0:8c:7e:a0:8f:3c:
                    7b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BE:BE:A1:28:7D:88:A4:5E:42:99:33:C3:7E:A8:C4:69:CD:F9:18
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32322d3232203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:97:ee:02:eb:ad:19:d8:d1:3e:b3:78:91:5b:a0:02:89:
         31:a5:91:49:c0:c9:8f:51:5a:f3:ad:02:3b:2e:1d:cb:bd:3f:
         c5:a5:36:d4:71:eb:db:f2:61:98:57:4b:c8:f6:99:01:5f:97:
         78:d4:8e:e6:29:f8:81:8d:f3:aa:b3:87:80:52:8c:89:04:b9:
         e7:2a:5d:45:5b:88:f6:50:5b:00:94:60:b5:c6:7a:6d:07:5b:
         b8:f4:d2:2d:c8:33:7c:25:5c:29:23:83:e1:ca:3e:a3:08:8a:
         a7:29:fe:39:3b:55:9f:0a:7d:20:ad:1d:b5:5f:06:db:fa:91:
         96:d8:80:34:e5:ce:b7:11:30:f7:f8:f7:05:97:b3:a7:0e:05:
         10:dc:0b:96:27:01:a2:d5:97:2c:08:11:53:9c:20:12:b8:bc:
         1a:43:df:2f:b0:32:7d:ad:2e:a7:50:f4:d5:79:bf:0b:03:f8:
         34:6c:62:3b:35:11:da:a3:06:60:81:10:7b:2e:f6:1c:90:ed:
         31:e0:5d:27:45:85:13:e8:31:a9:7b:8a:44:4a:71:86:f0:2a:
         08:22:de:07:cc:3a:b8:11:bb:fd:38:df:7f:6b:9f:5a:0b:77:
         c8:4b:7b:a0:f4:29:ff:ac:45:a8:8a:fe:63:94:74:9b:c3:6d:
         0c:7d:5f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:07 2024 by rpki-client on console-fra.rpki-client.org