Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32342d3234203d3e20323636363531.roa
File:                     3132382e3230312e34302e302f32342d3234203d3e20323636363531.roa (raw, json)
Hash identifier:          asKqUucPTB4qQvS7dE7M5v9E0eCXf6MeukCjiY5x0Wc=
Subject key identifier:   63:BC:4B:FE:D9:07:CD:53:BB:28:E6:8B:54:35:4D:3F:DA:0E:29:40
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       2B6629DDCA4641AA5601CFFA8D0FCC34810FAB07
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32342d3234203d3e20323636363531.roa
Signing time:             Thu 25 Jul 2024 17:48:26 +0000
ROA not before:           Thu 25 Jul 2024 17:43:26 +0000
ROA not after:            Thu 24 Jul 2025 17:48:26 +0000
asID:                     266651
IP address blocks:        128.201.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:66:29:dd:ca:46:41:aa:56:01:cf:fa:8d:0f:cc:34:81:0f:ab:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jul 25 17:43:26 2024 GMT
            Not After : Jul 24 17:48:26 2025 GMT
        Subject: CN=63BC4BFED907CD53BB28E68B54354D3FDA0E2940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:49:ac:10:59:25:f6:93:90:ef:12:7b:0e:28:
                    3a:15:94:df:99:0a:3b:06:ae:05:7e:2f:79:ab:9b:
                    f1:48:67:e1:7c:2b:23:d8:40:32:c4:74:ef:d4:17:
                    2a:bd:ba:f8:08:40:c0:85:53:e9:96:64:c9:81:97:
                    ba:e0:3d:59:60:8b:59:09:6b:55:37:bd:1f:ac:b6:
                    64:9a:2a:96:fd:b0:22:04:7e:e7:b8:70:31:16:9f:
                    a1:9f:8d:18:81:ff:84:8a:57:e4:0d:09:ba:2c:6b:
                    29:e0:9f:89:bb:8f:cc:1b:9e:ea:29:86:ef:2a:a5:
                    30:12:cf:2e:af:10:c7:b1:7b:09:b9:12:29:7e:3b:
                    1a:03:14:c6:26:67:4c:a8:d6:41:88:8f:3d:73:5b:
                    f1:62:c6:99:8a:ce:d2:dd:0b:33:e4:d0:0c:9a:0d:
                    03:79:05:fd:f9:3b:54:65:04:77:96:5b:94:32:4e:
                    47:7c:d2:f5:94:06:de:15:a9:84:7c:f3:05:9e:3b:
                    ee:87:20:9d:14:4e:4e:26:a3:d9:ae:36:c4:b7:1f:
                    0f:95:94:09:f0:00:db:f4:e5:21:1f:e4:d6:f8:87:
                    e1:aa:bc:c6:84:c3:c6:84:9d:1f:bd:9c:d5:b5:08:
                    9b:a1:71:9b:2c:92:ed:06:3c:87:7e:7b:ec:d9:d0:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BC:4B:FE:D9:07:CD:53:BB:28:E6:8B:54:35:4D:3F:DA:0E:29:40
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34302e302f32342d3234203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:6d:94:f9:16:6b:51:ff:99:60:2b:fe:18:e7:5d:f5:1b:d7:
         b6:8c:e0:4e:da:0d:a9:76:de:7f:80:b4:69:76:da:7f:fa:fa:
         3c:77:68:e4:d6:92:24:87:5e:68:ad:ef:57:33:d1:44:17:ca:
         48:59:ae:ec:9d:0b:8e:ae:09:d3:18:82:b3:02:dc:10:b5:f7:
         fe:47:48:ef:be:c6:f7:3b:8e:ed:5e:ae:39:4a:e1:fc:62:e5:
         12:d4:f3:cb:b7:dd:da:11:96:cc:27:45:82:95:e7:08:6f:c9:
         90:e7:24:6b:0c:c3:5a:bd:a7:3b:2d:73:a2:de:cb:e3:27:fc:
         84:04:33:59:98:4a:87:d5:7b:1a:a8:1e:04:ce:61:d5:c9:bf:
         d3:4d:02:14:3b:c0:ba:4d:90:c0:1f:aa:83:43:de:23:d3:f7:
         8e:c7:0d:80:fd:9d:1d:fa:bb:0c:e9:cc:38:c5:77:bb:3a:0a:
         c2:b9:9f:0d:13:60:7e:49:b1:aa:a8:f2:9c:fb:c9:b8:81:6d:
         4a:48:1c:87:c0:7c:22:0c:a3:58:20:57:a1:ed:57:59:25:14:
         7d:1f:31:a2:ef:3e:3f:6e:04:17:eb:07:c3:bf:fd:17:a0:b5:
         32:72:39:8c:6e:0f:0c:fd:22:39:ca:4e:b3:5a:f7:e8:57:54:
         80:1d:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org