Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34322e302f32332d3233203d3e20323636363531.roa
File:                     3132382e3230312e34322e302f32332d3233203d3e20323636363531.roa (raw, json)
Hash identifier:          e6eqqWm+mhiCzHtVmd243mkL8MSvwQp9Fu6TvYnJfKg=
Subject key identifier:   36:79:3E:82:CA:A5:9D:74:8F:13:1E:6B:AC:D8:B6:DD:63:D7:CB:F4
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       252490EDD79EC40047A07EAC8B10994B5A622DEC
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34322e302f32332d3233203d3e20323636363531.roa
Signing time:             Thu 25 Jul 2024 17:48:25 +0000
ROA not before:           Thu 25 Jul 2024 17:43:25 +0000
ROA not after:            Thu 24 Jul 2025 17:48:25 +0000
asID:                     266651
IP address blocks:        128.201.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:24:90:ed:d7:9e:c4:00:47:a0:7e:ac:8b:10:99:4b:5a:62:2d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jul 25 17:43:25 2024 GMT
            Not After : Jul 24 17:48:25 2025 GMT
        Subject: CN=36793E82CAA59D748F131E6BACD8B6DD63D7CBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:a6:f3:63:1f:95:32:09:d0:d6:b3:4c:56:
                    52:f1:ab:ba:b0:f9:a2:43:0f:d0:2c:99:6e:b7:86:
                    a2:5b:17:0f:7a:d8:83:fa:96:7c:09:61:d0:68:34:
                    39:b3:72:78:89:e5:a7:29:c0:ac:8e:19:5c:f3:d8:
                    5d:18:37:4d:f7:bb:a8:bf:9e:7a:e8:40:67:cd:dd:
                    29:02:46:e5:bb:f4:41:7d:b6:14:37:90:7b:49:77:
                    46:46:b0:6c:b3:bc:14:cb:11:7d:c4:cb:99:bd:58:
                    de:74:95:a4:7b:1a:c0:b2:59:1d:78:a1:c5:d7:bb:
                    ff:d0:ae:b2:04:bd:22:a1:17:64:72:66:24:97:b5:
                    48:4e:97:97:d9:fc:74:c8:e7:6f:12:b5:78:16:ad:
                    10:a5:b2:63:dc:32:97:0e:30:89:bf:52:22:a5:f0:
                    3e:6f:e8:f2:af:66:ed:68:c0:0c:bd:7c:dd:d9:ad:
                    85:ff:50:dc:df:b1:45:64:f8:32:13:09:7f:13:bc:
                    19:60:0c:46:51:d2:43:dd:8a:f2:b1:1a:8c:a7:20:
                    93:c9:e7:f6:bd:7c:06:bc:79:f0:c3:e9:6b:66:4f:
                    68:be:fd:fc:18:24:fe:ed:c0:f3:73:3e:65:2b:0f:
                    6e:c3:dd:7c:52:14:37:82:a4:5a:44:9d:cf:c5:be:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:79:3E:82:CA:A5:9D:74:8F:13:1E:6B:AC:D8:B6:DD:63:D7:CB:F4
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34322e302f32332d3233203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:25:80:78:dd:96:1c:ad:34:2f:d3:b8:45:6b:1b:10:ed:60:
         c8:43:d8:dc:df:ca:ef:9a:9a:e7:6c:14:c1:2b:bf:49:48:57:
         94:a2:96:14:47:f0:7c:aa:5f:3b:2b:57:13:ed:d7:3e:1e:64:
         e8:ab:74:8b:58:f9:7c:21:44:df:27:b3:32:f2:bc:bc:e6:46:
         06:fe:6c:6b:73:79:41:97:da:63:df:2a:18:e8:94:da:c8:77:
         fb:25:51:db:27:65:16:6c:c0:99:55:03:bb:46:6d:71:f0:c4:
         dc:31:c2:5d:0a:65:64:e6:93:e5:da:d3:74:e1:ed:f9:8a:ce:
         cf:75:12:84:08:0e:98:96:31:de:32:46:b6:65:e2:2c:fe:ec:
         8e:d4:fc:8a:15:d5:f8:1a:e2:9b:47:61:bb:59:fe:ae:c2:1c:
         90:2b:f7:c4:2c:ee:89:47:8d:88:d3:c8:20:82:00:33:ac:87:
         2a:3b:f6:53:b8:cb:dc:d4:2f:53:3b:71:ac:5f:05:4d:4a:1c:
         3e:99:92:82:48:e1:75:73:5b:7d:c7:a3:b6:b9:1a:67:d0:15:
         92:27:26:91:04:dd:1b:6e:38:ce:2e:64:1b:45:05:6b:88:08:
         8a:99:58:c4:2c:73:c4:43:64:c7:28:6e:e3:ee:48:a6:f4:41:
         d3:07:00:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org