Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34322e302f32342d3234203d3e20323636363531.roa
File:                     3132382e3230312e34322e302f32342d3234203d3e20323636363531.roa (raw, json)
Hash identifier:          4ZVFV8e3DqoNaaJ1H8iL7TWHatF4vQwszV02NR2nz/o=
Subject key identifier:   5A:88:2F:E7:C9:BA:73:2E:29:5F:FB:4F:FB:B3:FB:6E:41:9A:CB:A9
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       2F4155668404392873B89062E052620BE35DB0C0
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34322e302f32342d3234203d3e20323636363531.roa
Signing time:             Thu 25 Jul 2024 17:48:26 +0000
ROA not before:           Thu 25 Jul 2024 17:43:26 +0000
ROA not after:            Thu 24 Jul 2025 17:48:26 +0000
asID:                     266651
IP address blocks:        128.201.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:41:55:66:84:04:39:28:73:b8:90:62:e0:52:62:0b:e3:5d:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jul 25 17:43:26 2024 GMT
            Not After : Jul 24 17:48:26 2025 GMT
        Subject: CN=5A882FE7C9BA732E295FFB4FFBB3FB6E419ACBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:80:4b:39:bb:df:07:e4:d4:f3:16:6d:81:
                    53:c9:f3:9d:6d:a9:19:37:05:db:84:3d:c0:b2:78:
                    d5:c8:21:39:dc:16:33:9b:da:f7:ca:2f:ab:ed:30:
                    dd:df:6a:04:ef:fd:47:5d:c4:81:f8:b4:fc:ef:76:
                    a2:7e:dd:9a:6d:8e:f7:e8:68:bf:2a:c5:6f:af:84:
                    0e:f0:ca:e2:65:2b:f6:d3:d1:5e:4d:20:f7:40:93:
                    88:bc:1a:a5:0b:48:ee:86:97:83:f2:c3:73:47:63:
                    1a:1e:a6:e1:3b:49:eb:9d:ce:90:10:db:d0:19:e6:
                    43:41:6b:00:7b:a3:4b:87:83:39:01:bd:10:7e:6c:
                    7c:a2:83:1b:a7:af:13:f8:9f:81:da:d2:4a:9b:b5:
                    50:cf:27:aa:64:05:c1:90:19:8f:47:40:01:e1:64:
                    27:86:ef:37:fb:27:b1:bf:93:19:e9:03:36:90:1f:
                    b7:ae:fe:c2:32:62:99:9b:d0:18:bc:f0:93:33:f1:
                    c2:d5:9f:99:4b:a2:54:f9:e9:d3:41:48:9c:b0:61:
                    b0:89:f3:7e:88:21:18:9d:db:3c:26:f6:c5:ce:bb:
                    b3:de:ac:64:59:fa:5c:1d:94:3e:d2:77:5e:3b:22:
                    90:90:ab:e2:78:3f:8a:5b:ba:bc:47:05:b5:64:26:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:88:2F:E7:C9:BA:73:2E:29:5F:FB:4F:FB:B3:FB:6E:41:9A:CB:A9
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/3132382e3230312e34322e302f32342d3234203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:e1:3b:85:c0:ff:23:22:77:50:29:92:05:d5:3f:ad:32:b4:
         ec:04:a1:a1:99:08:b9:db:dd:0a:64:38:14:49:db:ee:a2:22:
         61:c3:e3:f4:80:b0:e0:2a:f5:34:9e:9b:1b:db:45:a7:a3:6b:
         9d:7b:2a:7d:28:49:3d:9a:5f:89:66:57:64:46:27:22:6c:a6:
         ce:93:fd:06:cc:a6:33:97:bd:46:69:1d:27:4f:a1:c2:bc:8c:
         c9:69:11:2f:73:d0:59:d0:6a:aa:6a:ad:d0:5b:85:2c:dd:4a:
         d6:b0:bf:26:13:bd:d0:73:90:52:c4:30:77:1c:21:37:26:c7:
         ae:01:cd:32:f7:3a:58:5b:aa:93:af:5b:7a:35:25:dd:75:39:
         da:07:d5:a1:95:8e:44:c5:a2:3a:45:43:fe:c6:a8:f2:c4:c4:
         ac:6a:e5:b2:42:7c:82:80:d0:c6:11:50:c9:ac:d3:3d:13:9d:
         ad:0a:51:54:bd:b3:37:b8:35:3a:be:30:c2:96:54:34:62:6f:
         2b:2d:36:85:9a:ff:93:a3:cc:a2:cf:f5:b1:18:da:1e:5d:95:
         a8:61:56:04:dd:d5:57:84:e5:26:3d:b1:8f:67:3e:9e:74:c4:
         70:5d:23:22:c9:fa:fa:d1:c2:ca:70:78:d8:86:5d:09:7e:a9:
         6c:4e:27:cf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL0FVZoQEOShzuJBi4FJiC+NdsMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjUyQjMwRTZEQzRFNjE4QjRFNzREM0I2NjFCOEFDMzk2
OTRBRkYyNzAeFw0yNDA3MjUxNzQzMjZaFw0yNTA3MjQxNzQ4MjZaMDMxMTAvBgNV
BAMTKDVBODgyRkU3QzlCQTczMkUyOTVGRkI0RkZCQjNGQjZFNDE5QUNCQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc9IBLObvfB+TU8xZtgVPJ851t
qRk3BduEPcCyeNXIITncFjOb2vfKL6vtMN3fagTv/UddxIH4tPzvdqJ+3Zptjvfo
aL8qxW+vhA7wyuJlK/bT0V5NIPdAk4i8GqULSO6Gl4Pyw3NHYxoepuE7SeudzpAQ
29AZ5kNBawB7o0uHgzkBvRB+bHyigxunrxP4n4Ha0kqbtVDPJ6pkBcGQGY9HQAHh
ZCeG7zf7J7G/kxnpAzaQH7eu/sIyYpmb0Bi88JMz8cLVn5lLolT56dNBSJywYbCJ
836IIRid2zwm9sXOu7PerGRZ+lwdlD7Sd147IpCQq+J4P4pburxHBbVkJj05AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWogv58m6cy4pX/tP+7P7bkGay6kwHwYDVR0j
BBgwFoAUZSsw5txOYYtOdNO2YbisOWlK/ycwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBBN0U4VjF5cG1Lakd5NWdiSzhZSk1QaXd4Mm14bVQ0TTdQbUx4VWlI
aVAvMC82NTJCMzBFNkRDNEU2MThCNEU3NEQzQjY2MUI4QUMzOTY5NEFGRjI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1MkIzMEU2REM0RTYxOEI0
RTc0RDNCNjYxQjhBQzM5Njk0QUZGMjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwQTdFOFYxeXBtS2pHeTVnYks4WUpNUGl3eDJteG1UNE03UG1MeFVpSGlQLzAv
MzEzMjM4MmUzMjMwMzEyZTM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNjM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACAySowDQYJKoZIhvcNAQELBQADggEBAAPhO4XA
/yMid1ApkgXVP60ytOwEoaGZCLnb3QpkOBRJ2+6iImHD4/SAsOAq9TSemxvbRaej
a517Kn0oST2aX4lmV2RGJyJsps6T/QbMpjOXvUZpHSdPocK8jMlpES9z0FnQaqpq
rdBbhSzdStawvyYTvdBzkFLEMHccITcmx64BzTL3OlhbqpOvW3o1Jd11OdoH1aGV
jkTFojpFQ/7GqPLExKxq5bJCfIKA0MYRUMms0z0Tna0KUVS9sze4NTq+MMKWVDRi
bystNoWa/5OjzKLP9bEY2h5dlahhVgTd1VeE5SY9sY9nPp50xHBdIyLJ+vrRwspw
eNiGXQl+qWxOJ88=
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:07 2024 by rpki-client on console-fra.rpki-client.org