Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/3132382e3230312e3139362e302f32322d3233203d3e20323635383937.roa
File:                     3132382e3230312e3139362e302f32322d3233203d3e20323635383937.roa (raw, json)
Hash identifier:          /uDCbXCUR82CbFhssScEltM4zne1ybW8+c3eD2W6q8I=
Subject key identifier:   5D:6A:83:C4:D7:7F:98:9D:E8:79:22:73:78:DD:36:5B:AD:EC:44:47
Certificate issuer:       /CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
Certificate serial:       7875ABD29827E846B24DBEEB34F913F787DC8D66
Authority key identifier: 5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/3132382e3230312e3139362e302f32322d3233203d3e20323635383937.roa
Signing time:             Tue 23 Jul 2024 21:05:50 +0000
ROA not before:           Tue 23 Jul 2024 21:00:50 +0000
ROA not after:            Tue 22 Jul 2025 21:05:50 +0000
asID:                     265897
IP address blocks:        128.201.196.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl
                          rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:75:ab:d2:98:27:e8:46:b2:4d:be:eb:34:f9:13:f7:87:dc:8d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
        Validity
            Not Before: Jul 23 21:00:50 2024 GMT
            Not After : Jul 22 21:05:50 2025 GMT
        Subject: CN=5D6A83C4D77F989DE879227378DD365BADEC4447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:5a:aa:84:e6:a0:b7:38:2a:17:09:b4:9f:
                    9d:dd:88:38:65:d6:a9:72:f5:ef:0d:60:b0:5f:04:
                    34:11:95:50:92:d8:e1:10:33:8f:82:16:0d:c9:1c:
                    8a:85:dd:a1:f9:f3:53:e5:f1:ff:6b:76:3f:e4:be:
                    b7:57:4f:02:92:e1:97:69:4b:e7:76:f8:55:38:8c:
                    0e:b3:95:bf:ad:d2:9e:44:0a:3e:eb:8f:bb:93:10:
                    61:a5:cd:cd:1d:52:e5:50:2b:2e:f1:ae:12:8d:53:
                    0a:9a:8c:3f:32:6b:81:d5:36:32:ec:e6:d4:31:ba:
                    32:13:5a:53:49:22:16:4d:80:75:b1:c6:45:fa:d6:
                    2f:52:c1:34:26:2c:aa:66:0f:50:61:8d:da:15:f4:
                    ff:67:4e:55:44:e9:1a:d2:41:ef:c6:4b:92:79:91:
                    17:85:22:85:10:88:9d:83:aa:80:fd:25:c8:63:da:
                    e4:da:83:32:49:68:94:75:bb:58:99:1e:0f:3d:67:
                    2d:a1:41:05:96:51:9a:78:35:f9:d7:34:af:b8:84:
                    47:bf:f5:1b:05:81:69:f3:c9:ed:49:c1:a2:99:89:
                    c8:f8:69:a2:d6:80:e3:88:62:6b:38:14:47:49:43:
                    c5:fd:58:14:89:2f:51:20:8e:52:1b:96:ca:42:6d:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6A:83:C4:D7:7F:98:9D:E8:79:22:73:78:DD:36:5B:AD:EC:44:47
            X509v3 Authority Key Identifier:
                keyid:5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/3132382e3230312e3139362e302f32322d3233203d3e20323635383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:41:ce:06:59:bb:30:15:2f:53:6a:b7:02:18:c8:b9:f6:5a:
         ce:7f:16:2e:98:70:34:36:5e:c8:69:4f:08:bd:ab:7b:8e:b3:
         fc:ab:c8:e2:f4:68:c9:2a:97:58:6b:c6:5b:c6:5a:34:c8:7e:
         e0:99:22:fd:ff:fd:6e:f9:1e:93:7c:09:ab:4f:6c:10:54:fb:
         f8:9f:e9:c8:de:83:7e:23:98:5b:89:22:46:62:f4:e4:a3:60:
         8a:ac:8a:e3:65:38:5d:d9:ad:d3:a3:9f:23:49:c6:ba:86:3a:
         08:2a:e5:0d:be:4e:92:11:b9:b8:ce:16:8f:52:08:6a:00:bf:
         f2:9b:ff:61:85:34:dc:6b:24:d6:ae:cf:09:48:12:9e:03:a1:
         f1:15:08:fd:d7:45:c3:2a:98:10:42:31:8c:19:de:e7:67:1a:
         51:7c:0a:cf:54:bf:75:13:b5:62:62:ae:28:c3:34:25:86:f0:
         1a:75:3a:42:0c:58:12:64:32:ce:cc:2e:b2:eb:d1:b9:cb:2b:
         c0:69:01:64:a0:82:01:db:4d:00:4f:49:84:84:37:1b:19:4a:
         95:99:9e:e0:88:bf:e3:80:f6:05:1f:56:c1:3d:1b:1b:1e:60:
         25:95:39:a1:16:2c:92:b0:ba:df:23:64:d4:de:93:ed:2d:87:
         c7:9c:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:07 2024 by rpki-client on console-fra.rpki-client.org