Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa
File:                     3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa (raw, json)
Hash identifier:          5UVNQfr/H1loMcA34Ig1O6/iu4sRUzKL3wwcayZNOMo=
Subject key identifier:   F1:E8:32:0F:07:B6:1E:5A:6F:F4:F3:D4:1F:44:37:A5:AD:FA:5E:63
Certificate issuer:       /CN=632856CEBE252EA19070F50AFE7804C74E32D51A
Certificate serial:       048908F6F0B90CCAE663BE8F24DD07D8B3FF1E50
Authority key identifier: 63:28:56:CE:BE:25:2E:A1:90:70:F5:0A:FE:78:04:C7:4E:32:D5:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632856CEBE252EA19070F50AFE7804C74E32D51A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa
Signing time:             Mon 11 Nov 2024 12:00:44 +0000
ROA not before:           Mon 11 Nov 2024 11:55:44 +0000
ROA not after:            Mon 10 Nov 2025 12:00:44 +0000
asID:                     264119
IP address blocks:        138.59.216.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/632856CEBE252EA19070F50AFE7804C74E32D51A.crl
                          rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/632856CEBE252EA19070F50AFE7804C74E32D51A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632856CEBE252EA19070F50AFE7804C74E32D51A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:89:08:f6:f0:b9:0c:ca:e6:63:be:8f:24:dd:07:d8:b3:ff:1e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632856CEBE252EA19070F50AFE7804C74E32D51A
        Validity
            Not Before: Nov 11 11:55:44 2024 GMT
            Not After : Nov 10 12:00:44 2025 GMT
        Subject: CN=F1E8320F07B61E5A6FF4F3D41F4437A5ADFA5E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:05:96:5b:36:e2:7b:35:7f:0b:d2:04:59:c0:
                    d4:c5:a9:dd:99:9f:58:a9:a1:36:34:d1:94:71:62:
                    37:ed:a4:0f:36:0d:56:27:d3:e8:6c:16:f6:bd:27:
                    dc:d0:5b:ee:df:da:14:16:69:f0:e4:c8:af:a3:c8:
                    48:4d:a0:b3:bf:f0:6d:2c:26:78:ad:71:48:78:7f:
                    e0:d7:e1:57:79:64:49:71:e6:8a:e2:f2:d9:2d:92:
                    17:eb:97:72:6a:a2:55:b4:d8:68:79:d2:1c:21:43:
                    b2:bf:9d:c5:a1:44:a0:5a:61:fc:26:29:dd:92:6e:
                    45:42:2e:09:21:99:9d:cb:e9:40:89:02:fd:c2:71:
                    f3:89:1a:f1:3b:2b:5c:93:ae:28:ed:d8:54:12:c2:
                    a6:e0:0e:44:bd:10:93:8e:ad:7f:f7:aa:84:b3:d6:
                    f5:37:0e:f6:84:05:12:07:af:76:39:09:3e:2b:9d:
                    e6:b4:0f:88:d9:56:03:18:0d:67:e9:10:2e:f1:3a:
                    b5:50:47:e4:9f:8e:6e:56:5b:34:1e:33:b9:8e:32:
                    22:40:f8:8d:80:bb:05:ee:44:a8:df:89:8e:2e:30:
                    49:6e:d5:77:27:7b:41:0c:d8:77:5a:ad:7c:e0:db:
                    1f:f6:da:62:56:8c:82:28:1c:a6:38:b0:de:9f:19:
                    7e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:32:0F:07:B6:1E:5A:6F:F4:F3:D4:1F:44:37:A5:AD:FA:5E:63
            X509v3 Authority Key Identifier:
                keyid:63:28:56:CE:BE:25:2E:A1:90:70:F5:0A:FE:78:04:C7:4E:32:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/632856CEBE252EA19070F50AFE7804C74E32D51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632856CEBE252EA19070F50AFE7804C74E32D51A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3133382e35392e3231362e302f32322d3332203d3e20323634313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:c8:11:ef:69:26:d5:08:3c:cd:11:51:ec:07:e9:6e:a1:3b:
         b4:ff:41:59:6c:54:72:07:59:5a:0b:59:fb:e2:fe:a8:bb:8b:
         13:73:63:c2:cd:c6:30:48:ba:cb:da:0a:7f:67:13:56:77:60:
         8e:60:1c:f6:59:62:6f:d4:61:2b:30:b3:97:83:e5:1c:21:dc:
         5c:ff:d8:1a:2c:da:31:0d:0c:fc:20:6e:ac:e7:50:84:54:17:
         16:9f:21:cf:da:db:6d:e5:d0:2a:e7:97:73:d9:fb:52:55:6e:
         47:40:96:2c:d8:f7:27:cf:48:69:98:66:e8:7a:06:70:d5:dd:
         7f:97:ff:1b:3f:78:3e:5c:0e:c5:62:d2:49:3c:04:d3:86:81:
         39:15:c8:68:79:95:7e:df:80:07:f6:65:08:18:ac:42:36:5c:
         de:37:31:cc:6f:f9:25:e9:f1:61:c3:05:9e:7e:7b:10:ea:ba:
         98:75:f2:f7:41:bf:78:d5:ff:0f:4e:fc:0e:3f:2b:c7:eb:e2:
         c8:99:76:5a:c4:d4:1d:e7:35:19:a8:54:85:98:3a:16:9b:55:
         cb:32:88:92:fb:63:51:80:bf:93:80:e3:db:fa:84:ed:46:06:
         5c:cd:74:d4:16:20:16:67:c8:3f:fd:94:6f:c0:19:c7:66:dd:
         3b:0e:e0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:40 2024 by rpki-client on console-ams.rpki-client.org