Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa
File:                     3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa (raw, json)
Hash identifier:          qU7nP6FwiI9bW5MnnSIsYTJ0VlGYfuHZXStr6bpMtTE=
Subject key identifier:   78:2B:2F:8E:F8:D7:01:00:2D:68:63:F8:67:08:BA:FC:BC:A8:B1:94
Certificate issuer:       /CN=7D74CC52F3FFC5E9F51EE355989DE6179F345AC0
Certificate serial:       51F7454041E70842DC2239FF1EFD17A5B7C987EE
Authority key identifier: 7D:74:CC:52:F3:FF:C5:E9:F5:1E:E3:55:98:9D:E6:17:9F:34:5A:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D74CC52F3FFC5E9F51EE355989DE6179F345AC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa
Signing time:             Tue 08 Oct 2024 18:31:42 +0000
ROA not before:           Tue 08 Oct 2024 18:26:42 +0000
ROA not after:            Tue 07 Oct 2025 18:31:42 +0000
asID:                     271046
IP address blocks:        128.201.12.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/7D74CC52F3FFC5E9F51EE355989DE6179F345AC0.crl
                          rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/7D74CC52F3FFC5E9F51EE355989DE6179F345AC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D74CC52F3FFC5E9F51EE355989DE6179F345AC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f7:45:40:41:e7:08:42:dc:22:39:ff:1e:fd:17:a5:b7:c9:87:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D74CC52F3FFC5E9F51EE355989DE6179F345AC0
        Validity
            Not Before: Oct  8 18:26:42 2024 GMT
            Not After : Oct  7 18:31:42 2025 GMT
        Subject: CN=782B2F8EF8D701002D6863F86708BAFCBCA8B194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:76:d5:de:40:ca:0d:12:86:92:03:4f:6a:
                    63:fb:79:13:3e:24:8f:4c:4b:5d:f6:bf:07:c8:d2:
                    e3:5a:ce:6d:f7:b0:22:59:7b:ba:56:5a:20:63:8f:
                    29:40:f3:d9:26:c8:b4:02:7d:a4:28:46:da:84:d1:
                    0e:82:6f:d6:47:82:36:f9:da:08:58:33:ec:dc:fd:
                    06:69:5b:3c:ec:90:ab:a3:0b:50:bd:59:02:84:5b:
                    cc:b6:81:d1:3b:0c:0f:74:1b:d4:50:20:79:05:cc:
                    f2:c8:76:cf:26:3d:2c:6c:12:f1:59:8f:03:b8:ea:
                    c8:01:6a:15:20:62:a9:01:5b:03:5d:41:d2:d7:74:
                    7c:b3:ff:1e:3d:2a:a9:89:cf:51:3e:09:12:c2:5a:
                    22:73:53:88:2e:e1:16:50:ab:a5:de:fd:d5:41:a6:
                    4f:ac:14:15:2d:7c:db:39:93:4e:30:93:b3:74:89:
                    90:9f:93:32:c2:30:0b:38:b1:45:c2:f3:62:42:70:
                    64:ba:f1:c0:61:f3:c9:3f:22:b6:f0:af:72:d6:20:
                    a9:4e:3d:f3:9d:a6:4d:c8:5f:0c:77:30:45:d8:7d:
                    ea:49:2d:27:dd:dd:fe:1e:46:88:0e:a6:20:4a:4a:
                    b8:7c:7f:02:e2:c8:61:83:29:74:40:a8:65:05:1f:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2B:2F:8E:F8:D7:01:00:2D:68:63:F8:67:08:BA:FC:BC:A8:B1:94
            X509v3 Authority Key Identifier:
                keyid:7D:74:CC:52:F3:FF:C5:E9:F5:1E:E3:55:98:9D:E6:17:9F:34:5A:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/7D74CC52F3FFC5E9F51EE355989DE6179F345AC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D74CC52F3FFC5E9F51EE355989DE6179F345AC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:0e:30:1f:2a:6a:38:72:5e:46:e3:13:4c:47:80:12:76:d0:
         f5:88:7a:38:34:20:3b:6c:09:0b:e2:16:80:87:a3:d7:08:84:
         09:27:22:72:45:ae:c3:2e:73:51:d3:55:c8:36:9b:c7:ac:83:
         8c:b3:3d:03:d7:37:51:58:ec:b0:09:21:fe:bc:1f:f1:b7:ae:
         e3:cc:c9:4c:0c:80:75:7c:d1:46:cb:72:c2:0f:4e:48:f5:c6:
         36:ed:ee:2c:2c:63:5d:4c:7a:3f:0f:50:8b:9a:10:da:9a:82:
         50:be:83:0d:86:3c:95:3d:31:ae:0b:14:10:86:4a:bf:08:d7:
         6c:cc:e4:08:03:a0:af:cc:ab:f1:73:39:10:db:2f:e5:52:d5:
         27:83:99:36:6c:c0:f5:c8:53:87:bf:9f:27:b2:5c:5d:c4:87:
         2a:b7:16:73:44:81:c0:43:c0:d8:89:50:21:9b:a3:c1:15:7c:
         29:fa:a7:5c:67:d2:b2:01:1d:d3:a2:10:69:cd:47:2d:fc:7b:
         40:ee:30:41:39:b6:e9:5b:0c:db:56:49:0b:8c:71:e0:77:d6:
         6d:99:08:b9:90:90:56:94:85:7b:0c:42:b4:fc:51:93:0e:44:
         7b:f5:36:96:66:5b:b1:87:68:fa:fd:f1:da:43:42:87:61:33:
         01:b9:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:38 2024 by rpki-client on console-ams.rpki-client.org