Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/3133322e3235352e3231362e302f32322d3234203d3e20323634353134.roa
File:                     3133322e3235352e3231362e302f32322d3234203d3e20323634353134.roa (raw, json)
Hash identifier:          0MAUdTJKfyIrbPtnQHa8WkQi6u6DuRT7kqJa5JXr6c0=
Subject key identifier:   DF:36:44:38:96:3E:14:19:03:4C:10:40:71:FE:79:AE:C7:E7:0B:0B
Certificate issuer:       /CN=5116131606911447B81AE3C7A8BE76D217A043B2
Certificate serial:       403855AE50EF33CF87459B41B0448599566050CD
Authority key identifier: 51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/3133322e3235352e3231362e302f32322d3234203d3e20323634353134.roa
Signing time:             Wed 03 Apr 2024 18:31:50 +0000
ROA not before:           Wed 03 Apr 2024 18:26:50 +0000
ROA not after:            Wed 02 Apr 2025 18:31:50 +0000
asID:                     264514
IP address blocks:        132.255.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl
                          rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:38:55:ae:50:ef:33:cf:87:45:9b:41:b0:44:85:99:56:60:50:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5116131606911447B81AE3C7A8BE76D217A043B2
        Validity
            Not Before: Apr  3 18:26:50 2024 GMT
            Not After : Apr  2 18:31:50 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:ee:26:2d:9a:2e:72:2a:d1:cb:04:7e:72:
                    8b:76:7f:04:94:87:ec:84:98:9d:17:64:9a:ea:14:
                    4f:b7:49:1b:45:9e:d3:24:59:11:c1:2c:b9:97:6e:
                    d3:d5:b0:39:11:ab:65:12:a7:d3:22:b4:5e:f9:2c:
                    c7:5d:57:ab:ee:8f:81:d0:65:2b:2c:41:71:74:0a:
                    18:d2:ea:92:49:f4:29:4f:cc:a3:37:1f:ce:a7:72:
                    5a:6d:27:b6:0a:e7:71:57:ab:de:79:2b:a6:fd:59:
                    e4:92:05:ca:56:20:c4:7f:24:f2:bf:21:d1:90:ef:
                    6d:36:72:f8:e4:3d:e9:2b:87:df:0a:00:51:cc:4a:
                    aa:16:3d:55:f7:f4:3d:34:12:04:9b:99:51:59:de:
                    5e:e7:f7:f0:ef:55:1e:4d:33:15:fb:d9:51:2e:e8:
                    02:0f:97:12:ac:d5:93:26:a6:32:9d:73:4a:99:9f:
                    90:46:61:b2:08:3a:d4:3f:b4:ba:a4:3f:d3:ce:ac:
                    cc:ac:81:90:61:68:6e:c5:ed:b9:87:bc:96:62:a2:
                    95:2f:68:86:8a:f9:15:87:d3:fd:65:22:05:05:5f:
                    9d:1d:c7:77:a2:a3:ba:5a:0d:7b:21:c4:ae:d4:24:
                    48:86:10:d3:00:41:82:79:ab:a4:5e:ab:f4:11:d7:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:36:44:38:96:3E:14:19:03:4C:10:40:71:FE:79:AE:C7:E7:0B:0B
            X509v3 Authority Key Identifier:
                keyid:51:16:13:16:06:91:14:47:B8:1A:E3:C7:A8:BE:76:D2:17:A0:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/5116131606911447B81AE3C7A8BE76D217A043B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5116131606911447B81AE3C7A8BE76D217A043B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/1/3133322e3235352e3231362e302f32322d3234203d3e20323634353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:15:49:b5:f7:b0:bc:f5:f4:a8:99:d1:33:73:91:a1:18:95:
         8c:89:9f:80:a9:df:b5:7f:49:75:d2:0c:ef:09:b9:96:dd:cb:
         8c:92:9b:54:98:b7:eb:77:92:7a:e7:6e:9c:d5:59:b8:2c:f5:
         e6:7e:d9:be:3f:71:d3:98:c3:c6:16:2e:02:6c:ad:1a:0f:5c:
         26:80:d3:b0:98:b8:ee:2a:7c:14:59:61:5d:91:8c:2f:01:7c:
         b9:b1:19:1b:fe:ea:3c:0e:9c:c4:51:e1:8c:78:17:c2:ae:54:
         53:2b:25:8e:e5:cf:31:73:c2:37:b7:98:7c:ca:30:35:1f:fc:
         e0:88:93:e7:1f:f3:57:22:94:f0:eb:55:03:0c:47:f0:0c:51:
         ab:02:82:69:ad:1a:af:68:27:3a:d6:49:75:c5:fc:75:1d:be:
         e0:a7:08:8e:53:21:e4:10:2d:38:28:e3:e8:5a:e0:a9:3d:9e:
         e6:f9:b2:30:dc:ac:11:aa:25:5a:e6:be:c7:f5:3b:bc:8d:54:
         04:57:b8:ce:ef:bb:d5:75:2e:60:29:30:11:05:41:88:9b:5d:
         d9:5c:8a:d2:f2:09:22:c3:37:3b:4d:34:38:80:69:8f:a1:14:
         5c:7c:b5:6e:e4:51:c8:16:86:4c:3f:1d:40:46:2a:05:07:ec:
         29:d4:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:49 2024 by rpki-client on console-fra.rpki-client.org