Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa
File:                     3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa (raw, json)
Hash identifier:          AV05WrHKoIZ9nP9XVtv6gZNkwASMXR81Z80SN1jJOmM=
Subject key identifier:   98:D4:6D:FF:75:BA:4B:F4:EE:76:29:75:63:6A:23:74:09:FF:D6:5C
Certificate issuer:       /CN=2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3
Certificate serial:       2403EFF599DA04F0DCBB40D562C8B0C04F453014
Authority key identifier: 2A:58:3F:EE:EE:FA:7D:0F:82:CF:F8:32:87:4A:83:CD:DD:21:44:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     54540
IP address blocks:        131.196.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.crl
                          rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:03:ef:f5:99:da:04:f0:dc:bb:40:d5:62:c8:b0:c0:4f:45:30:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b0:74:d1:73:ba:1c:25:09:4e:2d:df:34:e4:
                    d8:6d:15:7f:dc:ea:d0:a5:de:85:36:71:5f:fa:c8:
                    e9:d5:a9:2d:6a:32:32:64:11:30:61:91:05:8c:ca:
                    3e:4f:d9:48:bc:a9:f7:02:39:09:ef:51:c0:39:b5:
                    f1:9d:34:89:7b:15:aa:76:b1:34:20:80:4c:53:88:
                    d5:4d:fa:36:02:ec:6c:f5:d8:51:ad:0a:50:83:21:
                    40:3d:11:ac:24:ca:3f:e1:8e:c0:89:36:25:5c:f5:
                    f2:8d:cf:ef:a9:0b:e6:e6:b1:ce:f9:3e:2d:69:51:
                    b6:06:05:fc:48:27:c3:5e:48:a0:9f:b8:5a:fe:c1:
                    77:b8:24:c4:22:00:42:9d:8e:d0:a2:39:74:ba:88:
                    b3:c6:4b:d8:35:89:a4:f7:e3:08:10:7a:43:9c:36:
                    5c:e3:98:e7:2e:97:5a:96:68:a9:c4:06:8c:bb:1c:
                    dc:cc:d9:83:9e:95:79:7a:22:e1:de:11:ab:57:4f:
                    21:9a:45:79:e9:2d:d2:5c:4f:0e:72:68:85:82:6d:
                    b1:db:9f:e2:db:6b:9f:52:7c:fa:d2:bd:e3:38:1d:
                    61:ca:25:6e:b3:5f:a8:7e:55:03:30:96:a6:37:a1:
                    ae:8b:e2:89:4e:04:d7:65:e7:3e:17:6f:95:a8:1f:
                    89:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D4:6D:FF:75:BA:4B:F4:EE:76:29:75:63:6A:23:74:09:FF:D6:5C
            X509v3 Authority Key Identifier:
                keyid:2A:58:3F:EE:EE:FA:7D:0F:82:CF:F8:32:87:4A:83:CD:DD:21:44:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A583FEEEEFA7D0F82CFF832874A83CDDD2144A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3QbtovZfUDXHE2uBtBKB4vHcm3hGBmShjmwRDrgqeR/1/3133312e3139362e3137322e302f32322d3234203d3e203534353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:ce:0b:78:b3:81:34:b4:9e:83:f0:76:52:7a:c2:b4:95:41:
         e7:17:97:9b:96:62:36:a7:1e:58:47:27:e5:6e:8e:6c:42:31:
         c9:69:4c:d7:27:a9:31:7c:20:c0:5c:6f:4f:36:2a:73:e0:df:
         37:9d:31:1a:36:8a:50:e3:50:f4:6e:57:29:ea:85:8d:a3:f2:
         5c:dc:1e:9a:e2:96:c8:17:0e:5c:30:f1:3b:87:19:4d:69:22:
         00:98:17:3f:ef:54:e8:dd:14:8c:59:80:62:38:a5:1a:ff:9e:
         18:c2:d0:69:81:49:e9:de:89:30:ef:e9:a9:b0:5d:9e:70:6e:
         0a:3b:23:6b:67:c7:da:13:f1:f1:1c:3c:4a:77:63:78:0d:41:
         d0:ca:6d:c9:2e:d1:02:49:b3:b1:86:b9:8f:84:6d:86:21:8c:
         cd:ba:41:7f:64:ae:dc:4b:7e:2f:b4:c6:33:f1:f1:bc:8b:05:
         89:b4:25:2f:df:66:4a:ac:3b:d8:0e:3e:bb:70:d6:6a:ad:16:
         07:f0:1e:27:4b:3a:87:93:3f:ee:1f:99:07:a4:e9:a5:16:7f:
         86:2d:a4:13:73:8d:e8:2b:f5:42:0b:5f:a5:8f:c3:3a:4f:12:
         48:3d:fc:8a:ac:2c:c2:6e:1c:b5:44:aa:23:50:09:93:e7:8d:
         6a:fb:28:da
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUJAPv9ZnaBPDcu0DVYsiwwE9FMBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE1ODNGRUVFRUZBN0QwRjgyQ0ZGODMyODc0QTgzQ0RE
RDIxNDRBMzAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTdCMDc0RDE3M0JBMUMyNTA5
NEUyRERGMzRFNEQ4NkQxNTdGRENFQUQwQTVERTg1MzY3MTVGRkFDOEU5RDVBOTJE
NkEzMjMyNjQxMTMwNjE5MTA1OENDQTNFNEZEOTQ4QkNBOUY3MDIzOTA5RUY1MUMw
MzlCNUYxOUQzNDg5N0IxNUFBNzZCMTM0MjA4MDRDNTM4OEQ1NERGQTM2MDJFQzZD
RjVEODUxQUQwQTUwODMyMTQwM0QxMUFDMjRDQTNGRTE4RUMwODkzNjI1NUNGNUYy
OERDRkVGQTkwQkU2RTZCMUNFRjkzRTJENjk1MUI2MDYwNUZDNDgyN0MzNUU0OEEw
OUZCODVBRkVDMTc3QjgyNEM0MjIwMDQyOUQ4RUQwQTIzOTc0QkE4OEIzQzY0QkQ4
MzU4OUE0RjdFMzA4MTA3QTQzOUMzNjVDRTM5OEU3MkU5NzVBOTY2OEE5QzQwNjhD
QkIxQ0RDQ0NEOTgzOUU5NTc5N0EyMkUxREUxMUFCNTc0RjIxOUE0NTc5RTkyREQy
NUM0RjBFNzI2ODg1ODI2REIxREI5RkUyREI2QjlGNTI3Q0ZBRDJCREUzMzgxRDYx
Q0EyNTZFQjM1RkE4N0U1NTAzMzA5NkE2MzdBMUFFOEJFMjg5NEUwNEQ3NjVFNzNF
MTc2Rjk1QTgxRjg5QkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA57B00XO6HCUJTi3fNOTYbRV/3OrQpd6FNnFf+sjp1aktajIyZBEw
YZEFjMo+T9lIvKn3AjkJ71HAObXxnTSJexWqdrE0IIBMU4jVTfo2Auxs9dhRrQpQ
gyFAPRGsJMo/4Y7AiTYlXPXyjc/vqQvm5rHO+T4taVG2BgX8SCfDXkign7ha/sF3
uCTEIgBCnY7Qojl0uoizxkvYNYmk9+MIEHpDnDZc45jnLpdalmipxAaMuxzczNmD
npV5eiLh3hGrV08hmkV56S3SXE8OcmiFgm2x25/i22ufUnz60r3jOB1hyiVus1+o
flUDMJamN6Gui+KJTgTXZec+F2+VqB+JuwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJjUbf91ukv07nYpdWNqI3QJ/9ZcMB8GA1UdIwQYMBaAFCpYP+7u+n0Pgs/4ModK
g83dIUSjMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhtM1FidG92WmZVRFhI
RTJ1QnRCS0I0dkhjbTNoR0JtU2hqbXdSRHJncWVSLzEvMkE1ODNGRUVFRUZBN0Qw
RjgyQ0ZGODMyODc0QTgzQ0RERDIxNDRBMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8yQTU4M0ZFRUVFRkE3RDBGODJDRkY4MzI4NzRBODNDREREMjE0
NEEzLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84bTNRYnRvdlpmVURYSEUydUJ0
QktCNHZIY20zaEdCbVNoam13UkRyZ3FlUi8xLzMxMzMzMTJlMzEzOTM2MmUzMTM3
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTM0MzUzNDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
g8SsMA0GCSqGSIb3DQEBCwUAA4IBAQBIzgt4s4E0tJ6D8HZSesK0lUHnF5eblmI2
px5YRyflbo5sQjHJaUzXJ6kxfCDAXG9PNipz4N83nTEaNopQ41D0blcp6oWNo/Jc
3B6a4pbIFw5cMPE7hxlNaSIAmBc/71To3RSMWYBiOKUa/54YwtBpgUnp3okw7+mp
sF2ecG4KOyNrZ8faE/HxHDxKd2N4DUHQym3JLtECSbOxhrmPhG2GIYzNukF/ZK7c
S34vtMYz8fG8iwWJtCUv32ZKrDvYDj67cNZqrRYH8B4nSzqHkz/uH5kHpOmlFn+G
LaQTc43oK/VCC1+lj8M6TxJIPfyKrCzCbhy1RKojUAmT541q+yja
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:35:05 2024 by rpki-client on console-fra.rpki-client.org