Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32322d3232203d3e20323634343332.roa
File:                     3133312e3232312e3231322e302f32322d3232203d3e20323634343332.roa (raw, json)
Hash identifier:          de8cYJ7o0C7f9aaw8JKvuguWa2BCk+a1QDaNQ+Zz22I=
Subject key identifier:   6D:50:F1:A8:34:A3:B5:3D:FA:97:7A:8B:56:F6:71:96:E8:DF:2B:DF
Certificate issuer:       /CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
Certificate serial:       64E90BEABDF3AE3B0D506DB941A06CFDC44B4B1B
Authority key identifier: 30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32322d3232203d3e20323634343332.roa
Signing time:             Thu 25 Apr 2024 13:22:38 +0000
ROA not before:           Thu 25 Apr 2024 13:17:38 +0000
ROA not after:            Thu 24 Apr 2025 13:22:38 +0000
asID:                     264432
IP address blocks:        131.221.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl
                          rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 17:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e9:0b:ea:bd:f3:ae:3b:0d:50:6d:b9:41:a0:6c:fd:c4:4b:4b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
        Validity
            Not Before: Apr 25 13:17:38 2024 GMT
            Not After : Apr 24 13:22:38 2025 GMT
        Subject: CN=6D50F1A834A3B53DFA977A8B56F67196E8DF2BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:ec:84:02:5d:6e:2e:4b:9f:6a:8a:8e:76:
                    04:3f:5c:7c:58:12:1a:9b:d7:fc:44:5f:87:0b:84:
                    0b:31:bd:69:14:15:18:3b:5b:ce:5c:7f:2a:9e:a4:
                    97:10:8d:b9:fb:c9:3c:44:eb:b3:7a:bf:d8:8f:52:
                    91:01:2b:0c:76:a1:17:e1:98:a7:ac:3c:f1:c4:6e:
                    61:9b:50:fd:4c:9b:7a:42:19:f7:e9:09:03:33:cc:
                    bc:85:ec:7b:33:96:e5:29:df:bd:fb:c6:f4:b2:ba:
                    a0:f8:de:8f:20:81:77:e0:93:21:c3:82:92:6c:fa:
                    47:d2:42:01:ad:f5:02:cd:7b:3b:01:ed:f4:f8:a4:
                    db:17:7b:65:17:27:d3:56:ee:c2:aa:85:f2:e8:77:
                    28:f3:ce:59:a5:0f:95:0a:68:5d:a2:a1:89:88:39:
                    5b:6e:82:6c:b4:90:85:b1:c4:05:82:90:90:62:b9:
                    58:07:97:17:c2:1e:10:b2:1c:fa:17:06:82:11:70:
                    18:fe:5d:14:bf:d0:ef:e3:dc:ad:1d:43:cd:5f:63:
                    b7:4d:2d:ce:a7:3e:b2:0e:8b:37:3a:86:ba:55:5f:
                    d0:d8:a8:c0:32:1d:0b:20:c7:53:b5:3b:74:18:d8:
                    93:1b:49:8d:8e:84:9c:a4:d2:d4:db:e0:46:bf:ac:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:50:F1:A8:34:A3:B5:3D:FA:97:7A:8B:56:F6:71:96:E8:DF:2B:DF
            X509v3 Authority Key Identifier:
                keyid:30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231322e302f32322d3232203d3e20323634343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:82:3f:3d:7e:31:2d:d1:a6:19:7f:5b:27:e1:8d:57:6d:c4:
         3e:65:11:bf:45:0a:46:92:e0:e0:28:0f:4c:4f:57:e1:35:5e:
         86:10:b5:a3:fe:92:3d:a8:10:c8:c9:a5:1c:2e:a4:97:e7:e1:
         55:2c:af:2e:8a:82:e1:44:f7:bb:f2:7d:dc:67:11:d8:8a:c0:
         df:a1:9a:11:cf:5e:90:29:0a:79:dc:93:c7:08:84:cc:b8:50:
         93:9f:f9:ce:7d:da:cc:05:01:cb:bd:44:04:c6:ab:c1:10:30:
         60:12:94:57:a2:81:eb:71:44:bf:35:69:45:35:52:69:b1:79:
         ff:59:07:f8:f3:71:78:9b:7b:5d:bb:3f:f6:e8:ce:31:30:6f:
         c3:ac:05:66:6d:71:9a:8c:a7:1e:1e:c1:11:d7:60:a3:4e:e9:
         9e:8f:ef:08:65:8f:2e:fd:7b:09:59:07:f1:0d:82:a5:1e:31:
         7c:f4:15:68:b3:72:5f:25:65:19:ba:22:25:9b:b3:e1:42:8b:
         87:3f:f8:3f:bf:17:45:40:4d:78:84:38:29:b8:08:59:73:e6:
         0b:75:50:f1:f1:ac:1c:7a:30:90:97:fd:c6:ec:94:e9:22:53:
         73:08:ce:6c:4e:b3:27:31:b1:d9:73:1c:db:09:01:f8:f5:19:
         21:f5:82:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 20:00:22 2024 by rpki-client on console-fra.rpki-client.org