Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231332e302f32342d3234203d3e20323634343332.roa
File:                     3133312e3232312e3231332e302f32342d3234203d3e20323634343332.roa (raw, json)
Hash identifier:          dWYQmGVAk5Uh9hn5TBBNQKNrN6lKYFglEYxp7xbUGj4=
Subject key identifier:   74:2B:0E:12:CA:12:30:70:CC:B4:02:C3:97:37:0D:4E:D4:64:E8:A2
Certificate issuer:       /CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
Certificate serial:       23E1F424C6E549B28A80DC902775C181A28917AD
Authority key identifier: 30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231332e302f32342d3234203d3e20323634343332.roa
Signing time:             Thu 25 Apr 2024 13:22:45 +0000
ROA not before:           Thu 25 Apr 2024 13:17:45 +0000
ROA not after:            Thu 24 Apr 2025 13:22:45 +0000
asID:                     264432
IP address blocks:        131.221.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl
                          rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 17:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e1:f4:24:c6:e5:49:b2:8a:80:dc:90:27:75:c1:81:a2:89:17:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
        Validity
            Not Before: Apr 25 13:17:45 2024 GMT
            Not After : Apr 24 13:22:45 2025 GMT
        Subject: CN=742B0E12CA123070CCB402C397370D4ED464E8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2c:aa:b6:4b:ee:dd:89:26:53:10:3f:67:3c:
                    c8:57:85:9b:f9:62:76:98:90:ba:73:f9:4c:5d:02:
                    b5:2b:51:6e:a5:8f:95:d9:28:92:a1:12:f0:0c:f7:
                    1d:28:0d:47:7b:84:77:c9:18:c1:ba:02:8b:8e:3c:
                    b3:f9:2d:ac:9c:27:3e:3e:01:01:5e:ad:c6:d8:7f:
                    a6:b9:b6:7d:f0:67:27:a8:c1:54:0a:8c:1b:b6:74:
                    14:a1:8e:63:02:44:52:e8:79:c6:8c:f9:d6:f6:d2:
                    2c:29:80:08:6f:f7:d2:3e:17:7e:4f:a3:45:35:31:
                    7b:97:a7:f4:a1:a8:00:16:2c:41:23:e9:fb:e4:32:
                    e9:c8:d1:2e:f5:61:19:88:b4:45:28:85:03:21:33:
                    67:33:ae:69:60:13:d8:28:10:b5:7a:87:9c:53:56:
                    e8:41:ed:c5:e5:94:b2:5b:6c:33:bc:96:29:50:9e:
                    3f:71:14:81:25:4f:d1:82:28:8d:b3:d3:55:62:7d:
                    f2:c7:3d:50:22:01:34:fe:78:7b:ec:b0:7a:b4:29:
                    89:80:4f:32:8c:bb:99:99:2c:69:00:e6:90:4b:51:
                    9e:0e:72:9b:11:cf:25:c0:de:7d:71:a4:29:20:76:
                    2f:05:a8:15:02:b2:71:e5:94:9f:8a:58:ce:6d:05:
                    30:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2B:0E:12:CA:12:30:70:CC:B4:02:C3:97:37:0D:4E:D4:64:E8:A2
            X509v3 Authority Key Identifier:
                keyid:30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231332e302f32342d3234203d3e20323634343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:c4:36:55:88:cf:b4:00:55:8d:28:e3:cf:21:b6:75:c0:78:
         c2:d3:e0:07:5e:02:d3:c1:b6:9d:96:c2:2b:09:76:bb:54:eb:
         c6:10:f2:e7:15:94:25:84:eb:c6:14:34:26:d8:9c:e9:3a:79:
         21:38:7c:1f:ca:8d:ab:a6:ca:17:e9:2b:a9:56:99:26:0a:d5:
         52:6a:98:0c:d7:95:66:82:5a:77:ed:da:63:2a:3a:e3:6c:31:
         64:be:14:05:6c:7a:48:5d:86:55:bd:b6:89:c2:c6:6f:45:17:
         d1:cf:e6:c8:f3:ce:e8:22:41:2b:21:56:9e:4e:2b:60:11:71:
         37:a7:12:ca:a5:32:65:68:69:6a:e2:04:92:70:5c:a3:cc:00:
         0a:b6:d0:78:69:2c:9f:a0:8c:0a:f3:5d:0e:f3:32:ca:fa:1a:
         f0:91:51:18:b6:64:c0:42:d8:7b:f3:a3:34:5f:11:3b:ec:c3:
         c0:a6:b8:44:59:1a:76:e3:58:40:6f:c3:86:3d:a6:a7:28:dd:
         e5:c1:43:b4:d7:96:c4:d7:d3:59:71:7d:e2:75:b0:ad:41:83:
         bd:e4:99:26:59:70:4d:c2:bb:df:73:81:4f:b0:2c:78:95:f1:
         09:18:f6:73:c2:86:b0:17:31:55:58:f0:70:08:bf:3b:dd:eb:
         16:06:aa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 20:00:22 2024 by rpki-client on console-fra.rpki-client.org