Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231342e302f32342d3234203d3e20323634343332.roa
File:                     3133312e3232312e3231342e302f32342d3234203d3e20323634343332.roa (raw, json)
Hash identifier:          gvLTbLgPdNUnW5oQAqnRc540xkCm2TQHrgLTc+2ruXU=
Subject key identifier:   F0:55:E8:3A:35:90:83:F5:93:17:A1:31:2A:55:7F:CF:70:63:CB:27
Certificate issuer:       /CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
Certificate serial:       2B781530BD529ED6DE42C5BD9E8C466030D3F2BC
Authority key identifier: 30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231342e302f32342d3234203d3e20323634343332.roa
Signing time:             Thu 25 Apr 2024 13:22:51 +0000
ROA not before:           Thu 25 Apr 2024 13:17:51 +0000
ROA not after:            Thu 24 Apr 2025 13:22:51 +0000
asID:                     264432
IP address blocks:        131.221.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl
                          rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 20:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:78:15:30:bd:52:9e:d6:de:42:c5:bd:9e:8c:46:60:30:d3:f2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E6AE64AD9D4663C874DC215DD0B9C469E99B53
        Validity
            Not Before: Apr 25 13:17:51 2024 GMT
            Not After : Apr 24 13:22:51 2025 GMT
        Subject: CN=F055E83A359083F59317A1312A557FCF7063CB27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b1:58:96:22:4e:a1:a6:a1:cb:ff:aa:e8:75:
                    98:aa:25:c2:89:fa:4a:c0:b8:e3:1d:4d:41:c3:cc:
                    3e:97:de:30:4e:06:0d:44:9b:fb:f6:3d:a8:e0:8e:
                    fc:f8:56:30:e1:94:7e:1e:3a:bd:e0:df:07:54:73:
                    a6:c6:e8:f6:60:42:2a:7b:09:25:d7:7f:0c:4a:3e:
                    c1:f7:b6:f4:70:6f:f6:7c:b7:fb:52:fb:3b:45:5b:
                    be:4b:a8:e2:55:ab:31:ee:34:72:6a:48:bd:32:74:
                    c5:71:f1:2f:7b:07:50:a2:7d:19:99:92:51:7b:f9:
                    25:d4:4c:88:c4:89:e8:37:03:3d:b0:a0:07:ff:91:
                    66:cd:24:a7:bb:3a:6a:b4:15:e6:9e:ac:80:5c:49:
                    d0:49:d2:16:06:c0:cd:29:16:6e:61:81:8f:8c:35:
                    7a:80:76:e1:d5:40:c1:ce:34:13:0e:81:d6:17:c3:
                    6e:6e:26:4e:f8:a2:44:6c:4f:46:99:1e:1f:cc:16:
                    5e:12:76:9a:cd:a8:9c:c5:79:dc:30:49:c9:2a:5b:
                    25:94:97:72:41:33:17:d6:ba:6a:1e:b4:75:00:39:
                    3a:30:89:f5:e1:21:2f:a4:74:a3:cc:3c:6c:1b:7b:
                    ff:46:e7:65:a1:dd:6a:26:af:7c:ee:59:f6:2d:94:
                    7e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:55:E8:3A:35:90:83:F5:93:17:A1:31:2A:55:7F:CF:70:63:CB:27
            X509v3 Authority Key Identifier:
                keyid:30:E6:AE:64:AD:9D:46:63:C8:74:DC:21:5D:D0:B9:C4:69:E9:9B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30E6AE64AD9D4663C874DC215DD0B9C469E99B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3133312e3232312e3231342e302f32342d3234203d3e20323634343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:89:8b:af:51:5b:04:69:75:28:33:7b:2f:e8:bb:fa:f2:5c:
         64:fc:d6:95:27:b0:4c:cf:c9:ef:6d:80:69:c5:6c:f9:f1:30:
         42:ec:67:7c:8c:fc:ce:7b:6e:b6:55:2c:0a:20:46:06:de:b1:
         07:5c:a3:e6:02:6e:68:7a:d7:0c:cb:91:15:90:26:37:13:d3:
         51:50:cc:67:19:e7:97:09:02:3b:3b:42:41:63:d2:93:9e:ea:
         92:3d:a3:0c:db:67:b0:f5:2b:e7:2e:77:78:9f:59:f0:cb:89:
         da:eb:ec:05:6f:c1:13:56:e6:2f:08:e4:e3:b6:8d:67:cb:ef:
         db:36:64:3c:e7:4f:16:6f:25:d6:19:2c:4d:5c:6c:d5:30:7c:
         06:0c:f9:87:37:63:a5:39:07:51:52:3a:61:f3:db:a6:f1:6b:
         77:24:fe:ff:d5:37:ac:29:6a:22:e2:2a:9f:16:47:c0:48:dc:
         d7:67:ab:26:4a:e9:8a:81:99:7d:b1:6c:02:a2:39:d9:67:61:
         89:c5:71:ec:1e:c9:69:a7:9d:44:5e:06:b0:fb:05:52:c5:4c:
         b1:ae:24:a3:b3:05:da:a0:39:37:e8:dc:49:74:88:f9:3a:fe:
         b9:9e:fd:33:c1:97:89:4a:d7:90:7d:4e:f8:7d:33:30:85:52:
         77:c3:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:13:32 2024 by rpki-client on console-ams.rpki-client.org