Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3133312e37322e38302e302f32322d3234203d3e203238353834.roa
File:                     3133312e37322e38302e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier:          rlqlRDjIa4yXsxQRThszB2fnWfhtyOTZ9C1SHGxTbNk=
Subject key identifier:   F6:A8:1C:B4:BF:92:87:07:58:6F:D8:99:D8:79:B1:54:A4:02:90:3F
Certificate issuer:       /CN=31A0D65979DD9912F3B220BB4A873ED35729257C
Certificate serial:       190472FF309DA333E4908933FACFF13651C157
Authority key identifier: 31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3133312e37322e38302e302f32322d3234203d3e203238353834.roa
Signing time:             Thu 04 Apr 2024 19:02:44 +0000
ROA not before:           Thu 04 Apr 2024 18:57:44 +0000
ROA not after:            Thu 03 Apr 2025 19:02:44 +0000
asID:                     28584
IP address blocks:        131.72.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 01:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:04:72:ff:30:9d:a3:33:e4:90:89:33:fa:cf:f1:36:51:c1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A0D65979DD9912F3B220BB4A873ED35729257C
        Validity
            Not Before: Apr  4 18:57:44 2024 GMT
            Not After : Apr  3 19:02:44 2025 GMT
        Subject: CN=F6A81CB4BF928707586FD899D879B154A402903F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:9c:87:5b:68:2c:ca:bf:1c:e1:e3:92:3c:
                    78:03:44:e8:9f:38:48:01:30:8d:55:06:f1:6d:75:
                    05:cd:e4:4a:d5:07:c0:37:4f:dc:02:e4:ef:b2:a0:
                    4b:64:c0:34:2a:c9:43:d3:0b:eb:a2:e4:d5:e3:bd:
                    27:f5:82:87:fe:ea:26:0f:71:15:3d:b5:c3:a6:58:
                    bf:02:9a:32:f0:30:80:9c:f4:9f:79:45:4f:5f:0b:
                    3f:2e:bd:15:d8:15:cd:41:d9:0c:ce:aa:60:48:0c:
                    c7:a1:4e:9c:a0:b7:65:ce:6e:e5:0c:1a:be:5e:66:
                    98:c5:54:db:99:93:23:ad:27:a0:42:25:95:79:86:
                    75:fc:58:8f:90:3d:79:41:d8:2d:f4:e8:af:e7:ea:
                    ee:24:21:80:3c:a4:6d:ac:1a:1a:2a:36:f6:6c:c6:
                    5d:fd:16:b4:19:df:92:b8:bb:5f:44:9d:9e:7b:d0:
                    7d:57:ec:6a:56:7e:36:36:0d:f2:83:b6:87:eb:ca:
                    0b:48:e2:bb:cd:88:02:24:9f:66:ba:7f:c3:84:d4:
                    3f:dd:21:51:ac:ab:b6:78:9c:45:2e:a3:28:7a:d3:
                    bd:04:a2:a8:c2:b7:22:5c:0f:ca:91:4b:dc:2d:57:
                    02:bc:8b:da:da:e0:a8:62:cb:b6:80:20:f5:37:b8:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A8:1C:B4:BF:92:87:07:58:6F:D8:99:D8:79:B1:54:A4:02:90:3F
            X509v3 Authority Key Identifier:
                keyid:31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/3133312e37322e38302e302f32322d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:77:55:b7:ae:ad:b2:4d:7a:09:6b:70:c1:bd:82:77:4c:9f:
         a3:ae:ff:ff:7b:cb:77:f4:63:79:ae:bb:d2:1d:15:16:09:e7:
         6f:53:16:84:22:08:73:6a:66:25:84:53:84:53:b8:fc:50:a0:
         b2:d4:6f:54:c1:64:c2:89:76:c9:b6:cc:54:22:67:36:cd:51:
         68:c5:c0:f8:ca:71:af:7b:e8:a4:e5:61:e1:1f:ee:ba:e1:2c:
         be:24:39:cf:bb:13:c1:15:af:ef:de:bf:11:95:69:16:3b:16:
         8f:96:7a:4c:8f:06:72:34:f7:70:05:7d:8b:67:fa:2a:4c:fa:
         f8:08:e2:23:9f:cb:d3:e3:b0:62:18:ba:c6:d7:c0:73:fb:c1:
         24:3f:62:d8:83:8a:06:66:9c:7e:a1:13:25:b2:9c:dd:47:53:
         34:5e:a8:0d:9b:82:62:38:0b:58:40:26:38:72:c2:00:8c:fe:
         f7:81:b1:da:3e:70:c0:07:73:67:64:18:5b:16:e5:ff:5f:46:
         29:c5:62:fd:5e:44:3a:10:b9:1d:75:25:90:bf:af:ac:58:22:
         05:35:48:f4:72:23:92:9a:fc:2b:df:b0:4b:09:49:d6:4d:09:
         9b:1c:a0:72:6b:52:dc:ba:49:dd:41:53:88:a7:52:d7:38:b5:
         b4:5a:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:54 2024 by rpki-client on console-ams.rpki-client.org