Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234342e302f32332d3233203d3e20323632333933.roa
File:                     3133312e37322e3234342e302f32332d3233203d3e20323632333933.roa (raw, json)
Hash identifier:          YwZ0VXr025y6xgT7E4Gr5t3TMaFHfEMdFdKJZvg4+JI=
Subject key identifier:   E8:E6:A0:75:E6:29:EA:C3:02:B6:17:45:E7:02:80:0A:AD:76:59:B4
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       70EE965934D4B1F9145220D90F0F2B1FD01B87E5
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234342e302f32332d3233203d3e20323632333933.roa
Signing time:             Sat 24 Aug 2024 18:36:09 +0000
ROA not before:           Sat 24 Aug 2024 18:31:09 +0000
ROA not after:            Sat 23 Aug 2025 18:36:09 +0000
asID:                     262393
IP address blocks:        131.72.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ee:96:59:34:d4:b1:f9:14:52:20:d9:0f:0f:2b:1f:d0:1b:87:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Aug 24 18:31:09 2024 GMT
            Not After : Aug 23 18:36:09 2025 GMT
        Subject: CN=E8E6A075E629EAC302B61745E702800AAD7659B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:25:62:dc:70:75:26:71:84:86:85:db:fe:
                    a0:1f:15:61:3c:4d:10:2b:35:f3:f5:a2:fc:4c:27:
                    44:df:f2:d5:9a:ed:05:76:1e:4d:6c:e6:3b:06:3c:
                    b9:5c:07:91:8c:70:f7:d0:54:bf:07:10:94:6f:4f:
                    c8:ba:89:f8:cc:2e:d5:28:34:b2:07:e0:2e:17:ca:
                    0f:a0:57:ed:41:6c:ca:4f:b8:f3:5f:cd:f4:33:4f:
                    b4:3b:7a:1e:bd:75:2e:4d:4e:33:0d:62:9d:10:99:
                    03:da:f1:68:e1:28:04:bb:c0:8f:b5:d5:dd:7d:5d:
                    c2:bd:ef:56:f8:9a:22:f9:fa:d6:d8:48:b4:a5:f1:
                    51:a3:da:ff:ba:ae:4f:a5:f9:d9:9a:82:d1:8c:b6:
                    63:43:21:20:00:fc:ed:58:a3:27:4b:51:37:55:8a:
                    c7:ac:a2:47:4d:a1:d2:d2:53:20:42:1b:c8:b9:20:
                    3c:b0:02:ad:9a:dc:02:2e:c7:66:dc:bf:de:26:0e:
                    e6:07:65:b7:dd:cd:c8:2c:82:98:89:25:bd:f2:48:
                    20:d1:86:23:58:2d:1d:1a:63:f0:57:f7:84:47:ee:
                    e3:72:bb:06:47:f1:39:f1:d5:f1:f6:24:e7:69:7e:
                    76:fb:04:bc:2d:6d:04:a0:4e:87:4c:77:1d:81:92:
                    57:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E6:A0:75:E6:29:EA:C3:02:B6:17:45:E7:02:80:0A:AD:76:59:B4
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234342e302f32332d3233203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:00:df:80:f2:e5:ce:0e:b9:ed:d5:84:1b:1f:6c:05:5f:85:
         f2:0e:be:57:07:ba:d7:f0:b1:f1:67:0f:85:0c:42:60:a3:35:
         1c:4a:9e:42:3b:d9:c1:90:9e:e8:01:35:97:43:ff:71:b2:bd:
         ba:94:b3:91:41:8b:c2:b1:3b:74:65:65:56:e8:3f:19:ae:42:
         31:c2:93:a9:ed:ba:3a:8a:80:0f:37:ea:44:3f:2f:15:cc:52:
         bf:52:74:48:7f:c5:fb:01:e9:f1:fe:09:10:e0:70:b6:87:f6:
         b4:70:f1:ff:92:f6:a6:ea:b6:e3:b0:d2:26:62:6f:91:da:78:
         8b:c1:6d:83:99:17:f1:3c:5a:79:10:75:a3:53:0e:12:ce:b3:
         9d:7d:4c:40:f9:1b:5b:e3:09:2a:4b:8e:f0:bb:4a:fa:42:c5:
         a8:52:3c:6a:b3:20:8b:41:4c:15:df:65:a6:bc:b7:59:5f:1f:
         ac:1b:ad:d5:bb:95:37:ef:cb:e5:2a:e1:d1:c2:4e:a4:d3:95:
         47:81:22:33:a9:97:bd:3f:ce:9c:a7:a6:6f:82:da:e5:9f:1c:
         d5:92:10:e9:b2:9f:8f:1b:0c:0d:e4:31:8b:b3:76:1d:4e:0d:
         fa:40:d3:b4:d6:7f:3d:eb:a7:01:cf:f9:e8:cc:a1:24:7e:ad:
         12:a6:c6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org