Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e352e302f32342d3234203d3e20323730383936.roa
File:                     3133312e3130302e352e302f32342d3234203d3e20323730383936.roa (raw, json)
Hash identifier:          u0lsXVqR6/MDOpEEA3ZeID0nDNIVA8QeYE3Sja0b8GQ=
Subject key identifier:   0A:DC:B7:EA:7C:E1:0E:35:0A:C1:DF:F8:01:30:F6:DA:1D:B2:DD:FD
Certificate issuer:       /CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
Certificate serial:       15F78645FA245CB47508D54CC0EE511FE21CC056
Authority key identifier: 16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e352e302f32342d3234203d3e20323730383936.roa
Signing time:             Wed 15 May 2024 11:19:35 +0000
ROA not before:           Wed 15 May 2024 11:14:35 +0000
ROA not after:            Wed 14 May 2025 11:19:35 +0000
asID:                     270896
IP address blocks:        131.100.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl
                          rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f7:86:45:fa:24:5c:b4:75:08:d5:4c:c0:ee:51:1f:e2:1c:c0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
        Validity
            Not Before: May 15 11:14:35 2024 GMT
            Not After : May 14 11:19:35 2025 GMT
        Subject: CN=0ADCB7EA7CE10E350AC1DFF80130F6DA1DB2DDFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:7f:da:96:eb:59:09:b4:de:46:16:5f:d3:
                    33:3e:3b:50:07:a2:21:f5:f7:88:3d:65:be:00:63:
                    77:34:41:94:c8:07:ad:56:69:ea:9b:f9:d1:3d:99:
                    43:a3:f4:6c:87:7e:50:f3:51:04:64:c2:48:bf:a9:
                    90:3c:12:f6:c3:0f:ed:41:b2:81:e2:e0:32:b8:24:
                    a3:40:ac:cf:0a:0a:5d:44:02:87:0e:cb:42:0d:91:
                    ba:c3:72:a1:de:49:77:e6:dc:20:74:10:b4:1b:63:
                    ab:a1:07:ac:f5:2d:77:71:fc:3e:14:41:6b:75:8a:
                    c0:0c:d1:f0:9e:17:86:b0:e4:0d:30:e3:5e:4d:cc:
                    5e:fd:a2:6b:98:5f:cc:f5:57:7e:76:37:51:7f:7b:
                    4a:e9:48:f5:da:48:ab:82:d0:aa:16:ea:76:df:07:
                    de:e4:62:cf:31:8f:c6:b0:44:f4:ab:e0:61:e9:20:
                    d6:92:b9:b6:94:1d:ca:63:67:c2:e0:c8:af:d4:b4:
                    10:1b:8a:2e:e2:27:1d:51:b4:19:45:4e:6f:62:d1:
                    fd:b9:f8:01:cd:79:75:70:da:ed:0c:e0:39:0a:de:
                    eb:de:c1:ff:0c:87:45:5c:27:a1:e3:f1:b4:46:48:
                    fc:37:d9:7a:e9:f6:1c:e3:09:e4:07:9b:6e:6c:41:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DC:B7:EA:7C:E1:0E:35:0A:C1:DF:F8:01:30:F6:DA:1D:B2:DD:FD
            X509v3 Authority Key Identifier:
                keyid:16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e352e302f32342d3234203d3e20323730383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:11:9f:67:73:9a:bd:90:41:2d:c4:40:06:a7:40:82:5a:c0:
         54:a4:1b:7a:b3:fc:fd:ec:bd:4f:03:ca:2a:6a:10:39:a9:6d:
         1f:65:91:89:04:1f:e2:47:9e:4a:0e:44:de:09:13:ac:79:8c:
         cc:8a:2d:8c:fe:c7:43:48:ca:74:42:c5:37:2e:c7:14:b5:39:
         1b:f2:8a:50:88:74:0d:1b:fa:be:af:74:d6:f8:b7:85:e1:12:
         3c:e2:04:ab:bc:cd:04:08:5c:68:fe:71:c2:11:91:b7:8a:4b:
         1e:6c:4a:69:66:5b:2a:17:38:22:28:89:74:c2:3c:a2:bc:85:
         53:d9:2f:f5:f2:60:5d:97:f9:13:c4:4d:4f:c8:0e:06:7a:12:
         84:16:9e:3b:15:24:8a:eb:97:b1:9d:94:c4:7a:a0:51:51:8e:
         15:32:db:f7:00:fb:f1:c8:13:25:71:a0:0f:a8:2e:f0:f5:52:
         21:18:f5:35:d3:40:69:d3:61:25:45:90:c1:0f:d6:9a:fc:d0:
         ba:3b:af:2f:81:80:9b:90:be:4d:24:71:3b:19:35:e0:67:40:
         1d:91:a9:8d:af:7e:73:54:1d:c3:ec:35:68:a6:97:98:38:9f:
         8a:fc:af:27:d0:8f:c5:f6:36:5b:20:65:fe:e1:6e:c6:38:0a:
         17:b1:05:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:30 2024 by rpki-client on console-ams.rpki-client.org