Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e362e302f32332d3233203d3e20323730383936.roa
File:                     3133312e3130302e362e302f32332d3233203d3e20323730383936.roa (raw, json)
Hash identifier:          jkJ/8OQAidOvWClqvDQNsrWEjjuUGtq6H9d71ZO8qmU=
Subject key identifier:   26:90:0D:B9:B4:89:9A:26:33:B5:37:40:89:99:4A:D7:58:B1:9B:A4
Certificate issuer:       /CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
Certificate serial:       3CD1D80F64F294F421C9A078EAAE473AD724F08F
Authority key identifier: 16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e362e302f32332d3233203d3e20323730383936.roa
Signing time:             Wed 15 May 2024 11:19:36 +0000
ROA not before:           Wed 15 May 2024 11:14:36 +0000
ROA not after:            Wed 14 May 2025 11:19:36 +0000
asID:                     270896
IP address blocks:        131.100.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl
                          rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d1:d8:0f:64:f2:94:f4:21:c9:a0:78:ea:ae:47:3a:d7:24:f0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1642ED1962DD5C84CEF56FE031F3682E90A6BFB4
        Validity
            Not Before: May 15 11:14:36 2024 GMT
            Not After : May 14 11:19:36 2025 GMT
        Subject: CN=26900DB9B4899A2633B5374089994AD758B19BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:0c:8f:a3:67:6c:47:1d:37:6e:42:6f:c6:
                    16:d4:03:df:18:b2:e7:09:d9:1e:4f:1f:81:e3:30:
                    54:d9:d0:b5:4f:2a:67:3c:f1:b3:87:5c:00:f8:0e:
                    f7:79:af:48:7d:12:68:0a:ec:21:74:ca:3d:2c:42:
                    98:d6:a1:42:b5:16:4a:dc:a4:91:0d:72:80:e4:80:
                    a0:61:1f:a2:0a:c2:75:f8:9f:c7:90:43:fa:39:1f:
                    b1:ba:2f:cf:a6:bd:12:fd:af:da:91:8f:37:53:1c:
                    ec:ac:0e:13:7d:61:60:b7:f2:b8:64:19:19:6c:49:
                    80:c7:91:68:24:ae:d4:db:d7:a1:4e:1f:3a:d4:31:
                    a8:71:f4:6c:a7:66:b3:8e:d7:44:14:53:97:ee:11:
                    1f:87:81:f1:2a:54:59:d5:69:32:6e:f8:4b:05:bf:
                    f8:85:ce:58:9b:66:6c:99:e5:9d:28:e1:b1:0b:1a:
                    8a:bf:31:02:66:5e:6f:35:43:00:39:d4:30:c7:5c:
                    24:32:5b:e2:57:8f:c7:50:34:bc:67:e0:ea:ef:49:
                    ef:95:ae:44:f0:63:e8:60:ba:a3:2a:16:e2:f0:47:
                    01:39:96:04:62:65:c3:38:ca:36:15:27:e9:4e:cd:
                    6d:78:3f:9c:81:4c:8d:80:9e:c0:5f:1f:b3:a9:0b:
                    c1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:90:0D:B9:B4:89:9A:26:33:B5:37:40:89:99:4A:D7:58:B1:9B:A4
            X509v3 Authority Key Identifier:
                keyid:16:42:ED:19:62:DD:5C:84:CE:F5:6F:E0:31:F3:68:2E:90:A6:BF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1642ED1962DD5C84CEF56FE031F3682E90A6BFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rW8WXcbdDCWtwg2kndmiuzaZGr6u1HTmuuwjNEikY3d/0/3133312e3130302e362e302f32332d3233203d3e20323730383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:42:39:9d:e9:0f:15:3a:8b:f4:9e:d5:8c:ef:d5:9e:7c:bc:
         91:7f:cd:d3:d8:b6:b0:56:43:12:bf:b2:46:72:94:94:03:ee:
         65:01:65:9d:dd:20:dc:7f:69:e0:ed:d1:f0:a4:74:fa:bc:2b:
         71:15:16:26:4e:f3:73:01:3a:82:4f:70:02:33:c5:88:d0:04:
         d1:6f:2c:6f:c1:e2:63:83:5b:01:56:84:40:5a:de:10:22:3f:
         72:53:43:40:81:d4:96:39:40:67:aa:ec:64:a1:f6:fe:be:b7:
         8d:61:89:94:a5:22:c3:92:83:97:97:4f:4b:4a:62:c3:56:17:
         d0:66:c4:ef:5f:c0:8d:4f:7e:45:90:ed:90:ef:81:c7:7f:05:
         98:28:f3:9c:cd:a9:b7:08:f0:08:06:0b:17:7b:da:47:16:ee:
         52:05:36:47:85:1d:31:7a:d5:26:38:da:cb:3c:91:c6:a1:34:
         13:60:62:46:84:b6:1d:37:ce:1f:db:d3:04:f6:44:5f:a4:92:
         5d:65:bc:ca:90:02:0e:de:e5:2e:ba:e9:c3:4b:12:cd:77:44:
         c3:60:e6:db:fa:91:53:6e:23:ad:48:87:a2:61:fd:1a:b6:ce:
         ba:a4:78:aa:63:55:53:58:9a:08:d4:b3:2d:7f:b6:fe:66:e3:
         3c:c8:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:47 2024 by rpki-client on console-fra.rpki-client.org