Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa
File:                     3133312e302e3132342e302f32322d3234203d3e20323731313333.roa (raw, json)
Hash identifier:          +vQgHcHBTuNKF8FEbea62+zrAqrCxkCw/bnehPrG9Bg=
Subject key identifier:   3C:0C:4B:03:12:D9:A1:1B:92:22:9A:7A:4E:FD:19:85:44:5E:A0:73
Certificate issuer:       /CN=78AA122D57FF86AEFDBC446F6AED242B4F525010
Certificate serial:       6B8E124FFAD37F1D6F901805B42F34F20039AF
Authority key identifier: 78:AA:12:2D:57:FF:86:AE:FD:BC:44:6F:6A:ED:24:2B:4F:52:50:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa
Signing time:             Tue 16 Jul 2024 08:21:33 +0000
ROA not before:           Tue 16 Jul 2024 08:16:33 +0000
ROA not after:            Tue 15 Jul 2025 08:21:33 +0000
asID:                     271133
IP address blocks:        131.0.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.crl
                          rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 11:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8e:12:4f:fa:d3:7f:1d:6f:90:18:05:b4:2f:34:f2:00:39:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78AA122D57FF86AEFDBC446F6AED242B4F525010
        Validity
            Not Before: Jul 16 08:16:33 2024 GMT
            Not After : Jul 15 08:21:33 2025 GMT
        Subject: CN=3C0C4B0312D9A11B92229A7A4EFD1985445EA073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:60:5e:19:6d:ca:45:36:9a:ab:e0:39:ad:
                    63:fd:e0:f4:6b:2c:6f:5e:c5:3c:21:5d:e0:5d:64:
                    c9:13:3c:b8:b2:c5:c9:d7:13:e0:d9:ed:80:eb:ae:
                    83:fe:22:a4:68:2a:f2:b9:f9:aa:c0:0a:84:27:ba:
                    64:ac:c9:83:45:c3:e5:ed:15:e7:8e:3f:8a:5c:fc:
                    0e:36:42:bf:8e:43:0f:8f:f6:40:17:60:26:71:45:
                    b1:b4:b4:cc:65:9c:fd:eb:7e:e1:19:ac:27:c1:20:
                    e8:10:31:f4:2f:67:2a:4b:7a:d2:c8:c9:03:27:3d:
                    f2:08:07:63:9d:9d:bf:ee:fb:36:52:b0:b4:a3:3a:
                    14:d2:c9:2f:a7:19:ff:ac:38:49:19:45:77:ff:25:
                    b1:16:1f:9d:c9:f5:3e:a5:ee:7d:75:3c:1c:e3:03:
                    83:1d:3b:c5:bd:eb:b6:1a:ef:f2:7e:07:19:b0:c7:
                    03:86:cb:d9:1a:09:a7:15:36:a7:fc:f4:df:12:44:
                    e0:5e:1e:87:9d:a4:68:26:c8:27:f4:79:ff:6e:00:
                    72:db:c9:1e:0a:fd:c2:04:9d:0b:c1:62:77:96:8a:
                    2a:97:7a:64:5a:b0:4c:59:4d:05:7f:ef:0f:17:09:
                    6a:16:ff:75:e8:a2:2a:96:b0:b9:13:47:b7:a6:64:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0C:4B:03:12:D9:A1:1B:92:22:9A:7A:4E:FD:19:85:44:5E:A0:73
            X509v3 Authority Key Identifier:
                keyid:78:AA:12:2D:57:FF:86:AE:FD:BC:44:6F:6A:ED:24:2B:4F:52:50:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/78AA122D57FF86AEFDBC446F6AED242B4F525010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78AA122D57FF86AEFDBC446F6AED242B4F525010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ywLYp6ohkSeucrwntG3C4q6m9LibJb4KxPPdbKsXeG5/0/3133312e302e3132342e302f32322d3234203d3e20323731313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:b3:be:d3:a2:e7:a4:bc:fc:ef:bb:0d:00:c8:44:ca:52:74:
         d8:b8:58:0a:91:95:4e:32:b8:75:6c:ae:cc:e6:89:a4:70:65:
         c5:4f:a9:f5:df:9c:95:36:fa:be:a9:b1:68:1c:80:f5:3f:7e:
         af:f2:09:ed:0c:b6:a5:ac:4f:28:b0:4b:34:51:31:b8:56:04:
         d8:d3:59:12:7e:dd:0d:4c:71:7f:34:7a:c7:1d:d0:23:7c:4c:
         bb:43:65:22:32:c0:8c:44:a0:44:32:37:4f:fa:6d:df:bf:4c:
         16:0f:ec:02:34:9c:4c:ec:72:e7:57:11:bc:00:b1:53:bc:db:
         75:6d:1b:f8:d7:6f:66:98:f9:6c:7c:54:de:ca:9f:68:e0:6f:
         76:97:d6:ef:76:f7:dd:ef:4d:d6:2a:28:97:ce:85:98:98:f3:
         ec:93:d1:18:8a:26:33:46:d1:7b:97:4f:4d:25:de:97:14:8b:
         e6:a7:db:2f:54:4c:7e:2b:5e:62:91:ec:64:b3:43:11:84:11:
         37:d5:2f:f2:58:e9:cc:8f:78:af:9b:37:d4:0e:03:3c:d8:40:
         49:97:a6:5d:a7:36:86:3f:da:aa:0c:6e:a3:00:47:55:39:71:
         25:ac:89:76:69:fa:7a:f5:26:32:2b:11:6f:a7:d5:45:42:9e:
         55:b0:dd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:23 2025 by rpki-client