Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa
File:                     3133312e3139362e37362e302f32332d3233203d3e203238323730.roa (raw, json)
Hash identifier:          t1Sc4qGvH2vHUh6p3E9fo0G2aXw77hU/oSFDaPEkxKQ=
Subject key identifier:   EC:20:C7:A8:20:71:C3:80:F3:50:DE:9D:2C:AD:FF:10:31:75:23:38
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       3569B0076131950D782F573B39E1E8CB5FFF8C6A
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:21 +0000
ROA not before:           Mon 09 Sep 2024 14:55:21 +0000
ROA not after:            Mon 08 Sep 2025 15:00:21 +0000
asID:                     28270
IP address blocks:        131.196.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:69:b0:07:61:31:95:0d:78:2f:57:3b:39:e1:e8:cb:5f:ff:8c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:21 2024 GMT
            Not After : Sep  8 15:00:21 2025 GMT
        Subject: CN=EC20C7A82071C380F350DE9D2CADFF1031752338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:67:41:96:5b:83:28:29:e0:d0:de:2f:0a:
                    21:02:3d:8d:99:8a:47:65:7d:2e:97:d1:e1:58:00:
                    d5:c3:4f:da:3b:47:60:6f:be:3a:2b:f6:37:11:55:
                    7f:a1:28:e2:10:b9:07:15:3c:b5:33:bf:f1:9c:2b:
                    39:d7:30:4f:e8:74:13:f9:fc:71:14:dd:b9:3b:3c:
                    83:d9:b6:37:e4:c6:50:e5:a9:8e:10:03:e5:10:e7:
                    16:a7:9e:55:e3:2f:f6:44:eb:cd:9a:44:6d:13:cf:
                    2e:e9:51:33:5a:d2:03:03:87:a2:94:4b:7e:23:92:
                    69:9f:18:63:4f:0c:e0:c6:d8:99:3e:94:cb:4f:ba:
                    33:f2:0e:7f:73:76:72:1f:2b:04:82:55:f1:fd:ed:
                    a1:1e:50:aa:af:ff:a9:df:82:2a:24:f7:87:b9:5d:
                    10:5e:da:76:c4:55:d1:4b:1c:e7:bf:7b:27:52:b2:
                    32:30:19:4a:25:d6:2b:e2:b5:1b:d6:52:76:32:aa:
                    4a:bb:4a:71:ea:66:1d:51:3b:52:7c:c1:4f:83:a1:
                    f4:54:38:17:0f:ab:ff:4c:87:aa:c7:62:ce:3e:7e:
                    e2:b3:3d:4a:d0:7f:55:50:c1:3e:6c:38:8f:94:5e:
                    0f:f1:11:7b:4e:9c:04:04:6b:69:b0:f1:2a:77:2f:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:20:C7:A8:20:71:C3:80:F3:50:DE:9D:2C:AD:FF:10:31:75:23:38
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:76:66:56:47:d5:de:56:d8:59:f9:f9:d5:10:d9:b2:4f:13:
         ce:20:78:49:e1:9b:28:31:9e:c2:03:95:4a:57:34:fc:72:81:
         83:b2:03:8d:23:04:bc:4e:47:d9:61:e5:17:d3:7e:8d:84:d7:
         4e:5c:68:fb:db:f4:49:87:30:68:f9:09:8a:0c:e2:24:62:e2:
         4c:4a:ab:0a:4d:92:10:11:29:d4:ad:9f:8a:fb:45:05:59:7a:
         65:93:aa:8d:ce:81:42:94:f3:d0:b7:4a:7f:07:96:75:6f:a0:
         3b:64:69:3f:ca:4b:76:14:37:b3:19:f3:bf:fd:24:49:20:0c:
         b7:71:de:bf:c4:1f:ac:c8:b1:57:db:75:60:fb:84:de:fd:dd:
         62:a4:f1:d4:5c:86:b5:b7:b2:32:7e:24:7a:d5:87:ad:53:1f:
         88:8d:5d:a6:66:bc:2c:7c:f7:31:a5:b5:93:63:15:56:10:95:
         d6:39:05:b7:99:11:20:03:0a:c6:0e:88:e3:58:6b:4d:d9:cf:
         0e:98:92:a0:66:ba:b3:cf:ce:a9:13:1d:0d:42:1a:77:37:90:
         5a:19:c5:8e:f8:99:6c:64:e7:77:02:5b:a5:82:9f:0f:42:b3:
         30:60:dc:e1:77:9b:74:8a:96:6c:c1:b1:e2:27:2b:0b:d7:89:
         2c:28:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:27 2024 by rpki-client on console-ams.rpki-client.org