Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa
File:                     3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa (raw, json)
Hash identifier:          G8hy+nbQ7didPcHS4LGlqIu3Zh4YXyURmv2GlbpmCFw=
Subject key identifier:   60:1B:6D:41:FC:DB:99:3C:79:1D:65:B1:C1:E8:2D:35:32:9E:2A:F1
Certificate issuer:       /CN=9D9E3DEED92D096161647544CB8DF6DBE1B40E12
Certificate serial:       41874BA0DE0244746B52869326D2DE210AE1115D
Authority key identifier: 9D:9E:3D:EE:D9:2D:09:61:61:64:75:44:CB:8D:F6:DB:E1:B4:0E:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa
Signing time:             Thu 04 Apr 2024 11:55:40 +0000
ROA not before:           Thu 04 Apr 2024 11:50:40 +0000
ROA not after:            Thu 03 Apr 2025 11:55:40 +0000
asID:                     265913
IP address blocks:        131.196.148.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.crl
                          rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:87:4b:a0:de:02:44:74:6b:52:86:93:26:d2:de:21:0a:e1:11:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D9E3DEED92D096161647544CB8DF6DBE1B40E12
        Validity
            Not Before: Apr  4 11:50:40 2024 GMT
            Not After : Apr  3 11:55:40 2025 GMT
        Subject: CN=601B6D41FCDB993C791D65B1C1E82D35329E2AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:da:95:ea:4b:cd:44:da:ab:d5:45:a9:a6:
                    aa:a4:ab:96:8f:5e:94:d1:1d:ff:df:74:87:ff:20:
                    de:60:c9:0f:f9:50:0d:d9:b8:ff:77:d4:f2:49:27:
                    db:54:b9:61:e6:58:ca:1a:e7:19:32:1d:1a:bd:1b:
                    b7:e6:93:5d:76:b6:95:99:6f:ce:a8:40:67:d1:77:
                    20:b7:37:c0:a5:44:5c:46:b2:a4:0e:f4:d5:21:10:
                    59:65:73:76:d0:c5:b5:16:a7:ca:8a:c2:e5:7b:29:
                    5d:24:06:40:60:bb:2c:77:37:cd:f7:c3:bd:a9:40:
                    c4:87:da:7b:99:75:dc:3d:ad:18:5b:70:d9:01:d6:
                    dd:da:81:2a:ea:9d:3a:44:df:4f:1a:ef:2d:c8:98:
                    f8:f7:d5:86:44:31:50:d0:78:4a:4a:f3:2e:c4:12:
                    8c:f9:e0:2a:9e:38:21:3a:3d:b5:6e:c3:46:b3:48:
                    25:9f:4d:1a:87:e2:88:19:98:2b:45:2d:02:72:fe:
                    e0:7d:da:b6:02:43:73:4d:7d:fd:97:0c:c4:21:5c:
                    13:79:1d:3e:04:d3:f4:3c:1f:64:c9:47:b1:6f:ba:
                    46:51:47:60:1a:55:be:39:76:0d:de:0b:76:9a:de:
                    55:dd:27:5a:46:9e:54:70:76:a3:7e:ea:d6:52:5e:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1B:6D:41:FC:DB:99:3C:79:1D:65:B1:C1:E8:2D:35:32:9E:2A:F1
            X509v3 Authority Key Identifier:
                keyid:9D:9E:3D:EE:D9:2D:09:61:61:64:75:44:CB:8D:F6:DB:E1:B4:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D9E3DEED92D096161647544CB8DF6DBE1B40E12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/1/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:2f:c3:64:0a:59:67:a8:84:2b:ad:bc:b6:74:8e:15:0c:
         95:26:7f:69:95:11:48:ec:e7:0e:2d:39:22:5a:fb:6c:68:64:
         7b:01:c3:b8:6a:dc:4d:68:5c:83:d4:b8:48:80:72:0c:38:3f:
         fc:75:f1:e8:28:5a:07:fb:dc:d1:d8:2a:7f:7d:22:36:c9:f8:
         b2:39:f7:95:ff:53:5e:7f:72:ec:3a:db:9b:91:b2:bb:a6:7c:
         0f:80:36:3b:c5:90:f6:4c:2b:70:72:1f:48:07:55:6f:92:18:
         28:84:4f:2e:d3:5c:2a:45:d2:39:bf:d6:c8:50:95:54:12:67:
         87:9f:94:31:e2:e1:00:79:9b:8b:75:eb:c1:bb:ba:20:8f:03:
         67:16:32:42:37:c3:fa:47:81:81:33:33:7c:b4:76:67:2a:06:
         91:e8:ed:43:2a:41:55:62:26:0b:f3:d4:b7:a9:16:8d:7f:d7:
         bf:11:87:f5:cc:5c:c0:4a:4a:f4:e8:22:fc:11:49:33:06:35:
         c8:28:49:75:c1:72:49:f8:12:46:13:5f:4c:7c:8e:97:01:39:
         ae:49:98:c2:5a:75:81:af:b6:0d:a9:ea:5f:6f:3e:62:0c:29:
         40:ad:dd:21:5f:4f:d3:cb:81:80:2d:64:30:35:74:8c:17:5a:
         0b:33:24:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org