Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32322d3234203d3e20323634343134.roa
File:                     3133312e3232312e36302e302f32322d3234203d3e20323634343134.roa (raw, json)
Hash identifier:          QzBkC9QqDDkbfrQkirDujNOcCLCs4ea/uM47Gzrr/Fw=
Subject key identifier:   A0:0D:B4:B3:73:A1:85:7F:49:E3:56:36:0E:7E:74:B7:95:2E:A2:30
Certificate issuer:       /CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
Certificate serial:       1D119CCE4472BFD36CB8F4BA05046AAC924256B1
Authority key identifier: 0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32322d3234203d3e20323634343134.roa
Signing time:             Wed 05 Jun 2024 19:23:09 +0000
ROA not before:           Wed 05 Jun 2024 19:18:09 +0000
ROA not after:            Wed 04 Jun 2025 19:23:09 +0000
asID:                     264414
IP address blocks:        131.221.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl
                          rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:11:9c:ce:44:72:bf:d3:6c:b8:f4:ba:05:04:6a:ac:92:42:56:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
        Validity
            Not Before: Jun  5 19:18:09 2024 GMT
            Not After : Jun  4 19:23:09 2025 GMT
        Subject: CN=A00DB4B373A1857F49E356360E7E74B7952EA230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:ce:2f:1b:7f:21:c3:71:b8:49:31:70:f1:
                    b8:95:ef:fd:36:48:46:2f:b5:71:93:a7:68:5d:c4:
                    2f:25:04:21:92:1c:54:3d:bb:5c:b2:26:de:4e:6c:
                    d9:0d:e3:f3:19:83:d5:29:ab:e5:d4:d5:4a:f9:8e:
                    61:eb:a4:35:14:89:c1:2a:39:e8:bc:64:4c:b2:76:
                    09:c6:b1:f1:57:3a:90:67:8e:8b:32:83:36:e8:e0:
                    ee:60:c6:6c:3e:ac:26:21:e0:39:b0:52:37:7c:45:
                    16:da:21:51:87:4c:0e:d2:04:e3:2b:84:7f:3e:b9:
                    e4:cc:94:43:f2:da:b5:1d:31:ea:29:cf:86:b4:cb:
                    86:49:da:1d:8d:81:4c:d2:da:4d:59:e1:75:4d:c8:
                    33:31:a4:78:59:bd:9e:10:c7:70:d4:29:f5:2b:d9:
                    f6:9d:3d:75:82:64:f7:a7:16:ce:a5:7d:40:2f:6c:
                    4b:82:bd:df:16:d1:e2:84:17:30:f1:b8:f8:9c:ab:
                    7c:9d:01:4c:c4:cc:d9:a7:13:61:d7:3e:58:3b:2f:
                    ed:7c:f0:92:90:15:87:bc:46:0a:af:fb:0b:f3:2d:
                    38:31:a5:33:cb:de:dc:11:e5:44:56:85:e8:3f:9d:
                    eb:04:f7:c7:72:1a:aa:3c:10:84:71:87:49:ed:b5:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0D:B4:B3:73:A1:85:7F:49:E3:56:36:0E:7E:74:B7:95:2E:A2:30
            X509v3 Authority Key Identifier:
                keyid:0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/3133312e3232312e36302e302f32322d3234203d3e20323634343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:40:eb:10:8c:de:de:65:ca:36:f2:a1:82:1d:ed:64:f1:21:
         47:fe:d6:94:9a:67:66:e8:4c:05:d0:75:41:12:33:ff:b3:19:
         aa:67:12:a5:0c:ea:9c:d3:31:0b:fe:5c:ee:71:34:f0:b5:19:
         6a:7e:05:ae:12:58:68:2c:ca:e3:7c:5a:d6:f6:fd:69:a5:49:
         3b:a5:e6:73:18:33:7c:78:61:a2:c0:16:02:e6:d5:10:2f:f6:
         5c:71:f4:3f:d2:45:19:ab:3e:18:c8:bf:e7:07:ed:8c:5b:56:
         9a:92:33:46:2a:78:5f:11:8d:bc:61:d8:f4:27:23:ed:e1:49:
         58:4d:cc:f4:d8:1a:3a:5c:db:4e:33:65:bc:bb:ec:74:57:f5:
         b6:5e:6e:3d:19:96:c0:6f:61:f4:75:7b:92:14:cb:06:10:4e:
         0e:c3:b7:d6:26:4c:4b:43:3d:52:01:3b:12:eb:59:3d:8f:a3:
         3e:c3:63:53:e1:1d:14:a7:09:36:91:c8:12:82:63:9f:ec:7a:
         db:f6:ed:60:98:6c:da:51:96:f2:f2:57:a0:48:bc:1a:5a:d3:
         e7:71:18:be:b2:ac:75:0a:b4:d2:77:d9:95:36:bb:32:03:6a:
         48:ba:2a:b0:8d:70:e4:2e:85:bb:65:67:6b:cd:f4:39:a5:ee:
         59:da:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:13 2024 by rpki-client on console-ams.rpki-client.org