Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/3230312e3133312e3137362e302f32322d3232203d3e203631383230.roa
File:                     3230312e3133312e3137362e302f32322d3232203d3e203631383230.roa (raw, json)
Hash identifier:          sdHgg6PWq2yC2fMW3izgPppqlQkIopanDofpFEEB+28=
Subject key identifier:   E7:9A:D3:77:97:AD:CB:4B:AE:01:91:2E:48:C1:CF:1E:53:53:60:F0
Certificate issuer:       /CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
Certificate serial:       0108AC0C6AB38EDD62942AD43B85465A96AEBBAB
Authority key identifier: 80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/3230312e3133312e3137362e302f32322d3232203d3e203631383230.roa
Signing time:             Thu 04 Apr 2024 16:47:20 +0000
ROA not before:           Thu 04 Apr 2024 16:42:20 +0000
ROA not after:            Thu 03 Apr 2025 16:47:20 +0000
asID:                     61820
IP address blocks:        201.131.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.crl
                          rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:08:ac:0c:6a:b3:8e:dd:62:94:2a:d4:3b:85:46:5a:96:ae:bb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
        Validity
            Not Before: Apr  4 16:42:20 2024 GMT
            Not After : Apr  3 16:47:20 2025 GMT
        Subject: CN=E79AD37797ADCB4BAE01912E48C1CF1E535360F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:2f:bd:77:06:23:46:25:eb:6c:9c:de:a2:
                    36:88:27:87:24:b8:0c:1f:a2:4c:6f:0a:57:56:0f:
                    98:fd:a1:7c:fa:1c:72:2b:e1:d9:07:1b:ff:70:c8:
                    73:43:6f:46:f6:cb:34:89:eb:0c:2f:04:9b:d5:7a:
                    71:38:88:50:63:97:e5:36:15:12:06:90:db:a1:0d:
                    dd:69:b6:35:10:9f:ee:67:44:fe:62:9f:2b:e4:32:
                    43:9b:cd:c8:43:53:10:64:2b:f1:04:48:20:25:ef:
                    09:a2:11:d3:7d:00:b1:0e:18:46:ce:ae:68:0a:aa:
                    d9:f0:bc:ac:36:15:0d:7b:c3:41:2f:9c:d6:0a:81:
                    02:3c:07:df:35:57:a1:3b:da:13:61:6c:c7:e2:75:
                    af:12:4e:5f:53:83:ee:3c:be:5c:3a:13:cf:0b:4d:
                    57:30:6c:c5:4e:3c:eb:86:dc:68:9c:50:8b:1f:23:
                    e6:86:5b:1f:dc:91:84:5e:41:b5:1e:e7:2a:a3:c0:
                    66:36:1f:fc:df:22:5d:71:d0:ee:68:ad:2d:16:f9:
                    34:5e:0e:77:d4:65:20:81:1b:11:38:dd:89:13:38:
                    66:c5:15:27:f2:8c:e6:9a:bc:59:63:44:f0:00:7d:
                    cd:ad:0e:8f:aa:a7:d4:6d:3d:2a:f8:c3:40:01:64:
                    a5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9A:D3:77:97:AD:CB:4B:AE:01:91:2E:48:C1:CF:1E:53:53:60:F0
            X509v3 Authority Key Identifier:
                keyid:80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/3230312e3133312e3137362e302f32322d3232203d3e203631383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:8f:16:69:aa:b5:98:d3:0c:6c:6f:cc:aa:f3:3a:12:15:86:
         46:f7:0f:45:0a:47:e1:fd:33:73:31:3e:53:49:b2:70:66:c8:
         bf:f3:27:34:21:82:22:e5:fb:35:b6:0c:5b:59:dd:4e:3d:f6:
         26:cb:bd:06:a8:a3:1b:8f:a8:7f:0b:ae:ad:67:1e:57:32:08:
         72:25:b2:f5:7f:19:32:05:c1:50:a9:38:bb:c6:47:59:15:e0:
         5e:14:9b:33:40:2b:df:1a:51:66:a4:e8:8e:a2:a9:34:f1:46:
         19:4a:09:b6:d1:11:9f:51:13:39:85:11:d2:b5:fc:50:6d:dc:
         87:cd:56:3b:97:92:13:5a:e5:94:12:9b:43:61:99:56:55:4e:
         02:9b:70:a1:5b:7a:1f:3a:24:d7:0f:ed:75:9f:5c:f0:84:f6:
         a6:24:10:3f:4e:3a:63:47:ff:3f:17:b2:4a:73:56:f7:43:18:
         2d:87:03:c0:16:12:64:7c:25:cd:0d:0f:84:7c:b0:e5:26:4c:
         74:ff:72:f0:63:44:8c:c9:5c:99:ca:f7:3b:69:ea:2e:89:3f:
         9a:8e:d4:5a:68:77:d2:bb:05:6e:63:cd:4c:9c:fc:64:f2:1c:
         97:9a:52:dd:4b:27:97:2f:c6:4e:40:49:e9:fd:5a:e5:06:1d:
         78:d2:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:06 2024 by rpki-client on console-ams.rpki-client.org