Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/3230312e3133312e3137382e302f32332d3233203d3e203631383230.roa
File:                     3230312e3133312e3137382e302f32332d3233203d3e203631383230.roa (raw, json)
Hash identifier:          ZqAmE9seeIBvSQ0FtQf2hmgDinuYqKWWIn2RCkd9J1U=
Subject key identifier:   1E:B8:68:12:89:B4:48:26:E4:8E:99:3F:0D:F6:85:1D:DF:F2:95:3C
Certificate issuer:       /CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
Certificate serial:       7AAFEBD0AA76E384BB98AE6220793362B444B277
Authority key identifier: 80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/3230312e3133312e3137382e302f32332d3233203d3e203631383230.roa
Signing time:             Thu 04 Apr 2024 16:47:21 +0000
ROA not before:           Thu 04 Apr 2024 16:42:21 +0000
ROA not after:            Thu 03 Apr 2025 16:47:21 +0000
asID:                     61820
IP address blocks:        201.131.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.crl
                          rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:af:eb:d0:aa:76:e3:84:bb:98:ae:62:20:79:33:62:b4:44:b2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC
        Validity
            Not Before: Apr  4 16:42:21 2024 GMT
            Not After : Apr  3 16:47:21 2025 GMT
        Subject: CN=1EB8681289B44826E48E993F0DF6851DDFF2953C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ef:c3:67:46:3f:3a:60:a7:4c:ba:76:ae:28:
                    c3:5c:08:90:8c:4c:0a:70:06:2a:50:db:90:1f:4c:
                    39:d8:fc:48:bd:0a:9a:15:f7:94:92:97:2c:30:c4:
                    25:2b:35:17:1d:b4:02:1f:5f:c4:6a:c9:39:df:6c:
                    c6:db:92:4e:6d:af:02:be:ce:af:2d:b0:a2:38:81:
                    61:1e:f0:a9:39:75:bd:85:8f:e9:2e:b4:28:52:c0:
                    b4:61:a4:77:38:b7:16:9e:b0:82:a7:55:dd:aa:8b:
                    36:63:b0:8c:77:76:ba:55:85:81:95:4f:70:d5:70:
                    be:fb:f5:d5:a4:51:db:3b:dd:a1:48:12:8e:b8:29:
                    3e:5b:18:84:98:be:f1:57:31:e5:23:b9:3a:ee:8e:
                    83:f3:75:2e:88:91:89:af:9f:a0:dd:02:55:3c:33:
                    24:f1:6d:00:73:b5:da:3c:f1:bd:4c:bb:41:2b:45:
                    ef:51:97:ad:08:ce:4c:bd:bf:c3:f4:67:9d:43:a2:
                    83:66:fb:6a:8d:dd:9c:71:86:00:77:68:52:ad:7b:
                    be:a5:70:c7:6b:f3:94:20:bf:a5:d6:19:08:f9:86:
                    fa:dd:d0:1e:eb:60:a9:3d:ad:4e:c1:a3:99:fa:9d:
                    f3:08:3e:57:a6:34:19:81:99:1f:19:b3:c6:71:02:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B8:68:12:89:B4:48:26:E4:8E:99:3F:0D:F6:85:1D:DF:F2:95:3C
            X509v3 Authority Key Identifier:
                keyid:80:93:B4:BD:8F:E0:7A:F6:9B:F3:09:FB:C4:AA:60:71:DE:9B:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8093B4BD8FE07AF69BF309FBC4AA6071DE9B95CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58r7ptp47VugcuAnTLjz6vTDipGNi7CHVRzt37JQaXdu/1/3230312e3133312e3137382e302f32332d3233203d3e203631383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:25:06:f9:7f:57:28:d6:05:c7:6f:e6:60:1c:71:7c:9f:9b:
         0b:02:9b:c2:f5:09:c9:bf:e3:80:be:5d:66:0d:64:55:d1:0a:
         37:eb:59:f1:b7:b5:5d:eb:51:d5:1e:cd:75:fa:a2:2a:af:57:
         00:93:a3:f5:24:d7:a1:6a:1b:a7:fb:4e:fe:0e:db:cb:de:99:
         af:54:51:72:f4:94:80:68:3a:76:1d:d1:8f:01:d6:ec:32:e2:
         a2:ee:ab:38:1e:86:45:8f:2d:60:26:89:59:ac:41:6b:3e:a6:
         5b:26:84:b2:44:8f:2b:f6:c6:5f:7a:02:9d:e0:d1:ce:34:26:
         b0:2b:c8:b9:83:04:a2:73:a9:fe:91:05:38:20:bd:f2:21:c5:
         59:4d:b3:e5:3d:90:08:aa:76:24:c1:06:f4:17:05:64:5d:61:
         45:16:12:fa:6b:7f:6b:5c:73:2c:c5:85:e2:24:d7:85:64:7b:
         68:e7:9c:0e:cf:c6:21:0c:c6:c6:5f:c1:dd:a6:17:63:9b:81:
         0d:39:35:ae:83:8e:9e:00:89:72:6f:7a:36:25:2b:4e:72:32:
         74:45:82:fb:fb:ec:bd:c8:bb:98:c2:f1:82:a6:c5:43:95:ac:
         b7:b3:f4:e4:65:88:dc:90:c9:20:d2:f8:97:09:2b:6c:7b:a7:
         1b:40:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:06 2024 by rpki-client on console-ams.rpki-client.org