Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa
File:                     3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa (raw, json)
Hash identifier:          vg7iYMng5TlLB4RCAIWxpvMod9uR4R4IEGBZiq2dARs=
Subject key identifier:   23:E7:A0:40:3C:14:57:F9:A4:E8:18:FB:8C:C5:8C:16:20:D0:22:69
Certificate issuer:       /CN=21F56257920CE88D55FEE0E1D369CE905FA2782B
Certificate serial:       39B5394467CDEDA5417A26349322D318C8C289B9
Authority key identifier: 21:F5:62:57:92:0C:E8:8D:55:FE:E0:E1:D3:69:CE:90:5F:A2:78:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa
Signing time:             Thu 04 Apr 2024 05:39:15 +0000
ROA not before:           Thu 04 Apr 2024 05:34:15 +0000
ROA not after:            Thu 03 Apr 2025 05:39:15 +0000
asID:                     264415
IP address blocks:        131.221.20.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.crl
                          rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b5:39:44:67:cd:ed:a5:41:7a:26:34:93:22:d3:18:c8:c2:89:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F56257920CE88D55FEE0E1D369CE905FA2782B
        Validity
            Not Before: Apr  4 05:34:15 2024 GMT
            Not After : Apr  3 05:39:15 2025 GMT
        Subject: CN=23E7A0403C1457F9A4E818FB8CC58C1620D02269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:94:63:15:6c:e9:7f:1f:bf:88:63:c0:81:
                    df:a5:e6:d0:c8:1a:2c:90:a6:34:b6:54:d4:5b:97:
                    88:27:67:33:c0:d8:f1:d5:a5:db:8d:31:9a:2a:cb:
                    43:a1:b9:49:0f:97:4e:de:9a:ed:b5:21:74:73:7f:
                    9c:b2:35:a8:63:8f:d9:75:e8:8a:4e:43:d3:28:e3:
                    49:7b:16:79:59:69:47:20:b6:61:16:d6:95:30:7a:
                    74:73:c0:bd:92:5a:d7:20:a5:6e:65:ec:5a:fc:8e:
                    1a:ad:df:34:1f:70:c8:7f:0e:2a:65:3d:d6:f7:86:
                    b4:27:07:ca:1a:93:a1:e1:9e:bc:af:e4:53:80:8a:
                    11:af:c0:19:9a:0e:56:7c:2c:35:82:3b:14:59:79:
                    b8:4d:fc:8e:01:6d:76:8c:24:f1:c9:03:83:b8:6a:
                    ea:a8:20:75:f0:75:27:3e:f2:6b:80:a0:e7:87:1c:
                    d6:99:4f:4b:b1:2a:6b:fa:e3:de:0d:30:10:83:66:
                    65:cc:a3:48:91:01:f5:38:73:9b:82:bb:38:a5:58:
                    7c:47:43:e6:71:d4:55:2e:f0:66:a1:20:72:d3:c9:
                    8b:d9:61:45:28:aa:27:c1:d7:a3:cb:9e:32:d9:62:
                    e5:5c:18:4d:bc:7a:27:41:0d:c0:bf:27:18:e9:96:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E7:A0:40:3C:14:57:F9:A4:E8:18:FB:8C:C5:8C:16:20:D0:22:69
            X509v3 Authority Key Identifier:
                keyid:21:F5:62:57:92:0C:E8:8D:55:FE:E0:E1:D3:69:CE:90:5F:A2:78:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F56257920CE88D55FEE0E1D369CE905FA2782B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5N8ABw29qTBm55JUg93JsL6T1aq9RLDKhwBMwyykndAN/1/3133312e3232312e32302e302f32322d3332203d3e20323634343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:6b:65:3b:ef:96:9c:0a:3d:72:d6:6e:9f:71:31:83:32:cd:
         17:8a:ae:69:fd:e3:cb:38:1c:52:0d:31:d5:28:e6:31:79:19:
         7b:be:4f:0b:bc:a1:38:29:e5:15:99:26:14:dc:7e:be:b8:6b:
         56:e7:dc:a4:3f:84:04:7a:81:84:da:be:e5:f1:cd:1f:cb:e3:
         88:dc:08:e5:f4:29:f0:4a:a4:fb:be:92:91:82:37:23:76:d0:
         fa:f2:81:41:d0:47:f6:3b:9f:7f:dd:ba:0f:e7:1b:0f:7e:2f:
         c3:73:de:48:d5:f3:32:e5:48:fc:69:0c:ef:fc:1f:fb:5f:bf:
         d3:26:62:1e:4e:43:8d:ee:a0:25:60:63:eb:c6:31:66:23:c6:
         21:89:ee:f0:7b:91:09:0b:ce:8b:3c:1d:ed:d5:d0:8b:90:a3:
         ac:23:17:85:df:e0:40:cf:99:2c:13:8f:38:9d:d3:5a:1d:5e:
         a7:97:0e:67:70:fc:a8:8c:02:d9:67:aa:83:eb:88:78:e7:82:
         9c:8b:1c:54:27:f2:aa:4d:1e:b3:a3:36:0b:3d:03:8e:37:7a:
         57:52:11:f7:36:75:6c:7d:5e:c4:e6:4b:88:9f:ee:f1:6f:a6:
         2e:ec:a0:b6:c9:db:c9:4e:53:ec:59:62:29:3c:13:08:8f:70:
         2a:46:d7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:37 2024 by rpki-client on console-fra.rpki-client.org