Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133312e3130382e37362e302f32322d3232203d3e203631363636.roa
File:                     3133312e3130382e37362e302f32322d3232203d3e203631363636.roa (raw, json)
Hash identifier:          Q+i7+S2xVOAQW/jV1JyZjX7QfJuRcBfH7VtUWn4QMwg=
Subject key identifier:   C7:BF:7F:0B:F6:3F:4C:73:EA:75:0A:C8:58:94:81:0F:26:BD:24:7D
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       594CF13359E985C8D36E76C5D3EFC0D006003B28
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133312e3130382e37362e302f32322d3232203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:07 +0000
ROA not before:           Wed 03 Apr 2024 20:19:07 +0000
ROA not after:            Wed 02 Apr 2025 20:24:07 +0000
asID:                     61666
IP address blocks:        131.108.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4c:f1:33:59:e9:85:c8:d3:6e:76:c5:d3:ef:c0:d0:06:00:3b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:07 2024 GMT
            Not After : Apr  2 20:24:07 2025 GMT
        Subject: CN=C7BF7F0BF63F4C73EA750AC85894810F26BD247D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4a:07:0f:e8:d1:3d:20:b1:32:1f:42:e0:31:
                    30:0f:4e:00:0a:b1:03:18:8a:5e:70:74:c1:ea:1e:
                    f2:f1:b0:9d:b4:35:c9:c8:7d:17:3c:87:39:49:93:
                    24:74:71:1e:ed:79:bd:4d:c4:8a:58:1d:ba:37:29:
                    a2:38:32:a3:0c:66:b5:70:8b:05:67:31:cf:e2:f2:
                    8e:59:cd:7d:85:41:df:7a:f9:56:c0:c1:e2:bc:17:
                    83:3e:ad:e7:54:23:b0:5a:9a:01:33:02:e9:92:aa:
                    a3:b1:28:a6:c3:bb:f3:ac:69:15:22:95:03:2e:63:
                    27:f8:60:8c:cc:27:0f:11:ae:4c:0c:94:e7:c6:50:
                    e5:46:81:87:da:f0:72:4e:13:7c:61:69:03:6c:3c:
                    01:43:a3:1e:82:08:29:20:79:d4:b0:68:2d:f9:91:
                    91:bc:e1:b3:e8:7b:27:66:78:7e:8e:7e:3a:47:ee:
                    bf:22:3b:0d:91:79:a6:a4:bf:a6:e2:81:5b:05:93:
                    91:44:11:94:4f:52:67:40:13:77:dd:b4:1b:df:9e:
                    05:1c:eb:e1:f0:d5:d6:cf:15:c0:01:e0:63:3e:2a:
                    a2:4e:dc:cd:7f:1a:ab:d7:3f:77:93:8a:d1:56:76:
                    eb:ca:ed:14:92:1c:2c:76:4b:5f:24:1c:fb:a4:0b:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BF:7F:0B:F6:3F:4C:73:EA:75:0A:C8:58:94:81:0F:26:BD:24:7D
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133312e3130382e37362e302f32322d3232203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:e4:23:33:06:de:67:fb:66:37:2f:20:e2:04:ec:46:4a:0a:
         0f:de:c5:96:51:29:15:e3:cb:3e:c8:83:08:cd:39:db:53:48:
         e1:04:37:68:1f:b4:a7:d6:5f:93:e5:e2:1f:a8:4b:00:e5:c8:
         db:36:cb:29:b5:c3:1d:8c:3b:d2:d1:f3:80:b4:fb:2d:79:48:
         33:d7:f8:55:7c:f2:e1:42:25:e3:0f:26:d5:d5:89:3a:51:2c:
         58:73:70:76:fa:52:f6:33:d2:df:7f:3e:09:91:04:23:08:5c:
         56:fb:fa:cf:d7:67:af:12:c6:f1:53:5b:5f:23:0f:57:d2:0c:
         b7:b1:3b:2e:5b:2c:ff:40:8d:9b:0e:ee:af:df:5d:78:2a:3e:
         8e:46:fd:2b:fe:c2:54:1f:49:34:1e:40:b6:85:21:17:da:21:
         83:44:b8:09:7e:31:5d:96:41:63:da:85:50:de:e6:3a:a4:c2:
         b4:94:94:7a:a2:60:bd:c1:f9:3e:89:44:12:a7:87:45:07:71:
         79:ad:97:0a:a3:e6:b0:f2:a5:3b:1c:87:7b:14:78:90:15:6f:
         ad:51:a0:52:cc:8a:8d:aa:1b:2f:da:41:6f:28:19:58:ab:70:
         09:1c:a7:80:4e:8f:0e:79:ac:8d:97:96:04:c1:b1:0d:54:a0:
         9f:f6:1c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:29 2024 by rpki-client on console-ams.rpki-client.org