Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133312e3130382e37372e302f32342d3234203d3e203631363636.roa
File:                     3133312e3130382e37372e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          tGKcjcrEcftW6b7zdUWpyNvnlwBQxQx0FJMzakYXVek=
Subject key identifier:   FB:7D:BE:5B:73:E3:46:5D:1C:E0:F1:98:08:42:C5:F3:D8:74:E0:B9
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       783ADB63BF7416FA5EB8916581996CA92FC8A045
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133312e3130382e37372e302f32342d3234203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:09 +0000
ROA not before:           Wed 03 Apr 2024 20:19:09 +0000
ROA not after:            Wed 02 Apr 2025 20:24:09 +0000
asID:                     61666
IP address blocks:        131.108.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3a:db:63:bf:74:16:fa:5e:b8:91:65:81:99:6c:a9:2f:c8:a0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:09 2024 GMT
            Not After : Apr  2 20:24:09 2025 GMT
        Subject: CN=FB7DBE5B73E3465D1CE0F1980842C5F3D874E0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:39:56:1b:c3:14:47:22:ec:e7:9a:c3:14:
                    06:e0:1a:3c:fa:11:4d:f2:fb:e9:ca:2d:01:22:c2:
                    c3:19:cd:b7:ed:f6:3b:5c:84:a5:a9:07:13:96:26:
                    3c:3e:6f:8a:1c:fd:2c:df:37:e9:0f:ca:69:95:0a:
                    b3:90:f4:9e:23:15:00:b6:de:49:bf:6a:c9:37:04:
                    a8:24:f0:18:8e:db:23:7b:87:1a:32:65:5b:81:b3:
                    e9:ca:89:27:02:ba:17:34:19:a8:b0:26:3c:8a:d2:
                    2d:a0:d9:bb:5a:58:e3:0d:86:73:bf:19:76:63:cd:
                    5e:cb:ae:4b:7c:5c:c2:9c:cf:f7:51:3b:79:58:df:
                    e9:22:6f:f3:1e:be:a2:65:a4:ba:f4:8e:e7:20:b9:
                    ac:50:2c:36:aa:cc:05:4d:b7:90:3c:cc:2d:f8:f9:
                    a9:14:ee:6e:0f:0f:b7:cb:df:b7:60:85:20:7f:f8:
                    5a:fa:60:e9:b1:57:6e:a6:00:fb:f7:66:0a:a2:e2:
                    29:bd:95:04:96:5e:e0:14:2b:89:5b:58:89:ba:6e:
                    25:6b:5f:f8:6c:0c:59:9c:ef:b7:47:09:13:b8:74:
                    19:41:62:db:69:0e:52:04:5f:3a:ca:5d:c2:d0:f9:
                    6d:44:c6:1b:96:bb:cc:12:31:8c:19:58:55:62:b0:
                    04:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7D:BE:5B:73:E3:46:5D:1C:E0:F1:98:08:42:C5:F3:D8:74:E0:B9
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/3133312e3130382e37372e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:43:2f:34:7e:00:59:35:c7:41:8f:c1:91:e9:b3:00:14:90:
         09:c8:da:b7:b1:9f:ec:1d:64:52:5a:89:3e:06:08:f9:2a:cc:
         b9:6d:b2:fc:65:b5:23:ba:1a:62:29:27:ed:6e:0f:3a:a0:87:
         d0:de:c9:0a:69:b8:2e:54:e8:dc:d8:c6:1c:bf:bc:05:79:53:
         75:13:b2:34:2e:ea:04:17:53:87:e1:d9:82:ea:40:30:56:a0:
         88:5c:6c:45:29:f6:58:ba:a9:29:e5:c5:08:38:47:fc:f1:dc:
         c9:5d:76:24:4e:b7:e2:16:14:68:fd:48:ad:8b:30:91:a8:24:
         89:35:48:c4:e9:10:0e:e7:a1:f9:57:b8:e0:0f:94:e1:44:b4:
         f8:b5:4e:bf:f8:3d:ca:03:c2:57:d7:20:d0:a8:58:7c:cd:79:
         ae:41:a4:8e:3e:46:46:64:b1:f2:d6:3d:5b:e9:fd:b1:22:bf:
         86:5a:00:7b:7c:03:63:90:b4:27:a0:4b:cb:ac:a0:bb:5b:79:
         92:29:ad:5b:97:65:57:aa:65:90:eb:44:dd:a2:e9:02:bc:10:
         73:92:18:e3:2c:fc:f8:8d:44:0f:36:93:70:e9:e2:53:a1:4c:
         52:71:7b:1b:03:c2:62:f8:3e:ac:39:dc:38:44:ca:c6:de:a0:
         b6:ef:eb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org