Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa
File:                     3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa (raw, json)
Hash identifier:          5e+DWz/KeCvIJLhYAf5ntst8rzpFQmgyLqCiLEBkMnU=
Subject key identifier:   6C:03:CC:E3:2D:17:13:BA:A2:45:C8:22:49:0B:BC:D6:2E:B1:45:EE
Certificate issuer:       /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial:       7C61524499D1627ADDAD96025DD1A7BFAD07F7CF
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa
Signing time:             Thu 04 Apr 2024 09:40:14 +0000
ROA not before:           Thu 04 Apr 2024 09:35:14 +0000
ROA not after:            Thu 03 Apr 2025 09:40:14 +0000
asID:                     268097
IP address blocks:        131.108.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl
                          rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:61:52:44:99:d1:62:7a:dd:ad:96:02:5d:d1:a7:bf:ad:07:f7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
        Validity
            Not Before: Apr  4 09:35:14 2024 GMT
            Not After : Apr  3 09:40:14 2025 GMT
        Subject: CN=6C03CCE32D1713BAA245C822490BBCD62EB145EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:50:f0:ee:c5:9b:3c:23:d8:66:b2:f7:ac:
                    67:98:e4:17:15:97:7b:99:01:7f:66:46:79:b7:72:
                    00:8f:04:56:e0:2a:8e:15:df:fc:6e:ee:02:57:0c:
                    7e:96:9d:95:9e:01:2b:da:50:6b:e3:d1:aa:29:18:
                    e2:92:48:73:2f:32:30:68:b3:d3:a7:35:a0:7f:be:
                    09:26:ec:5a:e2:00:3d:24:13:39:dd:69:90:c6:bb:
                    b5:f9:97:0a:fd:7f:f6:5a:e4:5a:b7:27:ab:30:a0:
                    07:de:35:9e:d1:5b:62:8d:b9:bb:87:6a:28:e7:f0:
                    9a:c7:dc:ac:6b:1d:fc:f1:32:7f:61:de:2e:4b:57:
                    24:bf:a0:d3:3e:02:b0:97:8e:9a:f9:56:3f:f1:36:
                    93:7f:98:14:19:fa:2e:42:50:7e:a8:e5:a7:a1:88:
                    bf:73:41:c7:48:d1:43:1d:1e:85:41:88:8b:4e:9f:
                    6d:1c:eb:06:10:01:35:ca:fe:6c:de:59:be:35:40:
                    bc:d9:01:50:4d:9d:ef:cd:eb:d6:14:09:d5:77:e9:
                    b2:a0:71:1b:4a:8c:78:5d:6a:a2:3b:b7:b1:22:e6:
                    18:59:16:07:68:22:18:db:32:e3:7d:0e:89:3a:05:
                    ff:4a:82:28:5c:18:a3:8d:78:de:56:21:09:b1:10:
                    c4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:03:CC:E3:2D:17:13:BA:A2:45:C8:22:49:0B:BC:D6:2E:B1:45:EE
            X509v3 Authority Key Identifier:
                keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:ff:64:83:03:1d:a8:47:61:a4:5e:f5:1b:5b:1f:4a:c1:6d:
         19:fe:60:35:7d:fe:2d:69:1e:17:76:91:35:69:50:5a:70:3b:
         9d:72:ee:82:f4:54:8f:97:de:a0:e9:45:1b:73:30:b0:76:f8:
         38:e5:5d:1c:2c:ec:2b:0d:0a:53:a0:fd:2f:8b:d1:3f:bb:e6:
         19:95:16:e1:f3:8d:e0:97:f5:55:77:cc:a7:c2:0f:f4:af:ab:
         0d:67:de:3c:d3:cf:18:dc:61:af:dc:62:1f:ca:6f:cf:eb:f1:
         72:d2:d0:b2:7c:18:37:7e:55:9e:e4:4e:dd:bd:f9:a4:d0:e1:
         68:9a:77:de:e9:13:dc:1c:98:c8:e4:d6:31:66:49:d1:3d:45:
         4d:5e:46:6d:25:d0:7d:41:c6:ba:a2:e0:4b:e4:92:73:b0:b4:
         3c:08:66:64:a7:a5:64:ff:e7:c0:04:85:5d:4b:73:e3:22:94:
         d6:9e:71:2d:9b:4f:7d:e9:83:59:d2:60:c8:b4:4a:16:3f:ab:
         0c:28:4e:fd:5b:cd:0d:56:49:af:60:52:30:ca:10:01:9f:2d:
         b8:93:2e:fa:50:b7:9b:a1:d1:71:71:52:7a:de:1f:8d:a2:41:
         81:01:37:28:2a:7b:7b:bb:b9:03:b4:fd:15:f6:8f:66:40:4a:
         de:6e:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:51 2024 by rpki-client on console-fra.rpki-client.org