Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/3133312e302e382e302f32322d3332203d3e203631373234.roa
File:                     3133312e302e382e302f32322d3332203d3e203631373234.roa (raw, json)
Hash identifier:          oY5XcCzZcxdfzmsmefhknAG0I8Lz5pg8kQ4k7xpKos8=
Subject key identifier:   31:F8:6A:A3:8E:04:2F:3E:BA:5C:A1:D4:69:F2:3F:81:26:C9:51:43
Certificate issuer:       /CN=22556D0290AA08E04E52E5890C17182439269D40
Certificate serial:       66881BBF3BB6A88DFFA782796F9FD0F746C47636
Authority key identifier: 22:55:6D:02:90:AA:08:E0:4E:52:E5:89:0C:17:18:24:39:26:9D:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/3133312e302e382e302f32322d3332203d3e203631373234.roa
Signing time:             Tue 17 Sep 2024 12:59:38 +0000
ROA not before:           Tue 17 Sep 2024 12:54:38 +0000
ROA not after:            Tue 16 Sep 2025 12:59:38 +0000
asID:                     61724
IP address blocks:        131.0.8.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.crl
                          rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:88:1b:bf:3b:b6:a8:8d:ff:a7:82:79:6f:9f:d0:f7:46:c4:76:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22556D0290AA08E04E52E5890C17182439269D40
        Validity
            Not Before: Sep 17 12:54:38 2024 GMT
            Not After : Sep 16 12:59:38 2025 GMT
        Subject: CN=31F86AA38E042F3EBA5CA1D469F23F8126C95143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:da:d2:1f:a6:b3:3e:58:ba:83:3c:a6:05:be:
                    a3:0c:48:84:d1:26:53:77:2e:7d:b4:77:57:07:c1:
                    17:61:ef:24:e9:25:50:d0:aa:74:bb:5b:44:a3:45:
                    ac:8d:2b:8a:04:89:4b:46:56:e8:84:b2:00:ce:f9:
                    2f:ec:85:f0:9e:ad:a1:26:dc:cc:a9:f2:d8:c7:db:
                    14:1e:eb:e3:9c:a4:d5:3e:4d:0d:19:7f:e9:7d:30:
                    ec:5c:58:69:11:4a:d2:79:62:a2:c4:f1:db:e8:a6:
                    51:b6:8d:e7:19:c2:c2:64:a4:c5:0a:70:89:26:c8:
                    c1:1d:6e:02:83:c9:04:6c:a9:8c:ad:26:69:82:c0:
                    01:91:18:ea:19:16:35:e9:3f:ee:c3:41:48:4c:c5:
                    e2:59:93:f2:0d:eb:ea:57:27:2a:89:dd:44:6d:29:
                    fe:a0:39:00:f7:7a:25:55:f8:04:72:6a:55:0c:51:
                    2b:9f:10:89:55:06:ce:5a:c7:32:3e:21:eb:7e:55:
                    15:5f:8a:68:bd:8c:88:71:2c:1e:2f:d4:80:63:29:
                    2f:26:2a:e8:b2:55:6b:bd:ee:7c:de:e5:46:f5:0c:
                    bd:1c:11:c1:c0:9f:10:77:b8:9a:a9:77:48:c1:20:
                    bd:fe:2a:d7:16:b5:9c:91:c6:e0:c2:bd:36:a8:1e:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F8:6A:A3:8E:04:2F:3E:BA:5C:A1:D4:69:F2:3F:81:26:C9:51:43
            X509v3 Authority Key Identifier:
                keyid:22:55:6D:02:90:AA:08:E0:4E:52:E5:89:0C:17:18:24:39:26:9D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/22556D0290AA08E04E52E5890C17182439269D40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22556D0290AA08E04E52E5890C17182439269D40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/67kEbHHX12x7WNmrVhaa9kfrr7jnZcZqEKa4v3VZhm3S/0/3133312e302e382e302f32322d3332203d3e203631373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:a4:8d:4e:ad:25:09:bc:00:d2:c8:66:9e:fb:e5:74:42:
         51:11:a3:57:ec:35:ed:1b:98:2f:14:3c:18:d9:2d:3c:d4:cd:
         ab:28:b6:fd:4d:95:75:79:46:5b:94:45:1a:85:75:43:3c:34:
         d7:19:eb:72:6b:3d:ec:84:c8:16:93:f1:8c:e7:66:bf:9c:59:
         2e:f4:bb:fc:4c:56:6b:d1:90:b4:77:18:77:d5:a7:44:2e:9d:
         0a:95:8a:f0:fd:31:f0:4e:fc:6b:35:3d:5e:d8:e9:5a:63:23:
         cb:e7:b4:27:7d:99:f1:83:a0:23:a0:32:ba:5f:3e:8b:a4:6d:
         63:67:c9:97:8a:d8:74:29:da:bd:2c:99:8e:a5:dd:46:a7:c8:
         f2:06:0d:b9:f1:ca:cd:80:d8:8d:bf:a5:a3:d8:80:d1:38:dd:
         4c:8d:71:8c:c9:62:de:e5:63:9b:0e:73:02:7a:29:2d:c2:66:
         b8:4d:96:1a:fe:cb:f3:ef:89:14:9b:76:15:b3:d3:fe:e8:c9:
         b4:b9:bc:7c:39:18:53:f2:fb:06:29:8d:5f:81:b6:c2:a0:68:
         33:3a:06:0e:3e:27:40:cf:f5:65:48:00:2a:1c:60:0c:2c:05:
         a6:9e:77:94:92:5d:11:b3:a0:30:4c:71:4e:4f:31:a6:ef:38:
         13:70:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:42 2024 by rpki-client on console-fra.rpki-client.org