Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa
File:                     3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa (raw, json)
Hash identifier:          90Ee7bNn0ctmVWj7nDV2iETDDPAWuvGB5Z8HNaNjBMc=
Subject key identifier:   26:77:EA:B0:8A:DD:01:81:18:52:E6:C0:EB:67:7F:77:2C:78:73:58
Certificate issuer:       /CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3
Certificate serial:       050452D0C32235268D09BEC3F66B9533F3A0211F
Authority key identifier: 37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa
Signing time:             Thu 04 Apr 2024 03:07:47 +0000
ROA not before:           Thu 04 Apr 2024 03:02:47 +0000
ROA not after:            Thu 03 Apr 2025 03:07:47 +0000
asID:                     264434
IP address blocks:        131.221.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl
                          rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:04:52:d0:c3:22:35:26:8d:09:be:c3:f6:6b:95:33:f3:a0:21:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3
        Validity
            Not Before: Apr  4 03:02:47 2024 GMT
            Not After : Apr  3 03:07:47 2025 GMT
        Subject: CN=2677EAB08ADD01811852E6C0EB677F772C787358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:72:bb:9d:0c:3f:96:d1:77:07:1e:58:ad:
                    bd:1d:48:d2:57:0c:2d:44:a7:75:4e:dc:17:d8:fe:
                    8f:5c:65:b6:09:11:9b:df:16:52:58:5e:e1:f4:bf:
                    23:30:96:64:f5:c8:eb:ce:99:78:b3:2e:ad:0c:39:
                    dd:63:a4:af:ec:72:e7:d7:f5:2a:8b:11:5e:68:bd:
                    c3:f5:87:86:6d:fd:77:f1:11:02:c0:54:bc:c0:14:
                    43:bd:48:b7:ff:bf:e5:b0:d9:d6:d4:27:42:d7:85:
                    f4:78:66:46:73:ef:a3:7b:b8:e1:90:d7:9d:5f:35:
                    0f:d4:9a:cd:e3:6f:07:96:dc:1c:9e:4f:4c:ad:ed:
                    86:8f:08:45:b9:00:6c:04:9f:c0:db:08:f0:cd:4c:
                    59:2d:5a:8b:a4:af:63:0e:ed:6f:b3:39:69:57:8d:
                    6d:74:1c:06:b4:08:5b:7c:fa:de:6e:32:78:81:87:
                    7a:21:6a:14:89:3e:c8:5c:25:64:30:31:39:b0:1e:
                    bd:a5:5f:9e:0a:2e:36:65:7c:5a:9b:7d:69:5e:11:
                    f8:9c:32:f5:55:a2:22:3c:20:4d:91:1f:4d:fb:b3:
                    bc:d7:c8:e6:d4:23:4a:00:11:fb:e6:48:f4:1d:1d:
                    2e:8a:32:d8:f3:b7:ba:0d:6a:89:63:4a:88:b9:de:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:77:EA:B0:8A:DD:01:81:18:52:E6:C0:EB:67:7F:77:2C:78:73:58
            X509v3 Authority Key Identifier:
                keyid:37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136302e302f32322d3232203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:88:53:37:65:9e:7d:1e:c4:29:d8:b3:c3:01:40:df:20:4b:
         2a:63:64:47:e0:fa:b7:19:dd:e6:ee:b0:07:e6:e7:a6:aa:2b:
         a1:6f:88:12:c7:88:df:1b:d9:23:c0:9c:d2:24:8b:ab:a2:88:
         ec:4f:07:22:b1:8f:b5:cc:53:78:30:ce:4b:18:b9:82:be:90:
         0c:11:0e:f8:e7:6b:1f:a6:16:d7:ca:04:01:49:52:44:f2:23:
         4c:3f:d7:ae:c8:70:a2:2b:f2:ff:ec:44:b9:8c:a6:22:2f:1c:
         23:8b:98:a8:8e:4e:04:7e:5e:04:57:30:09:ac:5b:d0:7f:7e:
         a5:40:6a:1d:a8:8d:a6:e2:6e:c8:c8:be:ff:68:8a:de:5f:68:
         f1:24:b4:b2:41:df:45:6a:5e:a9:57:fb:26:06:cc:16:4e:bb:
         bd:86:45:6d:4f:61:87:57:fb:b3:7e:bf:80:bd:c3:d9:fd:77:
         7c:13:65:31:32:df:0d:00:cb:48:4c:2f:3a:83:e3:22:bf:c4:
         19:6d:d8:06:a9:69:22:3c:10:43:ad:53:56:89:b5:6c:55:e7:
         12:c4:c0:78:76:57:a8:b7:e2:e1:e9:c5:04:3f:02:66:fd:2a:
         1f:62:ae:f0:ad:3a:85:1f:ec:74:22:8b:45:5d:d0:50:e9:d1:
         97:ea:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:36 2024 by rpki-client on console-ams.rpki-client.org