Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136322e302f32332d3233203d3e20323634343334.roa
File:                     3133312e3232312e3136322e302f32332d3233203d3e20323634343334.roa (raw, json)
Hash identifier:          eUBCb0cWMpnEdM++yHGF8CeaL831QuTIxAWwb7w+IXA=
Subject key identifier:   AD:E7:6A:94:31:95:F2:12:29:FD:52:5A:54:F7:20:E3:BB:B2:2C:FA
Certificate issuer:       /CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3
Certificate serial:       5BF3FFE5ED4756603A2652FB00C70C5927FB2F5A
Authority key identifier: 37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136322e302f32332d3233203d3e20323634343334.roa
Signing time:             Thu 04 Apr 2024 03:07:46 +0000
ROA not before:           Thu 04 Apr 2024 03:02:46 +0000
ROA not after:            Thu 03 Apr 2025 03:07:46 +0000
asID:                     264434
IP address blocks:        131.221.162.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl
                          rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f3:ff:e5:ed:47:56:60:3a:26:52:fb:00:c7:0c:59:27:fb:2f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3
        Validity
            Not Before: Apr  4 03:02:46 2024 GMT
            Not After : Apr  3 03:07:46 2025 GMT
        Subject: CN=ADE76A943195F21229FD525A54F720E3BBB22CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:ba:83:0b:d9:a3:7a:89:96:6e:fe:30:e7:
                    66:ac:5e:5c:fc:db:b9:5e:56:95:20:d6:d2:d3:fb:
                    bf:31:0a:18:f0:8d:24:2e:5f:7c:82:52:93:bf:70:
                    0c:30:51:43:44:bf:0c:5c:0e:1a:b2:1e:6f:a1:29:
                    60:b7:53:1d:c9:91:f3:5c:16:47:50:9b:48:dc:d8:
                    59:b8:51:59:ca:60:5f:07:16:f9:75:6d:e4:66:50:
                    3d:af:45:a7:88:cd:1c:f8:c5:fd:83:ed:02:25:40:
                    e9:a6:59:53:22:3e:8c:e5:7a:8c:b1:46:79:61:3a:
                    ef:c7:b1:d8:ac:9b:2d:8c:aa:cc:20:5e:b1:fd:d3:
                    e3:3b:75:61:e9:af:65:bc:49:c8:64:d5:b9:d3:ff:
                    38:5e:1d:e2:2e:45:01:22:07:82:6d:80:a8:38:2f:
                    04:90:27:0b:66:92:90:07:00:56:c1:25:61:46:4c:
                    6f:65:b6:05:28:ee:84:e2:d0:22:06:66:3e:8b:b5:
                    84:31:39:26:c1:78:8a:45:a1:93:b6:87:50:ed:12:
                    41:95:bb:da:ed:f0:85:0e:18:13:44:6d:30:89:79:
                    6c:e9:08:e0:41:ea:2b:e6:f7:d2:43:76:75:4e:04:
                    5f:99:ad:01:93:c0:e0:cd:d1:2f:9e:db:e4:6d:91:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E7:6A:94:31:95:F2:12:29:FD:52:5A:54:F7:20:E3:BB:B2:2C:FA
            X509v3 Authority Key Identifier:
                keyid:37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/3133312e3232312e3136322e302f32332d3233203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:3d:72:75:e6:5c:68:4c:5d:04:c8:7e:a4:fd:f6:43:d5:5b:
         2e:ab:b3:d2:3c:50:23:83:b3:93:d8:47:93:84:35:7d:dd:00:
         21:5d:5e:3b:a2:01:d2:85:5f:f7:60:d7:b6:a8:5e:e0:bc:ec:
         0a:c3:49:f4:04:26:f9:1c:65:d6:5f:e4:6e:7e:3b:ea:83:8a:
         62:6c:71:f9:e8:cd:fb:0e:24:2a:d1:20:8e:67:a3:80:13:9b:
         ff:63:fe:a2:28:24:e0:c4:9a:32:6a:e6:28:ea:55:d3:34:22:
         0c:7e:50:f7:31:03:b6:73:dc:25:fc:1d:ae:19:79:53:5c:eb:
         09:7e:30:fe:8d:66:93:9b:00:c5:d6:4c:6e:fa:65:ad:03:23:
         be:1e:e5:92:2e:1b:9a:85:13:84:45:18:06:b0:f3:af:14:2a:
         60:da:0d:0e:65:7e:89:48:20:73:14:60:da:9b:80:81:db:fd:
         5f:8f:2d:50:28:d6:5e:8f:6a:de:6d:60:4c:0b:64:4e:92:95:
         14:42:ec:37:cf:65:07:68:33:23:a7:14:a9:23:ae:df:94:83:
         ff:07:ed:08:9c:e1:90:1d:99:00:d1:88:52:2e:35:92:ee:1d:
         c2:68:36:b5:e8:32:a4:2c:5b:d4:5b:e2:a8:8b:64:59:ab:b4:
         28:47:06:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:36 2024 by rpki-client on console-ams.rpki-client.org