Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3133312e3235352e32342e302f32322d3232203d3e203237363933.roa
File:                     3133312e3235352e32342e302f32322d3232203d3e203237363933.roa (raw, json)
Hash identifier:          UAEZiai+R6S3jJhxkPlMkLrvNMmak+tsjvbzKVtnOOA=
Subject key identifier:   CB:07:BD:55:12:AC:50:53:F8:68:F5:62:4A:3C:EB:D0:26:26:48:81
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       1C771D3C95CDF26DE97FDD103DF083308B5FDBC4
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3133312e3235352e32342e302f32322d3232203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:16 +0000
ROA not before:           Tue 22 Oct 2024 14:25:16 +0000
ROA not after:            Tue 21 Oct 2025 14:30:16 +0000
asID:                     27693
IP address blocks:        131.255.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:77:1d:3c:95:cd:f2:6d:e9:7f:dd:10:3d:f0:83:30:8b:5f:db:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:16 2024 GMT
            Not After : Oct 21 14:30:16 2025 GMT
        Subject: CN=CB07BD5512AC5053F868F5624A3CEBD026264881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:e4:18:a4:9d:fc:45:33:66:8c:4b:c4:22:
                    87:15:fb:9f:05:a0:07:f4:3a:6a:19:25:95:bf:6e:
                    b2:fc:41:1e:91:f2:cb:08:43:5f:73:05:50:8e:92:
                    6d:33:08:15:6f:ea:bd:78:37:58:7c:58:20:f8:ad:
                    81:43:1a:f6:0e:b0:48:91:1c:37:3e:45:ba:78:c9:
                    02:7f:ed:ff:47:df:61:72:1e:52:72:66:43:1e:3b:
                    38:12:17:08:6b:18:be:83:36:99:c1:75:a7:81:b4:
                    98:62:4e:3e:04:94:dc:35:a9:3b:c7:c1:55:fc:73:
                    a3:49:2b:a0:7c:f8:2c:3e:6d:12:51:f1:11:9a:7f:
                    9b:ef:db:5c:89:52:8d:7e:7f:67:42:76:3f:74:3a:
                    f0:0b:7a:4e:6b:cf:8c:1e:00:b2:b9:8f:c0:17:91:
                    67:e7:65:87:3a:db:09:b8:7a:9d:78:50:6d:73:5d:
                    7f:9c:de:bd:70:58:12:08:14:b6:ed:9c:59:d0:b7:
                    3e:da:0e:ee:f3:64:04:98:12:7b:7f:1f:2b:c5:88:
                    74:8b:83:a0:00:9c:2c:87:42:10:af:38:2b:1b:82:
                    30:fa:a6:0a:ce:a4:a1:31:4e:4d:f7:ed:52:12:9d:
                    fe:e7:a4:e0:6e:96:ad:03:8e:de:22:25:02:6a:7a:
                    10:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:07:BD:55:12:AC:50:53:F8:68:F5:62:4A:3C:EB:D0:26:26:48:81
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3133312e3235352e32342e302f32322d3232203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:27:21:58:01:09:9c:d9:6f:eb:07:21:6f:a7:3d:38:77:88:
         41:3e:d7:4b:58:a2:82:fb:6c:9a:1f:3e:03:c2:82:b4:45:2d:
         6d:a7:3e:d0:1c:3c:5b:c5:ba:0b:fe:77:30:6b:54:5c:35:0c:
         b3:4c:dc:ba:05:69:f0:cb:1a:9e:76:05:aa:63:4e:41:c7:5f:
         23:4a:1d:5e:a2:47:b7:05:1a:4b:5b:6a:fd:9c:34:86:23:5a:
         28:f4:d7:0f:94:01:da:a1:7d:c7:8f:b6:40:c1:65:80:bd:4a:
         40:3f:02:1e:d6:c4:3e:c4:23:14:8a:aa:df:07:a2:0f:50:0f:
         27:44:f9:c2:40:42:a9:75:b2:50:64:7c:7d:35:e4:b3:02:80:
         be:67:a5:a7:92:86:3c:0f:02:af:55:77:54:89:ba:62:fa:f9:
         02:54:92:e0:f0:01:67:4a:d2:cc:fa:88:9e:0b:41:e4:42:90:
         1e:33:b2:67:b7:8b:b3:23:f9:40:6a:ba:70:0d:d2:b3:77:d9:
         85:91:ad:c8:5b:21:2d:3c:92:b6:de:9d:27:b2:43:11:b0:5c:
         c2:ac:91:49:8d:d5:00:68:40:1c:10:55:3b:50:f4:3b:c5:03:
         b8:aa:eb:a7:30:15:07:90:2e:c7:bf:f1:b6:98:51:40:c0:15:
         c2:2b:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:36 2024 by rpki-client on console-ams.rpki-client.org