Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35372e302f32342d3234203d3e203631383734.roa
File:                     3133312e302e35372e302f32342d3234203d3e203631383734.roa (raw, json)
Hash identifier:          r72+Uk8+onLALTzRBqaGUepfe9ZcM7kr49oG7Vne3ww=
Subject key identifier:   4F:17:5E:33:12:65:35:4F:65:CC:39:3B:ED:CD:2F:B3:51:CB:6F:96
Certificate issuer:       /CN=9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B
Certificate serial:       7E2177D528961CD28962BF34B0A37AB2EA10B39D
Authority key identifier: 9C:BB:D5:9D:EB:A5:7B:3E:80:B6:46:6E:5D:9A:AC:BD:3B:19:A7:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35372e302f32342d3234203d3e203631383734.roa
Signing time:             Thu 04 Apr 2024 16:16:48 +0000
ROA not before:           Thu 04 Apr 2024 16:11:48 +0000
ROA not after:            Thu 03 Apr 2025 16:16:48 +0000
asID:                     61874
IP address blocks:        131.0.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.crl
                          rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:21:77:d5:28:96:1c:d2:89:62:bf:34:b0:a3:7a:b2:ea:10:b3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B
        Validity
            Not Before: Apr  4 16:11:48 2024 GMT
            Not After : Apr  3 16:16:48 2025 GMT
        Subject: CN=4F175E331265354F65CC393BEDCD2FB351CB6F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:43:3e:e9:54:16:86:99:b2:12:26:e7:64:
                    7f:d8:2d:b7:6e:a5:af:3e:15:99:40:d2:46:5f:2d:
                    54:a6:b2:52:03:e9:36:6e:90:3f:cf:a0:cd:ee:e6:
                    a2:27:f1:c8:e6:c4:6d:e0:de:7e:dc:1f:5d:dc:4a:
                    f2:9b:98:2c:32:65:c0:5a:17:de:d8:1e:07:ee:99:
                    43:bc:ed:a4:66:d6:16:a3:0f:17:a4:f8:3b:4f:f3:
                    cc:b5:87:31:95:24:94:28:35:2f:ba:ec:4d:ec:62:
                    8e:6c:96:45:8c:57:cf:ff:8c:3b:a5:fd:b8:d1:86:
                    21:f9:34:ae:d5:a3:a4:2c:d1:03:4f:7d:4f:cb:81:
                    8d:46:9a:ee:ee:84:84:14:ff:70:9d:52:69:35:3a:
                    4a:0b:a4:d5:39:e3:af:45:5b:de:2d:06:58:4d:0e:
                    36:c5:4c:02:2b:d9:e3:db:fc:a9:2f:86:08:2e:d3:
                    72:1e:c6:43:3c:03:04:98:50:f7:4b:af:38:43:19:
                    b9:18:05:32:86:80:ed:30:c6:ce:45:a0:48:6d:37:
                    2f:83:49:57:a2:b4:a4:9c:c3:d0:56:ff:94:d9:03:
                    06:7a:5d:e6:9f:2c:b3:70:bb:a4:6f:6a:33:bf:57:
                    c1:a7:61:14:df:63:29:79:3f:34:44:33:f1:42:8c:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:17:5E:33:12:65:35:4F:65:CC:39:3B:ED:CD:2F:B3:51:CB:6F:96
            X509v3 Authority Key Identifier:
                keyid:9C:BB:D5:9D:EB:A5:7B:3E:80:B6:46:6E:5D:9A:AC:BD:3B:19:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35372e302f32342d3234203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ea:e9:a9:4d:57:db:fa:c8:05:d4:d6:d3:b9:68:89:19:94:
         b0:65:85:75:fd:76:66:9f:4f:ce:b8:38:be:d0:04:af:33:e3:
         6f:ca:a1:5f:d0:e1:0a:65:79:c4:70:31:d3:74:b4:11:09:42:
         8f:82:40:fd:20:9a:5c:f6:fe:a9:83:ed:8d:ec:e0:99:f3:8a:
         d0:65:cd:7d:7e:13:e9:a6:c7:fa:84:a0:cf:9a:17:94:34:b6:
         e8:c0:b6:fc:63:e8:44:4f:f5:72:ad:b4:61:f5:3a:25:e5:e8:
         de:59:20:d6:1f:e3:6d:d1:4a:c3:1c:97:12:10:d3:f3:66:f6:
         14:f4:41:b4:bf:ff:fd:ac:dd:12:12:48:f6:ef:cc:41:bf:d0:
         f8:ea:a6:11:a4:33:57:1f:8f:4f:ce:84:b0:b4:47:8e:84:14:
         da:54:8b:8f:ec:0e:e4:b2:5a:b7:95:5c:39:ce:c6:64:e2:0d:
         61:62:9a:cd:a3:9d:32:1a:61:b3:6f:0b:25:01:51:72:84:e5:
         51:18:a3:41:56:8b:8d:0e:88:2f:e9:ce:26:21:76:fb:0e:fe:
         30:17:2f:ca:ac:c7:98:ac:ff:d6:c3:c3:9b:fd:8b:af:62:62:
         40:32:04:1d:10:be:38:e9:68:40:07:b0:5c:23:ec:3f:ce:09:
         8f:65:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:27:59 2024 by rpki-client on console-ams.rpki-client.org