Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137322e302f32342d3234203d3e20323634343232.roa
File:                     3133312e3232312e3137322e302f32342d3234203d3e20323634343232.roa (raw, json)
Hash identifier:          325j0Ige9i2YSD+4enXki9+JpqrrPX3Nr2xihppecSg=
Subject key identifier:   C3:76:59:92:7F:99:D3:A2:6C:D0:92:9C:DA:C5:7C:B2:0D:50:01:AF
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       246E070CFC5D4098506AE60DFA24B9191BD738E8
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137322e302f32342d3234203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:28 +0000
ROA not before:           Wed 15 May 2024 14:44:28 +0000
ROA not after:            Wed 14 May 2025 14:49:28 +0000
asID:                     264422
IP address blocks:        131.221.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6e:07:0c:fc:5d:40:98:50:6a:e6:0d:fa:24:b9:19:1b:d7:38:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:28 2024 GMT
            Not After : May 14 14:49:28 2025 GMT
        Subject: CN=C37659927F99D3A26CD0929CDAC57CB20D5001AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:57:62:ce:01:e5:e6:49:17:63:df:02:bd:
                    2e:64:7c:61:b1:b2:3f:48:c5:fe:d2:15:be:21:fc:
                    dd:c3:c6:e0:b5:b3:9c:91:0b:c9:e9:71:8c:e1:9f:
                    97:69:b9:f8:3a:19:20:18:db:78:17:ee:5e:97:63:
                    f9:55:80:f0:08:fa:64:09:12:55:6f:e3:59:c3:ae:
                    91:33:ef:4d:3f:eb:a4:00:06:ce:a8:aa:4c:8a:82:
                    f2:39:4e:34:3f:83:c4:9b:ec:2e:f9:fd:d1:b3:74:
                    2f:a1:6a:4c:df:ab:4c:eb:9b:64:83:aa:23:40:b6:
                    88:e1:c5:66:a1:87:bd:78:1e:74:0a:b9:f8:d5:cd:
                    74:7e:df:bd:9a:77:69:b3:1f:90:83:85:ec:ec:8c:
                    17:79:17:38:cd:dc:ac:53:13:3e:2f:c0:91:9b:96:
                    d3:f6:8b:0f:00:4f:ca:d9:68:2b:d4:2b:db:70:2f:
                    51:9c:04:bf:7b:7e:e3:f0:7e:79:72:d6:8d:a1:10:
                    09:27:e0:ce:5b:a8:74:7b:b9:2b:16:06:c1:a6:8b:
                    f9:c9:32:1e:01:ce:bd:bf:f1:73:62:e8:d6:93:56:
                    96:12:5a:f9:fd:cd:89:ed:aa:b5:6e:89:30:d8:3a:
                    2f:c5:a5:d2:f7:4c:13:fc:f1:50:9b:05:de:33:bd:
                    12:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:76:59:92:7F:99:D3:A2:6C:D0:92:9C:DA:C5:7C:B2:0D:50:01:AF
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137322e302f32342d3234203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:67:21:81:8e:e9:06:f4:91:f2:dc:ff:df:cc:a9:cc:81:d1:
         bf:ae:98:ff:c7:dc:d1:9e:c3:3b:4b:9b:06:d4:2f:11:ac:41:
         ad:85:f9:79:84:0b:05:c2:b8:aa:4a:93:0d:58:ef:2e:6e:8b:
         e9:71:05:a5:72:91:f1:26:57:f3:2d:79:ec:3e:e6:e3:f5:1f:
         9e:f4:09:a4:f7:9f:3c:82:0a:fd:22:e9:ab:7c:ea:9f:7a:7c:
         a3:42:3c:9c:88:cd:e6:2f:33:94:0f:9d:c8:4c:27:b9:f1:d2:
         e7:18:60:f8:0d:e1:b9:33:4f:f7:ef:2e:ac:12:15:9e:d2:18:
         33:70:2c:56:91:57:ff:2c:cc:e2:26:1a:4a:cb:3a:84:d1:f4:
         0d:5d:fe:f4:90:4c:8a:6f:12:f8:3b:90:93:93:cc:92:5c:54:
         f2:87:35:e0:6e:04:f6:5d:7d:d8:da:df:d6:90:2e:8c:86:a3:
         85:bd:e8:86:b0:50:61:f7:83:54:46:e6:94:5c:63:ff:b7:b2:
         f6:ef:b2:71:9f:5e:21:26:3b:a1:36:87:06:30:16:ec:89:f5:
         ec:98:58:f9:19:a2:60:a1:0e:d1:ee:22:01:4e:c4:35:e6:1d:
         ec:95:95:1c:b1:ea:5c:b4:b0:f7:54:77:38:ac:bc:f6:75:55:
         b5:78:86:48
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJG4HDPxdQJhQauYN+iS5GRvXOOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0Q0Q4RTY0MDg4Nzk0OUIxQjYzOEE0M0E5NzRBQ0FE
NTlEQjkxMzAeFw0yNDA1MTUxNDQ0MjhaFw0yNTA1MTQxNDQ5MjhaMDMxMTAvBgNV
BAMTKEMzNzY1OTkyN0Y5OUQzQTI2Q0QwOTI5Q0RBQzU3Q0IyMEQ1MDAxQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLldizgHl5kkXY98CvS5kfGGx
sj9Ixf7SFb4h/N3DxuC1s5yRC8npcYzhn5dpufg6GSAY23gX7l6XY/lVgPAI+mQJ
ElVv41nDrpEz700/66QABs6oqkyKgvI5TjQ/g8Sb7C75/dGzdC+hakzfq0zrm2SD
qiNAtojhxWahh714HnQKufjVzXR+372ad2mzH5CDhezsjBd5FzjN3KxTEz4vwJGb
ltP2iw8AT8rZaCvUK9twL1GcBL97fuPwfnly1o2hEAkn4M5bqHR7uSsWBsGmi/nJ
Mh4Bzr2/8XNi6NaTVpYSWvn9zYntqrVuiTDYOi/FpdL3TBP88VCbBd4zvRI1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUw3ZZkn+Z06Js0JKc2sV8sg1QAa8wHwYDVR0j
BBgwFoAUfUzY5kCIeUmxtjikOpdKytWduRMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRTTXdHdk1ZdWRlUUd0dGtQMWNEdDVEUUdQclNna0J2aHdZemZGd3N2
dkQvMC83RDRDRDhFNjQwODg3OTQ5QjFCNjM4QTQzQTk3NEFDQUQ1OURCOTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdENENEOEU2NDA4ODc5NDlC
MUI2MzhBNDNBOTc0QUNBRDU5REI5MTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0U013R3ZNWXVkZVFHdHRrUDFjRHQ1RFFHUHJTZ2tCdmh3WXpmRndzdnZELzAv
MzEzMzMxMmUzMjMyMzEyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPdrDANBgkqhkiG9w0BAQsFAAOCAQEALmch
gY7pBvSR8tz/38ypzIHRv66Y/8fc0Z7DO0ubBtQvEaxBrYX5eYQLBcK4qkqTDVjv
Lm6L6XEFpXKR8SZX8y157D7m4/UfnvQJpPefPIIK/SLpq3zqn3p8o0I8nIjN5i8z
lA+dyEwnufHS5xhg+A3huTNP9+8urBIVntIYM3AsVpFX/yzM4iYaSss6hNH0DV3+
9JBMim8S+DuQk5PMklxU8oc14G4E9l192Nrf1pAujIajhb3ohrBQYfeDVEbmlFxj
/7ey9u+ycZ9eISY7oTaHBjAW7In17JhY+RmiYKEO0e4iAU7ENeYd7JWVHLHqXLSw
91R3OKy89nVVtXiGSA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:47 2024 by rpki-client on console-fra.rpki-client.org