Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa
File:                     3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa (raw, json)
Hash identifier:          K3kWLdQQLiJE+Q3KSIssz6PgV0gTRyMIeE5LQME79Bs=
Subject key identifier:   62:67:8E:C3:64:FD:C9:F7:AE:00:FA:5E:66:39:E7:3A:7D:58:35:8A
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       69374BC3CA12A95D2B5CA0F8169CB16644D97A62
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:29 +0000
ROA not before:           Wed 15 May 2024 14:44:29 +0000
ROA not after:            Wed 14 May 2025 14:49:29 +0000
asID:                     264422
IP address blocks:        131.221.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 05:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:37:4b:c3:ca:12:a9:5d:2b:5c:a0:f8:16:9c:b1:66:44:d9:7a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:29 2024 GMT
            Not After : May 14 14:49:29 2025 GMT
        Subject: CN=62678EC364FDC9F7AE00FA5E6639E73A7D58358A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:d7:6a:ca:30:95:78:10:27:db:b1:29:6f:
                    03:ca:85:76:82:85:4a:63:d2:5a:86:11:d0:b7:f4:
                    1e:e6:b6:cd:b2:d1:12:29:bb:fc:a7:2d:e9:5d:48:
                    ab:89:f2:60:38:b8:0d:59:bd:23:c8:0a:99:de:aa:
                    dd:c6:a3:71:41:23:9b:8e:8c:c3:97:e5:71:d9:54:
                    15:87:a4:b7:e5:13:1d:ba:9b:e2:72:fe:0d:b7:b3:
                    21:20:38:95:62:e0:9b:b0:87:e4:9f:38:4c:7b:11:
                    dd:f2:d4:38:1a:0e:fd:5e:39:e4:53:3f:98:1b:db:
                    49:1f:6e:66:3e:1d:bd:e4:1a:39:5b:86:b2:65:fd:
                    06:9b:f0:7e:89:3e:3a:4f:e2:32:aa:1c:3b:af:e6:
                    c2:ed:41:e6:c2:7c:05:0d:fd:31:71:20:34:74:48:
                    83:3d:10:dc:b6:72:05:06:28:f0:8e:77:a7:8a:90:
                    70:92:fa:aa:d7:3b:d0:94:1e:84:85:5f:94:b7:c6:
                    0e:4d:9c:55:76:21:3f:e7:d4:fd:b8:e0:fb:48:a4:
                    f0:18:30:7b:20:7c:36:58:55:4b:cf:d6:77:33:05:
                    72:a2:f6:f1:e3:0a:07:87:78:9e:59:76:5c:4d:a2:
                    8b:8e:28:c7:0a:12:b9:f0:c7:71:1e:c5:f1:d8:41:
                    70:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:67:8E:C3:64:FD:C9:F7:AE:00:FA:5E:66:39:E7:3A:7D:58:35:8A
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137332e302f32342d3234203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:80:d4:78:97:34:93:d9:a6:68:da:14:32:38:a2:ab:45:
         09:e0:9d:a7:c2:3f:4d:56:8b:4e:62:38:be:8c:0d:07:37:97:
         08:a4:37:4f:3a:36:a7:36:65:58:e9:0f:ae:a3:7e:1e:19:33:
         dc:d1:9a:75:d1:98:24:aa:d4:dd:f1:08:ff:9c:43:df:94:8d:
         d4:71:81:36:09:d3:93:ec:20:67:e4:0d:b8:ca:19:1f:5b:03:
         e7:d2:e2:f9:63:be:df:d1:ef:11:00:d7:e6:88:71:b8:f5:18:
         24:67:74:4f:64:f4:62:c6:60:2f:68:51:97:a0:a1:7c:ff:a4:
         6d:df:1f:87:9c:23:d4:f9:58:a4:13:2e:84:42:22:bb:3d:fc:
         c8:f1:d9:6c:ac:f6:54:a8:6d:4e:6c:a9:50:d4:1d:27:8e:8a:
         83:64:f0:1e:09:92:88:ab:59:0e:2a:37:c7:e8:5c:89:62:26:
         18:33:46:e3:dc:12:13:35:f7:7d:60:e2:11:65:54:eb:7e:88:
         ed:68:d0:c7:d1:84:5f:4c:fa:e0:0a:08:64:2c:b2:35:aa:5b:
         97:b6:c1:6e:4f:9a:b0:65:ee:22:d4:9d:cf:e3:87:c2:24:05:
         55:1d:28:49:bc:ce:a3:7a:8e:4c:77:17:04:0c:0e:cf:2e:ce:
         28:f7:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:11:37 2024 by rpki-client on console-ams.rpki-client.org