Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137352e302f32342d3234203d3e20323634343232.roa
File:                     3133312e3232312e3137352e302f32342d3234203d3e20323634343232.roa (raw, json)
Hash identifier:          CSr9bByZhTw19pEdH+0fKYGYjyqI27IRGtXqxGIw4Lc=
Subject key identifier:   EA:70:6C:4A:55:D2:8C:ED:E0:18:39:14:8B:79:48:71:0B:46:00:DE
Certificate issuer:       /CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
Certificate serial:       08F5331281A74A46A03B7D8DD98F5E7833039B66
Authority key identifier: 7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137352e302f32342d3234203d3e20323634343232.roa
Signing time:             Wed 15 May 2024 14:49:31 +0000
ROA not before:           Wed 15 May 2024 14:44:31 +0000
ROA not after:            Wed 14 May 2025 14:49:31 +0000
asID:                     264422
IP address blocks:        131.221.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl
                          rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f5:33:12:81:a7:4a:46:a0:3b:7d:8d:d9:8f:5e:78:33:03:9b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Validity
            Not Before: May 15 14:44:31 2024 GMT
            Not After : May 14 14:49:31 2025 GMT
        Subject: CN=EA706C4A55D28CEDE01839148B7948710B4600DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c5:f5:74:55:15:4e:f8:44:b0:0a:91:1e:bb:
                    b6:9a:71:7b:0a:15:b0:bf:41:c2:ae:d6:ce:4f:2f:
                    6d:0d:12:2f:d0:ee:d3:bd:a8:78:b6:bc:6e:c6:e4:
                    79:43:79:bf:27:d5:90:66:5e:e4:25:0d:95:12:28:
                    c2:ff:e7:81:b4:f8:1e:8a:94:d2:69:0e:6a:50:29:
                    e0:14:bf:c5:f1:a3:b0:d7:f4:82:ed:c8:4f:94:63:
                    49:a1:17:aa:8f:5d:9c:30:e9:63:a3:4a:28:2e:41:
                    12:3d:67:37:29:23:36:31:64:31:e9:0e:40:62:9d:
                    53:67:7d:64:70:ee:9b:8e:72:2e:03:78:df:e8:0d:
                    e1:35:e1:5f:d8:ac:68:52:92:92:54:ab:13:f2:73:
                    0f:1f:c0:2e:09:ba:8f:ed:ca:b6:a7:b0:b4:30:fb:
                    a2:04:67:40:87:59:98:77:ed:2f:16:10:79:ee:ba:
                    f0:aa:63:37:56:65:29:8f:ff:b8:b7:43:f8:76:a6:
                    85:ed:fa:54:24:a6:2b:87:64:21:d4:af:1d:c5:66:
                    8e:39:16:30:57:2c:a9:b0:1d:e8:cb:5a:7b:5d:4a:
                    fc:f9:1c:9e:f1:c2:26:e0:15:9d:d8:e1:ad:54:f4:
                    a1:57:fb:26:67:88:65:92:10:40:e4:06:0f:f3:40:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:70:6C:4A:55:D2:8C:ED:E0:18:39:14:8B:79:48:71:0B:46:00:DE
            X509v3 Authority Key Identifier:
                keyid:7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/3133312e3232312e3137352e302f32342d3234203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:14:62:a7:ff:97:d9:9b:af:9b:d3:7d:da:91:ff:f3:bb:c5:
         72:17:9d:f4:37:3f:41:fe:0e:49:90:54:1d:07:83:be:5e:c9:
         bb:d8:22:af:98:51:e4:71:97:f0:8a:bf:a3:7d:f4:7d:bd:f8:
         c0:96:8d:01:ea:c1:96:e4:17:ef:28:00:c5:0e:10:a8:c4:84:
         34:16:60:38:d8:7b:47:e5:49:4c:52:35:df:98:26:2f:54:c6:
         04:5d:31:a3:92:f7:c7:68:84:06:0f:90:57:a4:97:90:f8:4f:
         2a:02:4e:83:14:20:99:4d:c6:73:4f:e4:8d:0d:b9:0a:e9:18:
         98:40:b9:51:34:c7:bc:c9:68:87:9c:2e:ca:38:a5:c2:39:42:
         34:2f:0f:c3:3e:7e:23:02:9e:c5:33:0b:e8:dc:58:80:da:23:
         1f:a1:61:a5:67:da:73:b5:e9:51:2e:59:5c:15:af:db:f7:ca:
         f9:e9:45:3e:d2:b8:3c:a9:0a:17:9a:4a:6f:db:50:d9:6c:28:
         ca:53:45:0d:97:6b:83:78:83:fa:bc:aa:de:08:d6:3d:3a:2a:
         7b:00:5f:cc:db:a5:59:ed:1a:43:fe:d2:7c:98:cb:d4:cc:b2:
         61:2c:24:fd:22:ff:be:3c:0d:cf:f1:d5:42:29:03:26:ba:84:
         1e:fc:2b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:14 2024 by rpki-client on console-ams.rpki-client.org