Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/3133312e3130382e34342e302f32322d3234203d3e203631363630.roa
File:                     3133312e3130382e34342e302f32322d3234203d3e203631363630.roa (raw, json)
Hash identifier:          ijQAc6C0ZIvGpx/6pyxXbhFlgncSVHx3iYbvCaZV7dQ=
Subject key identifier:   C4:EC:FC:C7:53:90:6A:EB:30:82:A1:F4:EB:DA:EE:79:87:87:38:79
Certificate issuer:       /CN=684027F204382A1BC3E39E8891804EBB07906C89
Certificate serial:       56FCB5AC0CAE7734F7AFCB30D46CB0B68F93AD40
Authority key identifier: 68:40:27:F2:04:38:2A:1B:C3:E3:9E:88:91:80:4E:BB:07:90:6C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/3133312e3130382e34342e302f32322d3234203d3e203631363630.roa
Signing time:             Thu 04 Apr 2024 01:08:37 +0000
ROA not before:           Thu 04 Apr 2024 01:03:37 +0000
ROA not after:            Thu 03 Apr 2025 01:08:37 +0000
asID:                     61660
IP address blocks:        131.108.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.crl
                          rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fc:b5:ac:0c:ae:77:34:f7:af:cb:30:d4:6c:b0:b6:8f:93:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=684027F204382A1BC3E39E8891804EBB07906C89
        Validity
            Not Before: Apr  4 01:03:37 2024 GMT
            Not After : Apr  3 01:08:37 2025 GMT
        Subject: CN=C4ECFCC753906AEB3082A1F4EBDAEE7987873879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:91:f2:2a:89:1f:93:72:51:c5:c1:2c:53:
                    59:e0:f6:55:90:45:ff:16:32:56:20:ef:0d:93:33:
                    18:6d:4f:0f:98:24:83:1d:8e:ad:b2:aa:55:89:20:
                    d5:f9:71:9c:80:9b:ac:06:d1:f2:7d:98:ec:b0:de:
                    b1:ad:f2:b9:44:3f:44:3b:22:15:0c:3b:60:e1:2a:
                    26:b5:8f:0b:f0:3a:a1:e6:df:e8:6a:f0:06:7a:b0:
                    2f:63:8a:1b:09:ed:03:73:e8:69:32:91:a0:3d:82:
                    a1:02:2b:80:f4:a9:c2:9c:6d:c4:62:f9:40:fd:2a:
                    80:fa:e6:c5:84:5a:88:43:db:4e:36:c5:fc:ec:1e:
                    cc:a1:dd:4b:59:63:03:a7:87:2e:f2:c5:ae:d4:cf:
                    28:5e:79:45:c0:b6:c5:47:b4:18:11:9e:57:5b:0d:
                    35:df:9f:43:d3:f8:18:b5:6d:36:71:14:43:05:fe:
                    42:f9:ec:53:2c:06:4a:21:54:96:86:58:17:af:c3:
                    de:1b:e7:6b:28:f6:88:99:9d:e6:1f:36:f4:d8:1f:
                    9b:db:88:98:29:8d:8f:2e:b1:52:36:c8:8d:dc:94:
                    08:74:f0:c2:93:e8:e8:b3:a3:0c:07:43:1d:32:73:
                    76:28:53:62:76:59:62:04:8f:7c:30:1b:56:dc:0c:
                    05:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EC:FC:C7:53:90:6A:EB:30:82:A1:F4:EB:DA:EE:79:87:87:38:79
            X509v3 Authority Key Identifier:
                keyid:68:40:27:F2:04:38:2A:1B:C3:E3:9E:88:91:80:4E:BB:07:90:6C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/684027F204382A1BC3E39E8891804EBB07906C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/684027F204382A1BC3E39E8891804EBB07906C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/1/3133312e3130382e34342e302f32322d3234203d3e203631363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:03:fa:c2:d9:03:fa:2c:9c:fa:59:7c:6e:98:ba:33:6c:47:
         2d:cc:5f:b0:c6:59:0b:ee:36:53:e9:a2:5c:36:46:e4:6e:4b:
         9e:22:4a:4e:ec:ca:cd:e2:d4:31:9b:a2:56:b5:2f:c9:09:5d:
         1b:29:56:72:f4:cf:f1:56:44:d1:50:85:8c:70:49:64:5b:a2:
         a6:cf:4b:09:62:99:97:03:72:db:1e:c8:26:e1:7d:17:0e:85:
         ba:6c:cb:b4:bb:3f:3a:b8:11:b3:b8:48:75:ac:9f:13:90:7a:
         e1:a0:9c:de:4b:02:a6:4f:06:fe:a7:db:12:49:30:6c:b8:e9:
         b4:96:31:cb:b5:c5:d3:aa:2b:63:5c:a7:68:06:f9:64:a0:32:
         f0:52:2e:f1:66:87:fd:2d:0c:af:b0:43:70:07:e9:ef:e8:33:
         fd:cc:00:a4:79:9f:0c:b8:02:91:df:22:84:fd:80:3f:ea:a4:
         28:de:ef:82:ac:e7:1a:01:cb:d7:5c:fd:14:95:cc:02:37:0b:
         ba:f8:0b:b0:e4:a6:47:b9:c1:4c:5d:94:87:52:32:2d:2d:85:
         b0:44:40:18:c6:cb:9f:3b:8c:ae:ae:35:54:5f:c4:f6:62:bf:
         a1:3b:c2:39:c4:e8:16:fd:78:a2:de:1d:f4:54:05:91:60:7f:
         fa:e4:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:11 2024 by rpki-client on console-ams.rpki-client.org