Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa
File:                     3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa (raw, json)
Hash identifier:          kPnVbn/oV7M0ofXA1v1HZg16Eg1JTh5fXU4zSOoYNVc=
Subject key identifier:   A9:6F:38:5F:F1:EF:03:ED:0F:8C:BE:99:9E:C8:2D:C7:B8:12:1A:51
Certificate issuer:       /CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
Certificate serial:       62BE366185F4F246CA42236ED1342B2478A5C669
Authority key identifier: 69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa
Signing time:             Thu 04 Apr 2024 06:27:44 +0000
ROA not before:           Thu 04 Apr 2024 06:22:44 +0000
ROA not after:            Thu 03 Apr 2025 06:27:44 +0000
asID:                     264392
IP address blocks:        131.161.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl
                          rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:be:36:61:85:f4:f2:46:ca:42:23:6e:d1:34:2b:24:78:a5:c6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
        Validity
            Not Before: Apr  4 06:22:44 2024 GMT
            Not After : Apr  3 06:27:44 2025 GMT
        Subject: CN=A96F385FF1EF03ED0F8CBE999EC82DC7B8121A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:8e:bd:d0:0e:d0:5c:b0:92:c9:25:42:4d:
                    49:0a:e2:b8:39:69:09:e3:b9:c3:cc:d3:4e:26:44:
                    26:74:37:0d:17:f6:7e:9d:c0:14:48:bd:fb:83:eb:
                    a8:51:22:4b:09:5a:8e:a0:bc:32:4d:e0:df:d7:ac:
                    56:c7:fc:d2:82:1f:51:a2:45:14:a5:1d:cc:e7:87:
                    b5:28:7b:b3:5e:5b:4b:1b:ce:8f:7f:71:be:2e:29:
                    78:17:9a:f6:ce:73:f4:57:3d:80:5a:31:eb:65:c4:
                    7e:d4:3a:8d:84:14:17:6f:32:06:c4:c9:06:03:91:
                    6d:bd:11:18:09:de:fc:7c:b4:e1:72:ee:6a:a7:e9:
                    f7:33:4a:4e:01:c4:57:32:b7:a7:1c:cb:b7:34:f5:
                    f5:d5:c5:11:81:8c:94:25:83:d2:ac:38:0e:27:a3:
                    63:4c:4d:95:31:08:05:10:48:bb:f3:08:69:5f:16:
                    08:47:51:98:4b:0f:ff:f2:fb:e5:79:9b:89:29:a1:
                    d5:54:1a:33:da:2a:5c:af:2b:3d:1a:73:d7:88:76:
                    31:b7:98:d1:3b:47:78:95:c5:a6:bf:3e:25:91:8a:
                    af:9d:5b:09:8c:1b:05:4b:88:41:f1:91:e0:fc:1b:
                    88:cb:8b:43:9e:29:08:0a:9b:41:f6:43:d4:6a:40:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6F:38:5F:F1:EF:03:ED:0F:8C:BE:99:9E:C8:2D:C7:B8:12:1A:51
            X509v3 Authority Key Identifier:
                keyid:69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138382e302f32342d3234203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:1b:c1:89:d3:af:75:88:e9:f1:ce:4b:6c:16:96:fe:6b:a4:
         85:66:e0:38:f3:66:af:8f:7c:82:ff:bc:35:be:79:a4:9f:ad:
         81:1c:e5:f4:43:67:92:ea:d0:3c:cb:55:e3:b0:fa:26:e3:4d:
         8d:09:dc:fa:58:30:24:02:44:7a:93:de:ed:09:39:ad:73:56:
         46:c2:e1:bf:c3:32:01:02:2b:4d:c6:f5:87:c5:28:5e:bb:ec:
         0e:c9:10:74:e4:ec:d2:80:70:61:2e:5f:81:c1:09:ac:7d:00:
         b8:94:1c:67:27:1d:36:01:3f:55:1b:d5:ce:96:81:5a:4d:62:
         85:1b:db:41:36:74:d0:d3:59:4d:9f:11:5a:e7:1e:5f:b1:82:
         f6:c2:3b:a6:ff:70:2a:34:d7:fb:53:e7:00:d6:74:47:90:74:
         c1:cb:1e:cf:4e:7e:52:42:27:7e:a2:d6:3f:81:cd:73:57:12:
         84:06:22:cd:1f:47:75:b4:bf:4f:47:3a:f4:53:a0:63:99:fe:
         0b:b3:f5:bc:30:8a:ba:db:61:91:77:47:89:f0:fc:d4:b4:6c:
         5a:7b:8b:18:29:84:0d:e3:38:02:13:de:3b:00:16:10:b8:bf:
         8c:95:3e:11:e2:cc:f9:7e:11:47:42:41:91:6a:a7:f6:ca:05:
         3b:da:6b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org