Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138392e302f32342d3234203d3e20323634333932.roa
File:                     3133312e3136312e3138392e302f32342d3234203d3e20323634333932.roa (raw, json)
Hash identifier:          429EyjfwRUDY0bP9HafVDZlboBzcb+2gHg190LFz2oc=
Subject key identifier:   44:E7:B8:A6:7E:3E:93:F9:EF:F7:2A:43:A0:48:2C:DD:9D:20:0D:B0
Certificate issuer:       /CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
Certificate serial:       5AF82B3A4EC2308290F6954916BD6DBCBCA97301
Authority key identifier: 69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138392e302f32342d3234203d3e20323634333932.roa
Signing time:             Thu 04 Apr 2024 06:27:44 +0000
ROA not before:           Thu 04 Apr 2024 06:22:44 +0000
ROA not after:            Thu 03 Apr 2025 06:27:44 +0000
asID:                     264392
IP address blocks:        131.161.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl
                          rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f8:2b:3a:4e:c2:30:82:90:f6:95:49:16:bd:6d:bc:bc:a9:73:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
        Validity
            Not Before: Apr  4 06:22:44 2024 GMT
            Not After : Apr  3 06:27:44 2025 GMT
        Subject: CN=44E7B8A67E3E93F9EFF72A43A0482CDD9D200DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a2:d7:3e:fc:20:5f:f9:a1:99:28:df:64:c1:
                    82:08:b4:6e:f3:26:fe:3c:c0:d0:5c:db:3d:19:c9:
                    f1:4f:c9:a7:67:af:c9:e2:b1:bf:d9:1c:c7:de:2f:
                    69:7a:eb:ac:b1:64:4c:1e:67:aa:2e:59:35:9e:fa:
                    7c:db:a7:48:e0:de:4c:87:ab:cb:26:7e:36:22:c7:
                    03:cd:dc:0f:da:4e:8a:32:eb:83:22:8c:5e:45:17:
                    06:c0:2a:2f:68:fa:36:2e:9d:97:5d:2a:88:e5:7d:
                    d4:08:6b:de:6b:2c:73:c1:25:fc:77:bc:57:12:a9:
                    f1:68:9b:cc:47:40:46:e8:e5:94:35:2d:15:91:10:
                    87:13:3e:3f:94:e2:ce:ff:71:3a:d7:2f:a9:de:7f:
                    c7:42:54:15:99:5d:84:25:6c:34:ab:64:f9:3e:77:
                    62:13:e7:7b:0d:35:4e:77:41:29:a7:70:ed:2d:de:
                    fa:b5:7c:a9:b9:5b:d0:82:5f:c3:bf:ff:16:1e:b7:
                    a5:7e:19:a9:08:72:19:a3:41:14:76:cf:56:11:6e:
                    8e:64:46:a2:49:59:4d:17:ee:7c:d0:bd:94:78:5c:
                    c8:d1:2d:ef:c6:17:b7:72:59:a0:22:09:b0:e1:c8:
                    4b:2f:71:94:05:2d:c4:b5:d9:08:3b:90:b6:ed:42:
                    2a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E7:B8:A6:7E:3E:93:F9:EF:F7:2A:43:A0:48:2C:DD:9D:20:0D:B0
            X509v3 Authority Key Identifier:
                keyid:69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3138392e302f32342d3234203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:3c:2d:79:d8:ee:29:44:a7:f1:02:ae:76:06:61:c1:5d:4c:
         24:82:12:d4:24:87:2c:7c:0d:65:27:50:7b:07:19:2f:0d:30:
         31:f6:d8:91:14:ad:50:0f:3f:53:1c:44:fa:be:d0:bf:03:b5:
         85:e4:bb:86:65:6f:cf:cb:48:65:43:dc:4e:e6:97:1b:7f:b6:
         63:38:18:70:ed:fb:b3:dd:91:27:dd:02:67:46:f4:52:24:39:
         29:23:82:35:82:58:be:ed:c8:2e:f2:1e:34:95:e7:1a:5d:5b:
         2b:cb:03:8a:12:d3:d3:52:09:0a:e1:9c:ab:04:64:e1:5f:26:
         a4:86:40:69:48:da:0c:ca:e1:b9:b4:e4:09:32:32:d5:98:3d:
         5b:76:6a:5b:e3:25:03:fb:ce:bb:03:a1:0e:4d:6d:33:f2:a8:
         34:83:d1:10:6f:a8:75:12:22:3a:11:5d:38:d9:6d:c8:76:fe:
         27:00:ba:87:94:46:2c:52:35:43:8e:7b:35:02:64:71:14:58:
         9f:c3:e3:d4:02:fe:1c:c7:d4:56:17:61:14:7e:81:35:f8:e8:
         76:c3:24:1d:4d:dd:ab:c1:cb:f1:b9:2e:3b:47:b1:e1:61:44:
         13:b6:ce:7b:a0:aa:31:08:d0:d4:04:b0:5d:d8:27:cc:a3:d9:
         4a:9c:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org