Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3139312e302f32342d3234203d3e20323634333932.roa
File:                     3133312e3136312e3139312e302f32342d3234203d3e20323634333932.roa (raw, json)
Hash identifier:          9hVCDYxnsUyhuBFDHMHE1fidftWPcIHBKG9CrSJBEXs=
Subject key identifier:   65:79:5A:D4:B2:AC:C6:5A:45:23:4E:7F:F3:3C:16:52:D4:A8:1F:E6
Certificate issuer:       /CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
Certificate serial:       0CA80680C120B0D7B626EAE34A784D36F1BD52A7
Authority key identifier: 69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3139312e302f32342d3234203d3e20323634333932.roa
Signing time:             Thu 04 Apr 2024 06:27:44 +0000
ROA not before:           Thu 04 Apr 2024 06:22:44 +0000
ROA not after:            Thu 03 Apr 2025 06:27:44 +0000
asID:                     264392
IP address blocks:        131.161.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl
                          rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a8:06:80:c1:20:b0:d7:b6:26:ea:e3:4a:78:4d:36:f1:bd:52:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698FB4B827B77BA7F517D219FC2340048BDC33A1
        Validity
            Not Before: Apr  4 06:22:44 2024 GMT
            Not After : Apr  3 06:27:44 2025 GMT
        Subject: CN=65795AD4B2ACC65A45234E7FF33C1652D4A81FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:dc:ce:71:b0:7e:70:70:4a:ce:af:f2:61:
                    10:05:7d:2d:dd:7b:2e:46:8e:6b:a6:eb:ff:9a:bb:
                    e1:2d:53:93:15:37:2f:a8:b0:05:e5:2f:97:2d:e2:
                    7d:5e:f3:d9:11:c9:2d:18:c2:8d:71:b3:81:0c:04:
                    86:4c:c6:9d:03:fe:fe:f0:e5:32:24:11:e0:21:23:
                    ce:1b:9a:d0:a9:90:d4:18:e7:8c:06:33:f5:8c:74:
                    47:fc:09:09:b4:97:ee:25:a7:71:7f:ac:5f:5a:5a:
                    74:6e:be:87:93:d2:ce:27:bd:16:f9:1c:c5:0b:bc:
                    bc:31:1e:ea:50:95:a3:17:9a:fe:87:02:6d:b4:7e:
                    57:1b:22:e1:b7:db:63:65:4e:c9:e8:9e:10:19:e8:
                    9e:f9:ba:5c:1b:dd:5b:c2:aa:fc:58:db:ca:e8:1a:
                    af:69:42:5f:c7:03:73:9d:50:31:f2:15:db:8b:5a:
                    9f:2a:41:32:f3:3f:e3:2e:1b:e3:15:00:17:b5:1d:
                    bf:ae:3a:c7:e7:07:b1:97:aa:c2:f3:cb:cd:22:78:
                    87:fb:7b:89:7b:f8:c0:82:61:36:d3:ae:d6:2f:7d:
                    4b:81:87:8e:f0:8b:85:54:0e:9f:cd:a4:73:52:0e:
                    a3:28:81:44:23:24:48:c3:2b:c0:e2:c4:1d:cc:8f:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:79:5A:D4:B2:AC:C6:5A:45:23:4E:7F:F3:3C:16:52:D4:A8:1F:E6
            X509v3 Authority Key Identifier:
                keyid:69:8F:B4:B8:27:B7:7B:A7:F5:17:D2:19:FC:23:40:04:8B:DC:33:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/698FB4B827B77BA7F517D219FC2340048BDC33A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/1/3133312e3136312e3139312e302f32342d3234203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:61:7b:d7:bf:a9:02:0a:5a:e9:12:6b:57:bd:91:e8:ac:35:
         d3:2c:15:e3:2d:8c:1a:53:9e:02:63:4c:7e:a5:d8:8f:77:42:
         bb:da:49:da:d9:39:2e:49:1b:1b:e2:b1:1f:f2:bd:53:92:38:
         77:38:c0:f3:b1:34:99:c9:0c:f0:69:e2:68:10:61:34:02:b5:
         27:65:ca:c5:47:8c:3e:e5:db:04:b8:eb:82:e3:39:e4:d6:a8:
         f4:c8:aa:71:21:74:eb:93:95:9a:a9:2c:da:25:10:98:8a:d1:
         48:d3:14:39:66:f7:a8:8e:c4:8a:12:7a:a5:ab:f8:e3:0d:4d:
         ff:52:51:55:42:e4:10:05:05:72:cb:f1:21:ce:af:28:43:24:
         83:04:99:ba:40:70:08:6a:77:1c:15:86:e4:40:00:f2:3d:24:
         04:5f:b7:ec:6a:84:3d:fd:e9:96:9f:46:c0:5a:bd:ff:ff:9f:
         d6:01:b2:5f:2c:ed:db:6e:a3:a6:6f:bb:29:98:a2:f5:97:dc:
         1e:03:41:4a:bd:e0:27:75:0d:25:72:83:30:9f:6a:b9:6f:10:
         a3:dc:12:eb:b1:36:9c:04:cd:fe:c8:6d:c9:b4:34:71:51:b0:
         db:99:77:99:36:36:df:88:ad:0e:91:c4:95:86:3b:e5:f4:ae:
         f8:25:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:45 2024 by rpki-client on console-fra.rpki-client.org