Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/3133312e3235352e3230302e302f32322d3234203d3e20323632353436.roa
File:                     3133312e3235352e3230302e302f32322d3234203d3e20323632353436.roa (raw, json)
Hash identifier:          +W8ZE9N3SmiZDAtRqDRxEXNa4sm6YiRwcbrQ56TiYuI=
Subject key identifier:   FE:A8:2C:25:B2:F7:43:DA:6A:58:DC:F0:06:98:70:8D:6A:CE:F5:39
Certificate issuer:       /CN=7601FABE684263D9F7C5334E8ACFF4C84F5491C4
Certificate serial:       0FC1E4E3133B14908CCCB2FFE42130E877AD6D0E
Authority key identifier: 76:01:FA:BE:68:42:63:D9:F7:C5:33:4E:8A:CF:F4:C8:4F:54:91:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/3133312e3235352e3230302e302f32322d3234203d3e20323632353436.roa
Signing time:             Mon 28 Oct 2024 17:00:10 +0000
ROA not before:           Mon 28 Oct 2024 16:55:10 +0000
ROA not after:            Mon 27 Oct 2025 17:00:10 +0000
asID:                     262546
IP address blocks:        131.255.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.crl
                          rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c1:e4:e3:13:3b:14:90:8c:cc:b2:ff:e4:21:30:e8:77:ad:6d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7601FABE684263D9F7C5334E8ACFF4C84F5491C4
        Validity
            Not Before: Oct 28 16:55:10 2024 GMT
            Not After : Oct 27 17:00:10 2025 GMT
        Subject: CN=FEA82C25B2F743DA6A58DCF00698708D6ACEF539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:74:fa:ba:22:eb:fc:51:ed:52:76:9b:f5:
                    87:d5:d3:b4:e8:c0:ae:96:38:a3:85:1d:7f:a1:6b:
                    68:23:e4:c7:65:b7:e3:ec:9a:70:98:50:ad:ff:7b:
                    ac:3b:4c:c9:d3:41:86:4f:4e:2d:c3:7e:6d:ff:c4:
                    da:c3:f3:61:e7:e3:31:95:c8:95:e2:9e:ef:ad:3f:
                    49:52:af:3c:fd:0c:ff:d7:ab:2a:d5:b7:5c:05:b3:
                    74:98:54:98:8b:09:34:2f:ae:fc:ac:f3:9b:b3:7b:
                    96:ad:11:8e:f8:05:20:d2:0c:9d:1d:a7:42:d4:83:
                    31:48:46:53:29:7a:25:f4:e1:68:ae:3a:e8:e9:89:
                    52:a6:4d:12:6c:0b:c6:de:a5:6b:75:b6:0c:1a:4c:
                    48:e5:b1:02:4b:0f:02:f9:79:47:94:81:6b:c5:49:
                    5e:0f:6a:05:37:dd:b8:1f:5a:34:55:89:32:9f:8e:
                    1e:35:34:13:5b:34:9f:55:ec:18:ba:e3:08:7b:ff:
                    b7:95:bb:b0:fe:b8:3a:a7:42:51:aa:06:fe:1a:9b:
                    fc:8c:44:15:71:6a:79:00:18:b2:ae:f7:e9:47:5b:
                    e0:d7:5d:57:e4:39:27:54:27:6a:a3:70:16:e1:54:
                    c7:dc:7a:0f:c3:4b:4a:fb:3b:09:d8:1b:6f:91:d4:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A8:2C:25:B2:F7:43:DA:6A:58:DC:F0:06:98:70:8D:6A:CE:F5:39
            X509v3 Authority Key Identifier:
                keyid:76:01:FA:BE:68:42:63:D9:F7:C5:33:4E:8A:CF:F4:C8:4F:54:91:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/3133312e3235352e3230302e302f32322d3234203d3e20323632353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:7e:0e:63:99:a5:0e:dc:62:6f:29:b8:b0:c5:c1:a7:53:20:
         cf:5f:f6:e9:95:76:6d:6f:e2:9d:d9:0a:75:b6:aa:2a:ff:81:
         41:a6:80:f0:a2:86:b7:0d:af:04:ca:97:7b:c4:d5:d5:7d:45:
         83:44:9d:e5:1e:bd:2d:f0:0a:85:ca:65:22:55:90:55:68:60:
         45:c4:05:96:dc:76:b2:d2:70:bf:8b:9d:b4:0f:07:03:2f:3d:
         e8:bb:29:0b:88:90:b3:b5:62:72:1c:3d:fe:43:1c:cd:37:cf:
         3c:58:3a:37:14:fe:ee:1e:16:ac:4d:5d:59:df:10:bf:8e:70:
         95:bb:94:7b:85:96:c7:5a:03:7e:28:6c:e8:8d:55:c7:24:41:
         ef:07:ca:58:16:97:90:e0:e0:c3:7e:44:55:6b:c4:47:1f:d8:
         b2:fc:79:1e:99:bd:95:32:fa:6f:18:c2:d3:e6:76:b5:df:29:
         f3:bc:ab:98:39:f9:4e:0b:48:7a:2a:bb:50:11:8d:8a:28:8c:
         32:88:ab:bd:bd:b8:a9:c2:07:e0:1e:cc:94:3c:42:a7:2c:f6:
         33:65:8d:0c:f8:d0:93:e7:9a:93:a0:72:31:c5:be:22:3d:ce:
         a9:4a:29:de:e6:25:5c:60:1c:57:9d:af:73:92:ac:16:d3:24:
         8b:95:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:35 2024 by rpki-client on console-ams.rpki-client.org