Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa
File:                     3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          1uLqSNH4kZxfdUNdKv5elwcIRst6Xsdm+KCVpqsFgLc=
Subject key identifier:   71:BE:C0:A1:47:94:2C:A5:F9:E7:45:71:46:18:9F:EB:15:72:3A:3F
Certificate issuer:       /CN=8A9A31995D56C92279C59971190F9CDC7E94D924
Certificate serial:       49381B577730CD852A404607387D49A5E0CBB02D
Authority key identifier: 8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa
Signing time:             Thu 04 Apr 2024 14:44:54 +0000
ROA not before:           Thu 04 Apr 2024 14:39:54 +0000
ROA not after:            Thu 03 Apr 2025 14:44:54 +0000
asID:                     267388
IP address blocks:        131.196.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.crl
                          rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 11:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:38:1b:57:77:30:cd:85:2a:40:46:07:38:7d:49:a5:e0:cb:b0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9A31995D56C92279C59971190F9CDC7E94D924
        Validity
            Not Before: Apr  4 14:39:54 2024 GMT
            Not After : Apr  3 14:44:54 2025 GMT
        Subject: CN=71BEC0A147942CA5F9E7457146189FEB15723A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:f6:55:d0:3d:0c:ea:31:cf:73:48:7c:96:
                    1f:4f:4b:cb:03:5e:34:98:da:4b:43:4f:d4:8b:bd:
                    ff:f8:cf:9b:37:f6:94:2b:2e:2e:11:bb:fe:90:a9:
                    44:de:1f:b7:25:82:49:55:64:d4:39:ba:9c:e0:ed:
                    ae:6a:6b:c1:5c:65:0b:5a:01:95:0f:f4:61:7b:12:
                    38:f0:1c:7e:f2:e7:36:92:5b:3a:89:54:99:35:00:
                    ca:6d:9e:a7:5d:2b:65:db:fa:e6:79:f7:08:ed:69:
                    4b:6a:6d:5d:44:1d:71:8b:ab:87:35:57:32:79:d6:
                    d8:31:6a:52:51:4b:99:26:5c:b5:60:9d:36:ba:64:
                    bd:45:aa:b6:79:81:e1:36:10:76:a3:4c:cf:9d:f5:
                    e5:16:a3:12:91:96:50:79:fd:3d:fe:de:e7:9a:18:
                    d6:00:38:11:55:b3:f8:9b:7d:24:01:8c:ce:44:14:
                    72:4f:ce:4b:05:3d:56:6e:9c:2d:aa:6b:44:c5:ee:
                    d7:f6:62:2e:92:ed:bd:ad:6b:15:ed:11:5e:9e:0a:
                    36:cb:35:e3:80:5b:df:e0:b2:fd:d0:8f:57:a4:b2:
                    5e:13:fd:47:5a:2b:86:13:29:eb:53:f9:33:50:46:
                    36:ec:61:18:8f:a8:07:a6:ea:03:04:f9:8f:39:4e:
                    d5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BE:C0:A1:47:94:2C:A5:F9:E7:45:71:46:18:9F:EB:15:72:3A:3F
            X509v3 Authority Key Identifier:
                keyid:8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/3133312e3139362e34302e302f32322d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:77:e1:6d:2e:b6:8f:65:8c:8b:0a:07:04:2a:55:77:29:41:
         56:4c:54:d7:59:4b:1c:95:5f:1c:77:a2:b2:de:16:af:3d:78:
         19:f8:e5:46:1b:99:ed:7d:38:e6:7a:80:a6:48:f4:5e:6d:27:
         a1:2d:26:12:47:e4:08:c5:4f:db:c1:43:a9:38:ca:e1:bd:93:
         63:a9:a6:d6:c7:49:6e:87:4f:cb:b6:31:f7:8a:5f:24:b6:c9:
         11:f6:9e:c1:34:b5:04:86:fc:02:b2:fd:71:93:21:b9:be:ba:
         08:89:57:f8:f3:f3:ec:ac:a6:5c:4e:13:29:48:f4:7d:5e:43:
         9d:c9:cf:e7:74:bd:24:79:b2:86:bf:23:17:f1:58:45:38:65:
         99:63:70:20:4d:e3:69:d0:f7:32:80:d0:a1:b0:35:39:df:e9:
         46:50:2e:09:14:0e:1c:5b:73:33:cf:0b:75:c3:55:51:bd:aa:
         12:21:47:10:a3:d1:14:ec:69:21:10:d9:9e:22:cf:4d:ca:e0:
         e9:92:5a:15:78:15:81:b1:43:b0:a2:e0:e4:53:13:f4:15:10:
         08:57:88:a1:6b:df:c9:71:b9:bf:81:b9:a0:8d:f5:22:a8:b9:
         3d:d5:b1:36:4d:c0:b0:d9:96:6c:3c:7d:5c:61:4d:aa:0b:37:
         62:7c:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:55 2024 by rpki-client on console-fra.rpki-client.org