Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132342e302f32342d3234203d3e203631363839.roa
File:                     3133312e3130382e3132342e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          cH1HdfMuXoDo4Y/svZtx8OB0eJA2HZiM4bF2SMiOvvM=
Subject key identifier:   82:89:5E:71:7E:83:F3:94:F8:18:36:99:FF:D4:BC:3A:D4:4A:CA:EC
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       14AE5ED5308B09373AB436237F386ED607E4CECC
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132342e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:30 +0000
ROA not before:           Fri 23 Aug 2024 19:45:30 +0000
ROA not after:            Fri 22 Aug 2025 19:50:30 +0000
asID:                     61689
IP address blocks:        131.108.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ae:5e:d5:30:8b:09:37:3a:b4:36:23:7f:38:6e:d6:07:e4:ce:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:30 2024 GMT
            Not After : Aug 22 19:50:30 2025 GMT
        Subject: CN=82895E717E83F394F8183699FFD4BC3AD44ACAEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:8a:22:09:19:19:e9:94:be:2a:91:80:6e:
                    06:a1:38:c2:9b:b6:92:ce:dc:c3:67:b9:36:c6:6b:
                    a1:15:bc:fa:62:0a:3e:33:43:5f:46:a3:d2:15:e4:
                    26:45:cd:4c:0e:da:ea:df:ba:04:81:3c:93:43:d2:
                    1a:a1:02:a6:76:f8:7c:16:c2:dd:25:1c:25:4c:83:
                    a9:76:90:30:94:86:a1:75:2c:b4:50:fc:e4:4e:fa:
                    16:28:01:78:93:10:0b:a0:20:77:a6:22:98:d8:9b:
                    62:0a:0e:4d:7c:09:b6:73:be:5e:29:a9:ab:6c:05:
                    e1:fb:ce:b8:d7:9b:b8:79:20:15:b0:40:2a:f0:c9:
                    a0:06:01:26:9d:e4:85:34:91:af:84:56:31:54:5d:
                    e1:ba:b3:e2:8f:65:6b:5f:65:54:82:09:fe:1e:c1:
                    68:ed:e2:7a:20:0a:77:28:53:23:44:3b:8e:c2:9c:
                    00:74:6b:04:a6:9d:1c:bf:03:c8:4a:68:98:01:a9:
                    28:0b:85:b4:eb:68:50:21:59:c8:b1:17:9b:ed:e0:
                    2b:a5:ed:9c:2a:27:a2:e4:fe:a3:cf:35:72:a8:45:
                    1a:93:86:97:5b:4f:68:1c:b0:d5:ca:e1:f5:29:b1:
                    70:00:1a:55:fb:5e:95:ec:cb:95:33:6c:6b:13:89:
                    69:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:89:5E:71:7E:83:F3:94:F8:18:36:99:FF:D4:BC:3A:D4:4A:CA:EC
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132342e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:55:72:b4:f5:5c:ce:b1:e0:03:af:14:20:47:51:83:96:dd:
         ab:de:53:07:9e:2b:d2:80:29:1a:d1:86:36:45:bb:f8:16:0e:
         1d:f2:c3:0f:f1:3b:3b:0e:4e:b7:4a:26:cb:73:4b:d7:5c:19:
         ee:3f:06:e9:fc:22:e1:70:d5:1e:1b:25:82:ee:82:68:f9:52:
         9f:89:c1:97:dd:96:c7:db:a5:ba:d9:8e:8b:bc:da:ff:2b:74:
         f6:46:e8:a1:f5:00:ff:8e:7b:41:d6:1a:98:11:9f:a8:3b:41:
         7a:ee:37:d1:75:01:97:bb:63:e5:21:67:a7:f3:cf:32:5d:cd:
         d6:c7:e0:97:e6:94:f3:75:6b:41:f6:03:2c:24:bf:e4:93:9c:
         31:b8:10:9d:39:b1:0a:a4:29:bb:05:7c:cc:d5:d4:92:e0:05:
         92:32:eb:52:7b:ff:c8:ca:03:ea:49:e9:9d:41:7d:2d:74:c1:
         6f:7a:09:31:11:f4:99:13:24:32:a2:e3:17:37:5f:7f:76:32:
         86:64:f1:cb:e9:50:02:a8:1e:65:92:68:c1:c8:83:4f:e3:a1:
         36:a4:eb:d9:66:d8:37:45:02:44:47:4e:6c:39:10:45:42:98:
         25:8c:8b:59:69:31:d7:60:f4:df:53:36:40:8f:8e:99:9a:e3:
         d8:b8:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:32 2024 by rpki-client on console-fra.rpki-client.org