Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132352e302f32342d3234203d3e203631363839.roa
File:                     3133312e3130382e3132352e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          BXfPwy8/1PEDV8PzlbhMhFcfd41wCCxRHCUKrbyaIG8=
Subject key identifier:   B1:2B:05:20:8D:E0:DD:A5:87:0A:29:55:DD:F1:01:17:00:97:A8:BE
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       50D6CE600E8B86276516A5F2168B53AB88293F78
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132352e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:22 +0000
ROA not before:           Fri 23 Aug 2024 19:45:22 +0000
ROA not after:            Fri 22 Aug 2025 19:50:22 +0000
asID:                     61689
IP address blocks:        131.108.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d6:ce:60:0e:8b:86:27:65:16:a5:f2:16:8b:53:ab:88:29:3f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:22 2024 GMT
            Not After : Aug 22 19:50:22 2025 GMT
        Subject: CN=B12B05208DE0DDA5870A2955DDF101170097A8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:62:6b:74:cd:19:73:b5:92:a9:27:9d:58:
                    5d:62:f1:c6:09:08:eb:86:2f:66:03:69:d8:e4:c8:
                    de:fb:cc:60:7e:12:c9:30:5e:8c:e8:54:1d:69:ed:
                    ca:85:b1:e8:89:f1:e3:6e:ce:6f:49:29:1d:29:7e:
                    9c:7e:6a:bf:84:0b:ad:56:a1:44:c3:bf:1e:80:d4:
                    10:69:6b:49:5c:6c:7b:85:3a:c4:3a:35:8f:db:6f:
                    7c:43:ee:f8:31:f5:04:66:76:30:0f:48:56:09:7d:
                    61:7c:ef:c9:e6:08:91:7b:48:b1:87:bd:49:c3:ed:
                    84:41:4d:ab:36:b7:cd:ba:1c:af:c5:d0:b3:a1:be:
                    07:5b:af:10:b2:f5:9a:7a:88:d9:b2:9f:fc:56:cb:
                    80:7f:03:d2:f3:f5:a3:75:44:cd:5c:25:42:47:20:
                    34:e1:3d:87:d1:04:d1:3b:e5:16:42:66:5d:26:ce:
                    88:cc:a5:1a:fc:e3:cf:c9:0e:b1:87:6f:c7:83:83:
                    52:69:39:cd:71:ff:d0:2c:46:ce:ff:f1:41:83:1b:
                    94:9c:57:b9:b3:30:3f:83:8e:7c:4c:b1:aa:55:34:
                    73:65:45:1c:0d:35:15:62:6a:87:c8:a2:09:7f:60:
                    d5:d4:ad:d6:74:a0:52:8d:8e:91:f5:27:7f:9e:bd:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2B:05:20:8D:E0:DD:A5:87:0A:29:55:DD:F1:01:17:00:97:A8:BE
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132352e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:96:45:d5:32:8e:25:58:20:e1:4e:a4:0a:7f:f8:a0:5e:e7:
         1f:5d:5a:05:9c:2d:5c:ad:3d:98:92:31:b2:ca:e5:ed:a4:15:
         dd:13:ca:a5:16:e7:6c:53:78:c4:37:ee:f1:48:4c:dc:27:1e:
         b7:4b:d9:30:72:09:77:38:ff:04:05:4c:2c:40:10:8f:24:b7:
         48:9e:89:0b:57:13:3e:58:d6:e8:85:41:6f:5b:81:ac:e1:d7:
         7c:c9:f6:31:a7:5e:ce:d3:e1:75:92:28:58:2d:6a:37:42:ef:
         d4:9e:5c:d0:38:31:28:a3:f4:3d:a0:2d:9b:52:34:63:35:28:
         70:18:73:bc:0b:b0:62:35:29:85:50:19:83:4c:ed:cb:2e:75:
         e5:36:e3:25:8b:53:dd:45:8e:4e:b6:85:a6:f9:a9:1e:67:f1:
         19:a6:b6:4d:d3:bc:c4:92:3c:39:68:73:d3:e5:84:27:69:44:
         1d:de:9d:f9:5c:99:74:98:11:0d:27:d3:0b:db:46:45:c2:1d:
         d3:15:ca:24:d1:07:2e:e8:4c:fc:27:5d:96:fd:2f:f8:ff:f9:
         81:86:a7:50:31:d1:78:d6:4b:e9:7b:38:dc:59:d8:e7:74:bf:
         c0:1b:f6:99:e3:6a:05:2a:e9:58:57:45:50:8b:04:55:22:20:
         22:75:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:32 2024 by rpki-client on console-fra.rpki-client.org