Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132362e302f32342d3234203d3e203631363839.roa
File:                     3133312e3130382e3132362e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          wyqjLbLuXmE8TgLYthoyQKgOSPOGr8TOKVURKlphPPs=
Subject key identifier:   F6:3F:41:04:8F:3D:51:B5:FF:BE:85:4F:A3:81:B8:AF:DF:1A:EC:97
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       5BE370AFD0659D735202552227941721B62E93A1
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132362e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:42 +0000
ROA not before:           Fri 23 Aug 2024 19:45:42 +0000
ROA not after:            Fri 22 Aug 2025 19:50:42 +0000
asID:                     61689
IP address blocks:        131.108.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e3:70:af:d0:65:9d:73:52:02:55:22:27:94:17:21:b6:2e:93:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:42 2024 GMT
            Not After : Aug 22 19:50:42 2025 GMT
        Subject: CN=F63F41048F3D51B5FFBE854FA381B8AFDF1AEC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:47:8b:29:a7:12:11:63:33:04:3b:11:7e:
                    e0:76:9d:25:3c:ab:77:42:c6:7a:8c:75:ae:5d:a4:
                    da:ad:01:7d:6f:87:43:64:60:1f:a9:73:34:5d:3b:
                    c3:54:ef:e0:8a:01:8b:d1:28:0d:f7:57:60:2f:bb:
                    90:75:d6:71:a1:76:df:fb:77:03:46:e2:24:08:8a:
                    1c:fd:67:16:c3:94:f0:66:b1:c9:0f:9f:ab:14:b8:
                    3a:ee:0e:68:5e:03:dc:b3:fa:d5:37:37:99:57:87:
                    d0:f7:1e:be:cf:1b:d3:22:a9:d8:57:33:a9:4b:da:
                    23:7a:c7:6d:0c:9b:be:1c:b8:13:d0:8a:d7:c7:ce:
                    df:ec:9c:17:ce:0e:68:bf:c3:26:4a:11:6a:50:2c:
                    d0:4f:e4:80:15:6b:58:67:52:ce:4f:25:8e:80:05:
                    a3:e4:7a:22:f9:3f:6a:56:9c:54:5f:ab:ca:dd:71:
                    f1:b4:fa:97:37:44:e1:6a:60:39:e6:bf:a9:42:0f:
                    03:fe:bb:a1:35:32:bd:01:61:bc:9a:9c:c9:1d:5d:
                    c9:59:36:1e:a9:5e:6d:8f:c1:32:14:d5:fd:0b:1a:
                    7d:5b:21:0b:dc:6d:ee:b5:d2:b1:0c:70:be:6e:52:
                    d9:90:55:12:20:f1:46:da:ed:1e:89:42:04:a3:08:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3F:41:04:8F:3D:51:B5:FF:BE:85:4F:A3:81:B8:AF:DF:1A:EC:97
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132362e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:f5:bd:20:3d:1d:3c:f2:a8:12:f1:48:ed:90:88:0b:89:26:
         9f:52:a5:44:dc:a6:d1:84:4f:dd:47:ba:95:a2:0a:f4:51:63:
         ea:88:c5:ad:cf:03:f0:d9:8d:56:d3:c2:e7:09:ae:12:98:02:
         d0:8e:85:87:28:e3:76:6a:96:ec:ea:f3:4f:9a:54:34:0c:0b:
         be:3f:45:99:21:dd:bd:c3:ed:4f:68:45:8d:5f:bc:e0:86:75:
         d3:52:ea:f9:0d:05:12:19:b9:9f:4d:3b:48:ab:8f:27:65:8e:
         8d:9b:60:51:02:f0:95:0c:85:8b:57:26:c1:29:40:fd:69:d4:
         f0:a2:43:fa:ba:c8:2f:34:84:dc:3a:2f:f7:a2:aa:ca:1b:d9:
         89:49:0d:45:6b:b0:37:a7:33:70:f4:21:39:93:30:93:50:69:
         53:55:c0:b8:58:ba:02:32:82:8f:c8:fe:e4:ac:33:31:a7:a3:
         2d:eb:4c:6d:84:05:5e:cc:ff:e2:4b:9d:61:33:bb:3d:00:87:
         9f:62:1e:99:ef:b9:c0:f6:6c:c3:99:5a:b4:7d:e7:31:b3:24:
         e9:53:85:14:2b:4e:bd:fe:c0:89:ac:56:01:bd:a7:7d:19:9b:
         7a:3a:a6:16:4b:89:cf:26:ec:f3:d5:45:5a:b6:0f:83:cc:35:
         33:a5:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:53 2024 by rpki-client on console-fra.rpki-client.org