Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132372e302f32342d3234203d3e203631363839.roa
File:                     3133312e3130382e3132372e302f32342d3234203d3e203631363839.roa (raw, json)
Hash identifier:          6EMySXa4k+FT44c8uqhYt9pgkCcUWNPIPjH7ZkD3/rE=
Subject key identifier:   B1:CA:28:74:DD:AF:07:F9:3A:64:5F:2F:00:D0:04:B4:F1:5A:05:CF
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       11447BAA51F569C420CF23C91BA9427C5E5D7729
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132372e302f32342d3234203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:39 +0000
ROA not before:           Fri 23 Aug 2024 19:45:39 +0000
ROA not after:            Fri 22 Aug 2025 19:50:39 +0000
asID:                     61689
IP address blocks:        131.108.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:44:7b:aa:51:f5:69:c4:20:cf:23:c9:1b:a9:42:7c:5e:5d:77:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:39 2024 GMT
            Not After : Aug 22 19:50:39 2025 GMT
        Subject: CN=B1CA2874DDAF07F93A645F2F00D004B4F15A05CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:de:a4:e1:f8:8a:ac:a6:07:40:50:42:b6:a5:
                    0f:a9:be:3a:5e:ed:ec:9d:23:5b:5a:d5:53:b9:3c:
                    37:70:a8:3e:30:db:36:85:bc:b0:1b:87:3c:bc:02:
                    2f:b9:69:14:18:9b:fc:88:70:8d:77:26:f9:5d:54:
                    02:5a:cd:1d:fc:1d:63:07:09:e5:3d:0e:d0:c1:bb:
                    eb:02:63:64:fb:cc:a3:f7:a9:b1:44:da:b6:ab:ae:
                    4a:9d:86:66:b6:de:8f:ad:47:70:84:2f:d4:59:e4:
                    6a:e6:a3:3a:25:16:4b:f7:81:89:70:f5:0d:dc:52:
                    e7:b3:39:6b:b6:97:e8:d1:ca:ba:aa:e8:77:c0:13:
                    57:90:f0:b9:0e:18:a3:88:e6:15:3a:5e:7e:27:0d:
                    cd:3d:53:cd:aa:b7:1d:3e:98:ed:3f:65:fd:44:cb:
                    98:c3:b0:d3:34:11:1b:60:b1:47:ff:7f:97:6e:ac:
                    ed:7d:bf:49:e6:b4:63:c1:6b:26:9a:e0:e0:62:6b:
                    f9:c4:15:a4:f2:9c:43:ee:00:73:5b:a7:3d:e8:e8:
                    d7:cc:6d:d5:4c:54:e4:b6:bf:c2:96:a7:7c:24:2d:
                    5c:8c:78:b7:5d:0c:d8:13:0b:94:17:46:44:bb:46:
                    c1:0d:25:a2:0c:a7:e4:8f:dc:34:c4:97:7e:4e:af:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CA:28:74:DD:AF:07:F9:3A:64:5F:2F:00:D0:04:B4:F1:5A:05:CF
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3133312e3130382e3132372e302f32342d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:02:5d:0e:75:8b:dd:48:1b:ba:a5:01:5d:3f:69:f6:25:bc:
         04:4f:00:17:94:66:b3:0b:c9:ff:bd:e0:09:22:59:4e:9f:8a:
         b1:5b:03:d9:49:0b:7e:c1:f6:81:b1:e8:c2:7b:64:08:4e:32:
         99:5c:5b:0f:0a:54:78:59:09:28:76:a0:c4:25:48:36:9c:88:
         a7:e2:3b:c7:1c:50:99:a3:b9:a7:89:0d:d3:f9:da:b8:8a:33:
         42:92:60:9b:83:50:ce:d3:7f:e4:3b:a0:7a:7a:f6:8b:68:1a:
         e4:60:99:01:4b:a2:a1:9b:b9:30:f4:9c:57:5c:24:59:d4:b3:
         ee:22:2c:01:42:40:28:cf:ba:59:95:96:61:f5:01:20:08:bf:
         dd:35:36:c4:4c:b6:6a:59:5e:92:06:76:5e:df:fd:e2:ed:c1:
         cc:f6:9c:c3:37:c0:2a:62:6f:9c:f3:bd:27:af:bb:05:09:77:
         59:01:d9:90:00:ae:a2:41:a3:87:fb:2d:52:9e:1c:24:87:4d:
         df:9a:c7:da:88:eb:ee:98:21:64:35:b3:b6:f8:cb:ae:4d:73:
         5e:43:8e:ca:b8:83:21:9c:1c:e0:b3:8e:53:3a:e3:8d:bf:0e:
         59:d0:b8:4a:a8:2f:2e:01:46:9a:aa:61:b0:fd:ca:be:f8:1b:
         8d:a6:a1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:32 2024 by rpki-client on console-fra.rpki-client.org