Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa
File:                     3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          7paOLLCXTS/6J0SVjmbHabnegWo4UQbhdmaeVAST0g4=
Subject key identifier:   E8:DC:81:9D:FE:E7:20:50:F9:8B:92:16:3A:86:33:9E:A2:B1:CC:20
Certificate issuer:       /CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
Certificate serial:       29619195C1A1E794E70DD29F6A14F5CAD8485BE4
Authority key identifier: 21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa
Signing time:             Wed 06 Nov 2024 20:47:15 +0000
ROA not before:           Wed 06 Nov 2024 20:42:15 +0000
ROA not after:            Wed 05 Nov 2025 20:47:15 +0000
asID:                     262316
IP address blocks:        131.221.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 22:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:61:91:95:c1:a1:e7:94:e7:0d:d2:9f:6a:14:f5:ca:d8:48:5b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CCB924D97FD1E969080933C375EF56E7FBA4FC
        Validity
            Not Before: Nov  6 20:42:15 2024 GMT
            Not After : Nov  5 20:47:15 2025 GMT
        Subject: CN=E8DC819DFEE72050F98B92163A86339EA2B1CC20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:cf:6b:e1:83:e2:6e:07:8a:ec:f6:94:01:
                    fa:6e:9e:79:45:18:f3:19:60:48:c4:99:63:b0:b7:
                    94:28:09:cb:97:08:ef:12:a6:6c:50:ca:db:75:c6:
                    1f:fe:81:93:7c:32:09:e7:30:e1:b4:9a:a8:2d:13:
                    33:18:1c:d6:26:53:65:7d:3a:f4:0c:de:12:e7:63:
                    59:95:7d:37:fd:08:39:7f:58:df:17:e1:24:da:4a:
                    e6:3b:14:6d:8f:21:0c:30:40:42:c1:2d:6a:33:9f:
                    74:bf:a1:36:26:8c:63:26:2d:54:a7:0b:60:db:7b:
                    f8:cc:f2:e0:cc:85:f4:c3:67:9d:20:c4:1b:b2:82:
                    0b:a9:cd:e7:fd:06:6c:c8:01:32:13:08:97:43:fe:
                    40:d6:ec:71:7f:ad:02:ae:9b:a0:aa:3c:c4:20:81:
                    9e:32:68:66:c0:b7:d8:89:07:d4:37:47:38:14:34:
                    f2:31:d8:97:10:28:36:75:2e:4c:4a:6a:2f:a9:32:
                    21:6d:6c:d5:3c:32:1e:23:1c:30:87:a5:35:69:8b:
                    68:c7:48:ec:c8:96:e8:14:67:d6:6c:f2:b5:f1:1f:
                    a4:18:b3:11:92:d1:7e:35:c9:17:c5:74:e1:32:6a:
                    8b:db:7b:b4:77:f5:d7:1f:ee:13:eb:da:0c:5f:ba:
                    a5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DC:81:9D:FE:E7:20:50:F9:8B:92:16:3A:86:33:9E:A2:B1:CC:20
            X509v3 Authority Key Identifier:
                keyid:21:CC:B9:24:D9:7F:D1:E9:69:08:09:33:C3:75:EF:56:E7:FB:A4:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/21CCB924D97FD1E969080933C375EF56E7FBA4FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21CCB924D97FD1E969080933C375EF56E7FBA4FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133312e3232312e3230302e302f32322d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:db:91:4f:e9:25:ea:f4:c6:da:0d:fb:5a:cd:41:28:a0:71:
         14:f7:7f:33:ec:9a:ef:bf:2e:19:88:fb:69:9d:d4:15:5f:c8:
         a7:3f:48:af:99:1a:65:7b:80:c4:9f:9d:e6:f2:14:b1:8f:e7:
         69:c5:c2:07:a5:51:87:09:3a:ff:ec:f1:62:16:dc:f7:76:56:
         2f:c2:58:26:5f:52:54:eb:e9:7e:62:aa:95:b7:86:a3:49:f1:
         71:a1:a5:e4:12:bb:50:af:16:1b:bc:b0:ff:41:04:c6:6c:b4:
         4b:32:94:81:c1:fc:47:ea:42:54:b2:84:8a:93:39:43:0a:3b:
         c8:0f:08:ea:29:bf:ab:de:8e:09:c1:3e:40:7f:09:ca:4e:f8:
         52:91:13:50:95:48:cc:18:2d:1c:2c:4f:dc:06:77:4c:33:e8:
         b7:48:51:0b:96:9b:2e:8d:2e:8f:31:3a:97:a6:0e:84:2f:67:
         16:f5:bb:ab:17:c5:f2:33:8c:eb:22:1e:f9:4d:b5:1c:e9:63:
         f3:4b:fd:45:e5:54:99:4a:e9:e6:8e:7c:ca:03:53:7a:48:d3:
         da:58:94:21:d8:4b:f4:69:48:33:8a:a3:5c:f3:f8:36:41:58:
         69:7f:b9:b3:19:3d:ef:91:6f:17:f5:7c:a2:d2:e3:bd:3b:53:
         85:c9:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:05:37 2025 by rpki-client