Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa
File:                     3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa (raw, json)
Hash identifier:          0XjKrxOKkYmS1FdPhPC1n2keDHCvPZQDuEogT+g5GRQ=
Subject key identifier:   E3:1A:8E:5D:CE:F5:D8:DB:2B:FF:41:54:BE:72:26:ED:86:32:E2:DE
Certificate issuer:       /CN=CF357620357B25129A68E7D55D716CED7E4E1516
Certificate serial:       2A6C51762335D1E95F5301C1341DE963A12BA279
Authority key identifier: CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa
Signing time:             Wed 30 Oct 2024 17:04:06 +0000
ROA not before:           Wed 30 Oct 2024 16:59:06 +0000
ROA not after:            Wed 29 Oct 2025 17:04:06 +0000
asID:                     270956
IP address blocks:        131.221.76.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl
                          rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6c:51:76:23:35:d1:e9:5f:53:01:c1:34:1d:e9:63:a1:2b:a2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF357620357B25129A68E7D55D716CED7E4E1516
        Validity
            Not Before: Oct 30 16:59:06 2024 GMT
            Not After : Oct 29 17:04:06 2025 GMT
        Subject: CN=E31A8E5DCEF5D8DB2BFF4154BE7226ED8632E2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:7d:de:16:f9:db:92:ad:21:07:01:96:b5:
                    b4:59:d4:de:73:2d:cd:a6:a4:d0:3b:9f:08:5c:54:
                    06:22:ec:b6:49:18:d8:11:ca:bf:34:e4:53:77:37:
                    95:89:e7:cd:09:8c:a5:04:57:cd:6e:e5:82:ed:b0:
                    5d:36:f5:ff:6c:40:e7:63:db:32:ac:43:b4:71:c4:
                    72:0a:34:ae:d3:48:f1:8e:45:55:08:09:e0:df:09:
                    f4:ed:32:a7:d6:2b:9a:5a:57:d6:4b:f4:30:9c:1d:
                    69:42:a3:d9:e8:5c:98:de:e2:8b:b5:26:ca:d9:82:
                    f1:37:9c:bd:70:cd:38:e3:bb:ac:71:26:ee:68:73:
                    14:13:fd:69:d9:9c:51:f7:17:66:25:25:c8:27:40:
                    a2:9b:80:37:10:c9:ae:50:72:25:b1:78:8f:7b:0a:
                    ad:2b:bd:5e:6e:ff:cb:99:51:7b:f4:87:99:8d:77:
                    0e:e5:08:97:0d:cd:1b:de:35:d3:4d:d3:34:b7:5c:
                    62:d8:f0:47:06:63:6d:21:1d:46:3a:41:75:01:ea:
                    db:3a:eb:8b:86:76:9f:b8:74:c2:65:e8:d0:a3:3b:
                    46:f4:8d:8d:4c:41:3e:5f:a2:a5:08:18:00:3d:ff:
                    6c:c7:a3:b0:1e:c0:d3:59:5d:47:d1:c1:b1:31:18:
                    c6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1A:8E:5D:CE:F5:D8:DB:2B:FF:41:54:BE:72:26:ED:86:32:E2:DE
            X509v3 Authority Key Identifier:
                keyid:CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/3133312e3232312e37362e302f32322d3332203d3e20323730393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:eb:14:ae:cd:38:ca:7f:fb:bf:50:e1:86:30:cf:e6:60:57:
         ff:7a:b1:b5:e0:99:64:d8:33:30:cb:94:1a:8b:dd:12:99:79:
         b5:94:6c:7a:35:81:99:dd:9f:df:56:65:6b:2a:d4:f8:31:6b:
         c4:50:49:cd:11:d2:65:e4:d5:19:1d:ad:9c:30:4c:92:6b:65:
         d3:61:6f:41:1d:cc:e3:a0:f9:67:11:df:12:19:22:43:11:c9:
         45:09:fe:8b:04:36:3f:f0:f2:e9:ab:7f:ed:5f:7e:ea:b8:6d:
         4e:29:ad:49:f7:15:c7:ba:e3:1f:b1:d3:15:64:ad:8a:9d:f6:
         d7:d3:d5:d7:9b:00:c0:df:86:a8:be:b8:0d:04:fd:82:6f:dd:
         35:0f:85:de:26:5f:c8:ec:d6:a5:7a:5f:39:00:71:7c:28:c9:
         59:a4:c5:1b:33:a3:c9:1a:cb:ae:a9:80:4b:f9:85:dc:7a:4c:
         d0:e6:82:d3:06:1f:39:15:cd:c0:fc:1c:b0:20:3f:2d:78:1f:
         c6:e1:88:a7:bb:1b:00:21:27:34:8a:ba:65:38:22:28:b0:ac:
         a0:eb:45:67:75:2f:0f:ca:0b:e8:3f:a6:07:ee:b3:eb:15:32:
         26:49:a4:fc:d9:81:a7:a7:ba:a6:47:ee:11:0f:db:16:0c:42:
         b2:82:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org