Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3133312e302e3131362e302f32322d3234203d3e203631383834.roa
File:                     3133312e302e3131362e302f32322d3234203d3e203631383834.roa (raw, json)
Hash identifier:          apsj2fTr4q3NF2/Gt8KYyNDwGeLt3wGwQPiUtAX37W4=
Subject key identifier:   2A:77:19:A2:B0:C4:F2:D2:E3:3F:6E:C8:BD:3E:EE:78:00:92:7F:4C
Certificate issuer:       /CN=65266773FE30988C76975E1CA92521B7BCB5897A
Certificate serial:       49EC15F668562545DA440126A869DC51699FFBC1
Authority key identifier: 65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3133312e302e3131362e302f32322d3234203d3e203631383834.roa
Signing time:             Thu 04 Apr 2024 18:41:44 +0000
ROA not before:           Thu 04 Apr 2024 18:36:44 +0000
ROA not after:            Thu 03 Apr 2025 18:41:44 +0000
asID:                     61884
IP address blocks:        131.0.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl
                          rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ec:15:f6:68:56:25:45:da:44:01:26:a8:69:dc:51:69:9f:fb:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65266773FE30988C76975E1CA92521B7BCB5897A
        Validity
            Not Before: Apr  4 18:36:44 2024 GMT
            Not After : Apr  3 18:41:44 2025 GMT
        Subject: CN=2A7719A2B0C4F2D2E33F6EC8BD3EEE7800927F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:85:d4:52:b5:85:51:6e:f6:f7:fa:cf:53:
                    4f:89:e5:02:e1:31:c1:46:e7:0d:53:48:43:08:6d:
                    aa:dd:45:1b:0c:7e:be:5e:40:00:46:ad:30:4b:5c:
                    66:da:d9:05:48:7e:9a:f2:68:2b:1d:58:e8:81:71:
                    1f:d1:be:1f:fb:34:3d:02:71:6f:dd:75:b2:a1:20:
                    51:a8:18:9a:b9:36:64:93:9b:33:8d:cf:94:b9:af:
                    3f:f0:ab:73:ea:d7:53:40:7f:b6:25:07:9e:83:d6:
                    e3:7f:03:ae:94:6e:3e:59:01:b4:dc:e2:91:6d:62:
                    49:93:3e:ba:f4:60:73:fb:24:df:37:ee:04:b8:32:
                    3c:b8:5c:1e:d6:54:3d:bf:e5:ca:5c:fc:b6:67:d8:
                    bf:0c:56:0d:30:d5:cf:74:d7:f9:0e:8e:af:3d:75:
                    94:40:03:48:19:21:9a:a7:25:e1:54:92:2c:2c:7f:
                    87:c0:08:36:3f:30:b1:00:8e:d3:e7:bc:ff:bd:4d:
                    5c:86:e4:99:81:7a:ee:00:37:ca:4e:58:d5:a8:0d:
                    02:01:db:72:5f:33:b6:ce:64:41:92:e8:1e:f3:46:
                    13:7a:14:81:a4:16:38:b7:5a:87:df:d8:3b:ed:77:
                    d0:24:12:5b:f7:a8:a0:9a:11:ab:b8:fc:b5:a9:19:
                    e7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:77:19:A2:B0:C4:F2:D2:E3:3F:6E:C8:BD:3E:EE:78:00:92:7F:4C
            X509v3 Authority Key Identifier:
                keyid:65:26:67:73:FE:30:98:8C:76:97:5E:1C:A9:25:21:B7:BC:B5:89:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/65266773FE30988C76975E1CA92521B7BCB5897A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65266773FE30988C76975E1CA92521B7BCB5897A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/1/3133312e302e3131362e302f32322d3234203d3e203631383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:59:b9:ef:65:c0:7b:38:e9:35:06:6a:15:56:09:ed:1c:
         03:bb:47:b4:71:8b:c8:c1:0f:06:20:86:f8:8e:23:23:ef:34:
         a7:4d:ae:da:14:12:e2:72:dd:67:73:4a:30:97:35:01:3c:fc:
         e0:12:59:c4:30:86:7b:04:93:37:39:6c:cc:68:45:71:95:0b:
         01:94:0b:e6:8a:15:20:bc:68:89:bf:3a:6c:c0:10:90:37:7a:
         21:c0:4a:ec:ad:8b:a8:7c:fa:75:7e:8e:3e:9f:8a:e5:62:e8:
         dc:a9:ab:86:d4:f5:6b:9f:1b:40:da:23:87:07:9c:82:db:f7:
         33:f4:87:51:d4:c5:03:0a:20:ac:ff:00:31:f2:02:76:74:71:
         0d:e5:fc:de:63:88:b0:7c:2d:03:08:d1:7e:81:ff:46:4e:1d:
         7d:bc:90:d0:a5:1b:e4:4f:38:03:10:d9:b6:04:cb:41:f2:b1:
         72:91:ed:bd:cf:0f:ae:9e:48:ef:1b:d9:35:79:c6:87:2e:23:
         dc:c6:8a:2e:8b:a0:de:ec:68:8f:a4:89:8f:85:54:6a:be:ed:
         bc:bc:53:60:97:5d:4d:9b:a6:df:af:b1:69:bf:57:ac:27:64:
         84:1a:c9:15:8b:c2:a9:37:22:de:80:bf:32:24:dc:f9:e4:93:
         6a:5b:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:33 2024 by rpki-client on console-fra.rpki-client.org