Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa
File:                     3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          l41JbHgp/LkPX8JXGBrVbFG4tnhQ/Azl6Eppli7cRwg=
Subject key identifier:   61:49:19:82:28:8D:E7:01:5B:F3:2C:63:2C:7F:EF:42:EA:49:46:D2
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       4D352218A695F5CF06CCF982DBA6591740B59D99
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa
Signing time:             Thu 07 Nov 2024 20:54:50 +0000
ROA not before:           Thu 07 Nov 2024 20:49:50 +0000
ROA not after:            Thu 06 Nov 2025 20:54:50 +0000
asID:                     263665
IP address blocks:        131.161.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:35:22:18:a6:95:f5:cf:06:cc:f9:82:db:a6:59:17:40:b5:9d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: Nov  7 20:49:50 2024 GMT
            Not After : Nov  6 20:54:50 2025 GMT
        Subject: CN=61491982288DE7015BF32C632C7FEF42EA4946D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:fb:13:a4:c0:b3:89:51:25:b2:05:72:33:
                    34:c0:bd:d4:0e:9b:46:44:15:fa:fe:06:be:a5:ef:
                    31:9c:0a:72:29:d2:cc:8d:d5:b6:58:5a:97:32:47:
                    a1:de:49:e1:09:53:e5:64:60:c8:61:b5:92:bd:c5:
                    be:b0:94:f4:19:42:e7:86:9d:88:52:db:c9:30:94:
                    f0:e2:8e:0e:f4:0d:ee:cd:6a:7d:9c:97:e9:94:bc:
                    c8:4b:61:a0:81:5c:bc:dc:6e:9a:08:12:7f:87:a2:
                    f9:26:6d:b0:8a:4b:f4:26:71:9b:47:ad:4e:f1:25:
                    fd:14:5e:44:2e:be:9b:df:8e:cc:fe:29:d7:80:9a:
                    b6:b6:89:e6:5d:88:13:f7:d8:eb:0c:04:ca:83:51:
                    c6:c9:85:0a:a5:10:35:50:e5:e1:80:52:aa:7d:6a:
                    71:21:d2:fe:54:59:d3:a0:81:c8:b0:ad:fd:d6:6c:
                    84:5d:27:4f:cb:2f:3d:c2:8b:0e:56:74:98:cb:3f:
                    8f:51:ed:57:9b:b0:e8:d3:cb:7a:f3:ba:76:d5:b2:
                    99:9f:4b:32:81:f3:c5:b3:bd:c8:b9:e6:98:11:15:
                    cb:66:d8:07:f5:cc:ba:7e:0f:f1:cd:3b:97:24:fd:
                    7a:a4:ac:51:84:10:27:ef:7f:fd:84:0f:ab:79:4b:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:49:19:82:28:8D:E7:01:5B:F3:2C:63:2C:7F:EF:42:EA:49:46:D2
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:ab:ae:9c:a9:e2:91:36:a9:39:41:38:d0:ce:b5:7c:3a:55:
         ac:f7:9c:33:6f:bc:1a:f7:70:79:1c:a0:62:ed:cd:ce:9d:34:
         9e:80:74:da:1f:54:fa:f6:2d:92:a0:79:30:e4:4b:85:0d:ad:
         7b:ad:60:5e:d9:fd:91:62:1c:54:50:fd:dc:4e:02:fd:94:bb:
         53:7f:c3:ac:a5:94:d4:6b:46:0a:83:b1:e2:19:f7:fd:78:ac:
         28:5b:61:f4:42:be:02:2e:89:5a:91:7d:d8:2d:ad:b3:58:ce:
         dd:f3:74:b6:60:d4:a7:73:b8:d0:0b:ed:c7:79:e3:75:2d:0b:
         ca:a8:11:32:c9:fc:13:07:e2:38:41:a8:68:90:82:61:2b:6a:
         87:8a:85:b8:9f:89:6f:13:6c:d7:9a:9f:02:c0:d4:d5:4b:f8:
         d1:9a:0b:72:0c:9e:59:c2:b7:b9:ef:e9:46:77:f4:76:b8:76:
         54:41:29:77:ff:0e:cb:fa:25:4d:49:a5:18:34:c9:4b:20:0c:
         25:30:fb:3a:5b:fc:04:b1:f7:28:36:e6:f8:4e:bf:74:94:fb:
         40:41:7e:13:1b:18:0c:e7:8c:77:65:c3:27:29:41:62:53:c3:
         7c:7e:70:76:9d:d8:17:2b:e0:90:9b:d3:02:be:84:75:ef:e9:
         57:b4:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org