Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa
File:                     3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa (raw, json)
Hash identifier:          Vdn/45wBlNpOAf03zGwW/3zwxbVPDinQi4Q1QTc+GY0=
Subject key identifier:   DE:EF:3D:80:22:53:D7:4E:82:30:6D:A2:82:71:8C:B7:1C:5D:86:EC
Certificate issuer:       /CN=6D04B94711843374D5B7AF8D2AC7E27FF40C6792
Certificate serial:       05A3F8C11891F55FDE38B8276D46CD518ECDBB40
Authority key identifier: 6D:04:B9:47:11:84:33:74:D5:B7:AF:8D:2A:C7:E2:7F:F4:0C:67:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa
Signing time:             Mon 08 Apr 2024 20:11:29 +0000
ROA not before:           Mon 08 Apr 2024 20:06:29 +0000
ROA not after:            Mon 07 Apr 2025 20:11:29 +0000
asID:                     264493
IP address blocks:        131.255.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a3:f8:c1:18:91:f5:5f:de:38:b8:27:6d:46:cd:51:8e:cd:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D04B94711843374D5B7AF8D2AC7E27FF40C6792
        Validity
            Not Before: Apr  8 20:06:29 2024 GMT
            Not After : Apr  7 20:11:29 2025 GMT
        Subject: CN=DEEF3D802253D74E82306DA282718CB71C5D86EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:23:39:1a:66:3d:15:bf:c3:3b:2f:42:b0:
                    96:d0:db:54:a5:01:c2:f0:74:b9:c5:df:33:c0:02:
                    4f:94:53:61:43:94:aa:6a:4a:3e:31:da:ba:c1:de:
                    58:5f:58:d7:0b:c7:70:73:c5:6a:1c:d5:6c:a5:c5:
                    ca:69:27:1d:4a:17:bd:ea:0d:61:fa:4a:8f:96:1d:
                    14:c0:09:88:a8:a1:ab:86:9d:72:cb:ec:28:9a:20:
                    d6:6a:85:e7:cc:12:f4:27:9d:ea:7b:35:f5:d2:69:
                    c8:45:63:b3:eb:8f:47:ba:ee:c1:a9:c2:f5:02:5a:
                    43:fd:6d:7f:0c:23:fd:3e:19:34:0d:72:37:87:9c:
                    c0:25:01:9e:9d:55:31:ba:28:75:e7:a6:44:f4:db:
                    91:4e:3c:d8:7b:b2:a7:dc:76:ea:74:fc:97:65:ed:
                    47:4e:14:1a:3e:75:73:cd:0d:00:94:7b:84:89:09:
                    b7:45:0f:9d:96:9e:bb:24:8d:f9:f3:1d:a1:f7:ba:
                    b1:bf:36:5b:b3:8c:03:7c:ca:2d:01:1e:b7:61:97:
                    95:2b:9e:63:a0:d3:b3:fc:93:ed:a0:ee:bb:89:1d:
                    6f:47:b6:b1:5a:62:5f:55:2c:96:55:4d:8e:2f:87:
                    7c:0b:aa:55:a7:39:5e:ef:31:38:d2:dc:42:a3:dd:
                    f7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EF:3D:80:22:53:D7:4E:82:30:6D:A2:82:71:8C:B7:1C:5D:86:EC
            X509v3 Authority Key Identifier:
                keyid:6D:04:B9:47:11:84:33:74:D5:B7:AF:8D:2A:C7:E2:7F:F4:0C:67:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D04B94711843374D5B7AF8D2AC7E27FF40C6792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3235352e3135362e302f32322d3232203d3e20323634343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:ad:f3:70:59:53:49:c8:47:ce:27:b2:63:47:ab:36:a9:bd:
         d0:90:7c:6b:35:3c:18:3b:ad:eb:07:15:eb:e7:44:61:5c:44:
         6e:76:19:01:d3:c1:76:f8:32:c9:bd:ba:47:6d:7f:fa:75:2f:
         64:b6:c9:22:cf:5e:d8:b8:42:9c:57:5f:9f:af:64:11:e5:28:
         24:04:66:83:78:b7:ab:be:f6:1c:f8:e1:eb:65:2c:94:07:c1:
         6c:a3:29:f5:2b:96:1f:e3:b1:17:4d:0d:f3:00:7c:87:15:4b:
         1b:8e:0b:ff:33:7a:1b:f4:40:c4:67:e0:b3:7f:09:06:41:19:
         64:15:1a:83:26:27:c8:11:a1:25:a2:00:1a:50:9f:00:84:2c:
         be:ba:41:43:8b:bb:c3:99:5f:c1:c4:2d:d0:ef:1b:b8:81:6e:
         95:62:1f:70:c3:a3:37:9e:20:c2:d5:0d:13:ac:49:b6:7a:a7:
         40:db:91:06:29:e3:b3:6f:67:a2:0b:30:22:73:39:11:9b:ff:
         79:71:f8:82:72:55:03:e0:69:92:df:26:3d:cc:ba:bd:c8:d0:
         f2:e6:a5:f8:a9:9b:a1:fc:e5:e2:26:2e:60:3c:bd:46:ed:73:
         47:33:7a:96:c2:66:d1:e4:84:37:7b:cc:7d:c7:e7:a9:a8:90:
         bd:78:26:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:40:40 2024 by rpki-client on console-ams.rpki-client.org