Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/3133312e3130382e3232382e302f32322d3232203d3e20323634333532.roa
File:                     3133312e3130382e3232382e302f32322d3232203d3e20323634333532.roa (raw, json)
Hash identifier:          DaO/BE87qRSGrXFxxJQrTaBUdqJu8xGXk4osmOkmAh8=
Subject key identifier:   A9:62:53:0E:75:51:83:0D:1A:E1:92:AC:04:54:8B:2D:DA:1A:D9:D1
Certificate issuer:       /CN=A2E8A6A1F57710B70C2515F21595655DAFC4BCE0
Certificate serial:       2B4CD20A584D5754AFB269119B75D2F16D76E9EE
Authority key identifier: A2:E8:A6:A1:F5:77:10:B7:0C:25:15:F2:15:95:65:5D:AF:C4:BC:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/3133312e3130382e3232382e302f32322d3232203d3e20323634333532.roa
Signing time:             Mon 08 Apr 2024 20:14:34 +0000
ROA not before:           Mon 08 Apr 2024 20:09:34 +0000
ROA not after:            Mon 07 Apr 2025 20:14:34 +0000
asID:                     264352
IP address blocks:        131.108.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.crl
                          rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:4c:d2:0a:58:4d:57:54:af:b2:69:11:9b:75:d2:f1:6d:76:e9:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E8A6A1F57710B70C2515F21595655DAFC4BCE0
        Validity
            Not Before: Apr  8 20:09:34 2024 GMT
            Not After : Apr  7 20:14:34 2025 GMT
        Subject: CN=A962530E7551830D1AE192AC04548B2DDA1AD9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:d8:52:79:43:31:b6:16:e9:91:34:ec:5d:
                    7f:60:c1:7f:44:ff:e3:9d:87:62:bf:16:96:81:24:
                    44:ec:24:70:75:da:18:28:87:53:e2:1f:5b:73:58:
                    b8:b3:b2:b6:90:a3:fb:ef:c1:74:86:06:74:1c:c7:
                    37:58:41:8d:00:bf:bc:c0:e5:92:a1:db:6a:10:18:
                    f2:ff:64:76:d1:23:7d:e4:2d:70:e1:c9:d9:7d:d9:
                    2f:e0:b0:8b:f3:f6:dd:f9:f6:cf:ae:2b:99:5b:73:
                    39:3e:6f:e9:51:53:47:50:09:99:54:44:5e:48:95:
                    d9:fe:dd:fc:32:ce:43:c1:5b:34:95:57:6c:a5:66:
                    9f:a4:de:cc:c4:be:77:73:2a:ca:32:3c:12:7e:54:
                    ee:4b:92:2c:26:2e:06:4a:be:02:66:3a:ee:7a:76:
                    f6:49:24:48:80:56:37:31:b0:76:d9:fc:4e:4e:a9:
                    80:c0:1d:42:74:1e:8e:31:eb:f0:75:ba:bc:ec:5f:
                    cc:0e:14:6e:1e:bf:7d:9a:01:f8:58:e1:18:d4:da:
                    07:69:8f:76:7e:74:e0:fc:b4:d3:b3:26:6f:4e:cb:
                    88:b5:d3:45:dc:a2:bd:4c:15:a9:38:a2:1b:f7:b5:
                    55:c3:3f:16:1c:6c:44:6a:2d:2b:5c:9e:f1:64:06:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:62:53:0E:75:51:83:0D:1A:E1:92:AC:04:54:8B:2D:DA:1A:D9:D1
            X509v3 Authority Key Identifier:
                keyid:A2:E8:A6:A1:F5:77:10:B7:0C:25:15:F2:15:95:65:5D:AF:C4:BC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2E8A6A1F57710B70C2515F21595655DAFC4BCE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MNWxR8S1nqT9dkxj17T4S1Dgj1FJ3z324Wnf7PhRzWd/0/3133312e3130382e3232382e302f32322d3232203d3e20323634333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:76:10:97:c6:4a:8c:e6:be:05:ca:03:23:83:87:e3:10:3b:
         ca:08:21:12:7b:d2:55:26:31:99:73:3c:2b:fc:b8:30:aa:d7:
         45:fb:f8:3f:77:40:62:22:1e:82:c2:13:b0:a0:02:31:e3:b8:
         48:61:c6:dc:2c:0a:ce:ab:f5:0f:25:a9:4e:2d:4e:8d:8c:9d:
         35:18:34:12:9c:e4:c7:60:f3:f5:2c:f1:0a:41:a3:ce:73:fc:
         68:e2:03:09:63:81:5f:70:51:82:8f:eb:58:6d:d4:fc:26:c7:
         1c:a0:b8:d5:79:ba:03:ea:7e:6b:cc:d6:7d:b4:2f:cd:81:f1:
         c2:9f:dd:6c:c1:15:d3:5e:b4:eb:3c:39:51:24:14:96:88:6d:
         8e:58:0c:e4:35:d3:e1:04:d4:d5:8b:62:34:40:72:f9:b6:60:
         14:ee:07:aa:f6:8a:7e:c9:36:d7:fc:a5:cc:70:81:ae:c9:98:
         db:09:65:90:06:46:92:16:34:a6:08:72:96:6a:17:ab:66:3b:
         ee:87:f0:49:81:8d:d2:6f:38:90:89:db:18:f6:d6:e5:d3:7b:
         c0:72:ee:69:c2:6d:7d:2e:de:6b:4a:3d:8f:4a:0e:3b:69:10:
         8b:de:29:5d:20:1f:39:d5:2d:1a:cf:ad:d5:3c:6c:92:cc:1b:
         08:37:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:58 2024 by rpki-client on console-fra.rpki-client.org