Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/3133312e3139362e3132342e302f32322d3234203d3e20323731333134.roa
File:                     3133312e3139362e3132342e302f32322d3234203d3e20323731333134.roa (raw, json)
Hash identifier:          9YFaPcpdIUQVsA9ah49uYlEKTzVcrEcOP8U/30oPcwQ=
Subject key identifier:   E7:E2:25:8A:1D:91:EC:53:2A:EE:05:1D:7E:13:36:95:64:94:DC:B5
Certificate issuer:       /CN=88BA7580557AA3113C46B2EE567F5D1F9F9C8197
Certificate serial:       54679C834507401970FE014953343B169DCB6E0D
Authority key identifier: 88:BA:75:80:55:7A:A3:11:3C:46:B2:EE:56:7F:5D:1F:9F:9C:81:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/3133312e3139362e3132342e302f32322d3234203d3e20323731333134.roa
Signing time:             Wed 03 Apr 2024 18:59:06 +0000
ROA not before:           Wed 03 Apr 2024 18:54:06 +0000
ROA not after:            Wed 02 Apr 2025 18:59:06 +0000
asID:                     271314
IP address blocks:        131.196.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.crl
                          rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:67:9c:83:45:07:40:19:70:fe:01:49:53:34:3b:16:9d:cb:6e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88BA7580557AA3113C46B2EE567F5D1F9F9C8197
        Validity
            Not Before: Apr  3 18:54:06 2024 GMT
            Not After : Apr  2 18:59:06 2025 GMT
        Subject: CN=E7E2258A1D91EC532AEE051D7E1336956494DCB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:84:c7:9d:d6:0a:c1:b2:24:fa:9e:55:0f:
                    ca:08:55:ad:e1:c2:cf:92:a9:ab:de:b8:cb:09:1f:
                    5b:ec:44:a5:96:c0:95:15:65:bd:bc:0d:d2:04:49:
                    c7:7c:ec:3b:42:34:0a:7a:8e:9e:fa:ea:aa:4f:dc:
                    20:4e:03:80:fd:34:e2:74:00:4f:bb:4d:22:e5:04:
                    ff:10:ba:ca:c9:ff:f7:95:2c:1d:05:87:f5:e8:21:
                    f8:49:62:1b:9a:30:dc:5d:22:c8:14:d4:b4:6c:7d:
                    ff:84:98:97:9e:43:a1:d5:75:64:2e:0a:ed:5b:a7:
                    bf:8a:a1:fe:c1:ec:e2:01:b4:91:fb:e7:fb:c4:06:
                    a5:bb:af:c2:d5:2f:03:3a:21:ab:5d:65:d8:6b:3f:
                    82:df:ba:f6:a6:de:92:15:57:4b:5a:22:c2:a8:39:
                    1e:c4:cf:16:2a:b8:bf:e8:9d:f9:39:68:2c:46:ad:
                    5a:42:35:1a:2d:30:7b:a5:32:11:1b:5e:2e:fd:7b:
                    92:60:7c:7a:22:7d:0a:e8:10:7b:76:3c:6a:3d:1e:
                    95:c0:d3:70:31:80:59:d1:a7:a0:72:c4:7b:1a:3e:
                    51:7a:45:51:a5:3e:ae:29:ce:0e:c2:49:db:fa:f5:
                    23:99:c8:81:48:38:12:71:f7:13:87:68:3d:aa:2e:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E2:25:8A:1D:91:EC:53:2A:EE:05:1D:7E:13:36:95:64:94:DC:B5
            X509v3 Authority Key Identifier:
                keyid:88:BA:75:80:55:7A:A3:11:3C:46:B2:EE:56:7F:5D:1F:9F:9C:81:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/3133312e3139362e3132342e302f32322d3234203d3e20323731333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:ff:a0:2c:52:17:02:7e:7d:60:96:12:2c:08:b5:fa:00:43:
         d4:b5:77:0a:df:06:37:c5:84:55:56:19:45:51:88:27:af:ad:
         3a:9c:c9:c7:08:87:01:27:8b:6e:f2:e3:52:e3:88:40:d9:03:
         db:16:d7:d0:f5:c9:27:2d:be:3d:69:c0:a8:ec:12:5c:75:af:
         0b:6a:62:da:50:58:ce:48:2c:f6:3e:fb:08:aa:0c:9b:5f:79:
         48:1e:c1:09:1e:69:28:e8:ed:a1:7e:ab:f6:51:cc:1a:44:3e:
         7d:51:6f:48:ca:8d:19:cd:03:cc:3c:83:bd:0b:cc:90:98:5a:
         63:ec:3d:3d:0d:cc:50:3f:68:63:25:43:0a:92:57:7c:ac:ab:
         59:cc:d7:5b:9c:b9:d7:fd:8e:df:6c:8a:dd:e4:fd:d3:16:8d:
         c5:fa:fd:2f:29:d5:a5:10:cd:7f:7c:e4:91:6c:54:68:ae:54:
         53:43:7c:d5:69:8f:73:0e:64:63:7b:d8:7b:b5:63:3a:c6:5c:
         16:7b:8c:e8:23:b6:5f:60:22:6d:d8:cf:68:61:80:03:99:70:
         42:3c:96:8a:2b:30:ff:f4:2f:43:56:89:5b:f4:52:ca:66:fa:
         0f:41:e8:eb:7f:77:46:88:3d:bd:ab:e5:ac:d9:ee:c6:64:78:
         2e:15:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:09:21 2024 by rpki-client on console-ams.rpki-client.org