Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133312e3136312e342e302f32322d3234203d3e203238323031.roa
File:                     3133312e3136312e342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          dsf9ZU2B2I3hSL9nkgH/57yXPTNRL0qgClMytLxdSiQ=
Subject key identifier:   3C:8C:E2:AD:D1:73:30:AB:DA:01:91:C3:D7:51:40:12:F0:3C:6A:4B
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       647112B3DD17B371F47EA05FF48E85D6CB8D38CA
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133312e3136312e342e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:32:48 +0000
ROA not before:           Wed 10 Apr 2024 12:27:48 +0000
ROA not after:            Wed 09 Apr 2025 12:32:48 +0000
asID:                     28201
IP address blocks:        131.161.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:71:12:b3:dd:17:b3:71:f4:7e:a0:5f:f4:8e:85:d6:cb:8d:38:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:27:48 2024 GMT
            Not After : Apr  9 12:32:48 2025 GMT
        Subject: CN=3C8CE2ADD17330ABDA0191C3D7514012F03C6A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:55:bf:13:46:55:2c:46:e2:16:39:7c:8c:98:
                    20:0d:07:7b:bb:24:70:5f:43:ac:27:91:5d:84:38:
                    68:b5:ba:ed:00:88:ad:f8:73:ef:4a:62:fe:1b:a8:
                    87:86:ac:bf:79:77:86:ed:c7:5b:5b:a9:17:9f:d3:
                    1b:b6:28:fa:18:34:f7:ca:ae:24:4d:ab:96:56:f4:
                    64:18:04:85:f7:da:c3:91:85:3f:15:1d:dd:51:b8:
                    03:e5:33:69:59:01:3e:5c:01:7e:6a:4b:a8:6e:bd:
                    c7:fc:59:74:7f:1c:66:37:94:b9:1c:ee:6e:d9:b5:
                    9b:d5:8a:71:c5:b0:49:37:b0:66:24:0f:8e:8a:75:
                    53:29:6c:6a:81:13:26:17:b3:46:d7:48:70:e3:e9:
                    70:3d:61:ef:0b:02:17:a4:8c:67:6e:1d:46:0f:23:
                    30:a2:d4:3c:cc:2d:d6:85:bd:16:29:b0:3e:86:b3:
                    d8:39:0b:98:70:0a:1c:5c:19:a8:3f:57:41:0e:fa:
                    f8:00:dd:98:74:83:e0:86:36:b9:c9:15:60:7b:7d:
                    77:a3:bb:27:d1:97:40:12:70:63:75:03:81:97:3d:
                    ce:2f:82:b7:f2:53:30:0a:d5:1f:1c:24:a0:b7:d9:
                    30:fa:12:11:70:bc:45:bb:6b:36:fb:4e:4f:35:23:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8C:E2:AD:D1:73:30:AB:DA:01:91:C3:D7:51:40:12:F0:3C:6A:4B
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133312e3136312e342e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:90:d0:1d:20:de:41:cb:bc:3b:e3:9c:c4:12:74:e9:e4:
         5d:95:31:81:fc:72:4d:7b:19:60:6b:72:91:69:72:da:3a:85:
         35:6c:69:43:8c:bc:fc:03:f6:77:a5:e8:cc:81:e9:81:c6:3e:
         0e:21:e3:fe:b0:77:98:de:34:8b:fc:6d:2b:ad:f4:21:f4:8b:
         eb:6e:b1:ba:a9:d1:dd:25:d6:51:65:19:7a:58:bd:9f:16:30:
         8b:8d:2e:92:88:07:34:55:4c:cf:84:2d:85:d9:24:5e:64:99:
         e9:9c:23:0c:b8:6b:8b:36:69:45:99:b3:78:90:4e:3b:a5:e7:
         48:69:f9:6b:ce:1d:24:26:5c:4d:aa:a9:f0:da:9a:0c:ac:16:
         40:f8:35:d1:75:df:79:b2:28:30:95:15:76:a3:2e:8a:66:6f:
         5f:61:7d:d3:01:a1:e3:43:e3:dc:14:e4:44:b1:fb:6e:7e:83:
         c0:fd:20:e1:d8:c3:c4:43:0f:1c:76:15:ec:b5:b0:e5:b8:f4:
         da:09:e5:a5:ec:bd:21:c6:d2:2d:ac:1c:9f:5d:7f:df:11:06:
         43:df:d8:92:cb:5e:8d:3d:7d:39:65:4f:5a:4f:18:ec:71:b5:
         99:13:fe:37:d6:ba:b6:6e:54:7e:83:fb:b6:3b:b7:90:67:24:
         e4:52:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:31 2024 by rpki-client on console-fra.rpki-client.org