Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa
File:                     3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa (raw, json)
Hash identifier:          utJhMVyt9HMRO+/9b6D8LG7uAaMIQ6+xaT6OZsJWRlM=
Subject key identifier:   10:A4:BC:09:77:37:75:B0:08:0E:BA:89:67:78:2F:7C:19:03:03:6D
Certificate issuer:       /CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3
Certificate serial:       0B1BD16C2AB99F67EB88975E89379917546128C8
Authority key identifier: 31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa
Signing time:             Thu 04 Apr 2024 18:28:35 +0000
ROA not before:           Thu 04 Apr 2024 18:23:35 +0000
ROA not after:            Thu 03 Apr 2025 18:28:35 +0000
asID:                     270304
IP address blocks:        201.216.124.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl
                          rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1b:d1:6c:2a:b9:9f:67:eb:88:97:5e:89:37:99:17:54:61:28:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3
        Validity
            Not Before: Apr  4 18:23:35 2024 GMT
            Not After : Apr  3 18:28:35 2025 GMT
        Subject: CN=10A4BC09773775B0080EBA8967782F7C1903036D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:92:69:b3:49:b5:9a:5c:4d:fa:cc:07:df:59:
                    7f:53:6a:6a:2b:a2:aa:5e:82:9c:68:de:cc:c1:f4:
                    51:c8:d8:21:ff:25:7d:f0:be:33:d8:81:b2:b0:e6:
                    0f:2a:f3:89:c5:ab:59:24:6c:12:58:14:1e:a3:40:
                    ec:d1:ad:38:80:52:3f:e8:28:58:a2:71:aa:da:0e:
                    91:67:4d:67:ca:ff:2a:71:c7:38:03:05:ab:d4:d4:
                    50:31:ce:67:57:76:d9:e5:ae:ac:6e:f0:9b:82:88:
                    31:31:c0:47:94:a2:2d:fc:14:2b:e7:7e:87:3d:52:
                    d3:c1:ff:b6:1f:93:fb:a5:c5:c8:14:5c:c2:4a:29:
                    5b:47:08:ab:4e:29:ea:ce:cc:3d:76:46:cc:ef:1d:
                    8d:96:d1:2f:4e:e2:3b:52:58:83:05:38:c9:9c:a7:
                    51:53:69:20:93:1e:ec:a5:26:bd:fe:a8:12:ec:90:
                    57:5f:b8:f5:a5:b3:10:ae:8c:07:b3:af:cf:e3:5c:
                    1d:09:ea:35:06:ca:9f:06:f0:7c:a7:b0:4a:91:09:
                    98:9b:66:9c:6f:cf:ef:27:65:a8:d2:d9:21:aa:3d:
                    7a:3f:35:04:64:0c:11:95:46:70:4f:a6:30:23:98:
                    a9:02:26:33:06:e0:71:d8:35:58:ce:64:df:17:6c:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A4:BC:09:77:37:75:B0:08:0E:BA:89:67:78:2F:7C:19:03:03:6D
            X509v3 Authority Key Identifier:
                keyid:31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/3230312e3231362e3132342e302f32322d3332203d3e20323730333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:e3:01:0c:39:62:15:af:e0:17:3a:20:2a:6c:46:64:22:32:
         ab:1c:b8:d4:88:9f:18:51:5f:e1:7c:1d:69:63:0b:09:8f:97:
         27:f6:75:6f:0b:a4:21:a8:50:75:67:35:27:c8:e7:2f:1a:d9:
         af:51:f1:67:10:95:e2:a4:46:0c:cc:92:2d:84:1f:fd:2a:11:
         50:18:c7:d0:2e:a5:32:4e:72:b8:ca:1f:87:0a:37:d1:d7:00:
         81:b6:25:3d:71:c5:c0:22:5f:d0:17:09:de:c1:39:f8:f9:37:
         89:0a:2c:e9:66:3f:58:1c:13:c2:0a:b3:71:07:85:56:91:e1:
         82:db:82:8a:49:cc:d7:b1:d2:3e:f8:d8:cb:4a:f1:3e:2d:ce:
         4b:e2:d4:db:ca:de:71:45:00:88:cd:e6:48:5c:2e:69:9b:8d:
         eb:dd:df:ef:90:d8:08:31:5a:4b:3a:33:1d:bd:10:8a:61:7d:
         7b:fb:af:5f:a7:16:36:1f:44:73:8f:ca:72:c4:4a:1b:30:2a:
         90:92:ac:d4:db:a4:6c:62:11:7f:5a:d7:c0:29:5a:51:2a:ab:
         2f:b5:c6:db:83:ed:33:bf:b7:15:f9:3b:d0:90:11:fe:14:09:
         83:51:a9:b1:51:16:10:c5:3a:8a:64:d2:62:61:36:f9:f2:46:
         2d:43:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:01 2024 by rpki-client on console-ams.rpki-client.org