Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/3230312e3231362e3132372e302f32342d3332203d3e20323733343538.roa
File:                     3230312e3231362e3132372e302f32342d3332203d3e20323733343538.roa (raw, json)
Hash identifier:          NvND29897lyK4W/soTRJSWeEckZadSh54WRoBaU3+Fg=
Subject key identifier:   2A:7F:49:C1:49:87:9C:69:3F:BA:62:AC:2D:E1:8E:DC:08:28:21:9A
Certificate issuer:       /CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3
Certificate serial:       1606572D73AE9723B467829DE40CD142A64463FD
Authority key identifier: 31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/3230312e3231362e3132372e302f32342d3332203d3e20323733343538.roa
Signing time:             Thu 04 Apr 2024 18:28:36 +0000
ROA not before:           Thu 04 Apr 2024 18:23:36 +0000
ROA not after:            Thu 03 Apr 2025 18:28:36 +0000
asID:                     273458
IP address blocks:        201.216.127.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl
                          rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:06:57:2d:73:ae:97:23:b4:67:82:9d:e4:0c:d1:42:a6:44:63:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31AEEE5273A31C2077C2F957CF5A2C2D240750E3
        Validity
            Not Before: Apr  4 18:23:36 2024 GMT
            Not After : Apr  3 18:28:36 2025 GMT
        Subject: CN=2A7F49C149879C693FBA62AC2DE18EDC0828219A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:16:ca:50:26:5f:4a:4a:7e:05:8b:e2:98:
                    01:8b:57:07:c6:8b:d6:d3:46:16:93:5b:69:9c:f7:
                    c6:f2:d9:4d:49:dd:af:fb:62:a4:d7:fd:7f:3f:bb:
                    9c:48:40:cd:60:92:8f:f3:72:bf:3a:68:f9:59:f6:
                    c6:25:e7:96:b4:e9:2c:75:2a:a2:da:07:91:c2:47:
                    6d:83:f1:69:a9:e6:b0:cd:5d:67:a1:6f:38:9b:c2:
                    b2:74:39:2e:c4:15:61:0b:40:dc:63:79:c0:96:67:
                    cb:fc:30:72:a8:fe:16:8f:da:4b:8b:1c:de:d4:3e:
                    83:0b:e8:fb:08:8e:5b:8e:8b:a5:44:e8:63:4b:70:
                    18:26:b8:33:37:10:5d:74:b3:2c:87:07:ae:7c:db:
                    92:44:21:36:20:8d:25:16:94:63:fe:4b:10:1c:f5:
                    86:ce:bd:b1:31:74:99:4c:83:a8:e8:85:2c:cc:d0:
                    42:f1:74:bd:16:3e:61:6f:1e:a1:e5:ee:17:1c:1d:
                    c3:df:df:5e:2d:4b:25:a7:c8:7e:4b:ee:3c:98:1b:
                    69:d3:5c:07:17:f5:0e:e3:38:ce:55:c1:24:25:4f:
                    2f:77:12:0a:32:30:d6:21:9e:ce:90:9d:79:45:d8:
                    f9:11:91:34:e6:07:57:74:2d:3e:fb:7a:e1:7c:f6:
                    93:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7F:49:C1:49:87:9C:69:3F:BA:62:AC:2D:E1:8E:DC:08:28:21:9A
            X509v3 Authority Key Identifier:
                keyid:31:AE:EE:52:73:A3:1C:20:77:C2:F9:57:CF:5A:2C:2D:24:07:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31AEEE5273A31C2077C2F957CF5A2C2D240750E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7JoJYEQEtW1f5eKjZEZgL19b4gNppw4YrKS9sdx87KL/1/3230312e3231362e3132372e302f32342d3332203d3e20323733343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:0b:e6:b1:6a:0d:ff:40:dc:9e:c0:eb:74:fa:ef:de:7a:52:
         8e:dc:b7:31:9c:a8:41:da:b9:01:ae:39:9f:eb:4c:cb:19:51:
         92:f4:40:56:2d:a7:cb:b6:1a:25:5e:ca:d4:6b:e5:50:56:fc:
         78:27:48:6f:16:b7:24:8c:1d:aa:9d:04:8b:ef:9d:dd:a7:97:
         12:27:d4:29:09:2d:56:6e:7c:06:18:18:5c:c0:a6:aa:f3:7a:
         66:de:48:19:d2:21:91:8e:3b:af:a2:72:95:13:38:2d:e1:af:
         e0:fa:1a:b9:17:f2:a7:ac:08:c0:d0:a9:bd:e1:c2:55:7f:26:
         7d:d0:79:dd:15:74:da:d2:dc:7f:07:4c:ae:f7:b3:03:3e:3b:
         8d:9f:ed:9f:9f:db:a3:2e:34:98:3e:3e:49:5b:86:32:94:2c:
         8c:5a:65:22:9e:2d:56:28:c0:de:83:a3:a0:44:b7:4f:b9:b4:
         1c:fc:2c:eb:a9:3b:50:94:25:e0:dd:66:38:be:f9:a9:58:6a:
         ef:ff:7d:a0:b5:9d:6d:c6:7b:42:ba:5d:ff:52:d5:9d:19:c6:
         ed:7e:55:53:89:57:81:e0:6b:63:b9:42:34:c4:09:e1:56:9d:
         1b:1c:6a:d1:03:74:ae:ea:e0:e6:5c:68:85:dc:a6:61:c3:f3:
         c7:96:2b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:38 2024 by rpki-client on console-fra.rpki-client.org