Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3136392e302f32342d3234203d3e20323635393135.roa
File:                     3133312e3139362e3136392e302f32342d3234203d3e20323635393135.roa (raw, json)
Hash identifier:          aWNBySseQUf/Mkyz+YSLn0fpwQBe8Hvcrh/lYzbCjbs=
Subject key identifier:   48:13:87:96:BC:3A:6A:CA:23:7E:83:B2:77:CA:17:38:F4:17:DD:07
Certificate issuer:       /CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
Certificate serial:       2328E3DEC093DA0A7996D56575504E610514EE9F
Authority key identifier: 3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3136392e302f32342d3234203d3e20323635393135.roa
Signing time:             Thu 18 Jul 2024 21:22:39 +0000
ROA not before:           Thu 18 Jul 2024 21:17:39 +0000
ROA not after:            Thu 17 Jul 2025 21:22:39 +0000
asID:                     265915
IP address blocks:        131.196.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl
                          rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:28:e3:de:c0:93:da:0a:79:96:d5:65:75:50:4e:61:05:14:ee:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
        Validity
            Not Before: Jul 18 21:17:39 2024 GMT
            Not After : Jul 17 21:22:39 2025 GMT
        Subject: CN=48138796BC3A6ACA237E83B277CA1738F417DD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:d9:cf:77:96:b9:a8:cb:bf:b5:bc:8b:b4:
                    be:48:ab:59:69:7f:35:6e:ed:d4:57:82:39:97:7c:
                    85:ce:79:e9:dd:7f:c4:99:37:8a:55:36:09:11:7e:
                    ef:6d:40:8a:b4:af:ed:6b:ff:db:3c:25:e2:6e:a3:
                    90:fd:ec:a1:0c:64:8c:1a:4c:56:e6:f4:c6:84:3f:
                    ec:50:ba:fc:b4:7e:14:58:56:00:80:fa:60:7d:b5:
                    ff:96:b8:14:2e:3e:30:58:9e:f7:b9:3f:00:05:d9:
                    b8:cb:ec:f4:2a:33:47:32:d6:b9:76:d2:27:d8:1f:
                    81:59:b4:20:80:c1:9c:be:f6:df:a5:af:ad:ed:7c:
                    3b:0e:5d:6b:58:d5:ac:e0:02:cf:97:d2:49:1e:b3:
                    47:65:b2:20:4e:97:83:4e:9a:9f:c9:18:8a:21:02:
                    5b:20:d4:76:34:61:e6:20:8c:6a:88:3b:15:b1:9e:
                    92:27:fa:f0:e3:e1:bc:c7:0f:37:50:84:f6:7e:3e:
                    5e:db:d6:2e:e5:b6:19:31:8f:85:c5:c1:32:bc:61:
                    7e:d2:33:5d:c0:1f:5f:29:1b:1d:1a:cd:da:c0:a7:
                    d2:05:54:7d:0f:e1:b2:95:8c:a2:1f:95:7d:24:ca:
                    3d:47:fe:a8:c4:1f:f9:4f:fc:86:68:f0:22:ba:1c:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:13:87:96:BC:3A:6A:CA:23:7E:83:B2:77:CA:17:38:F4:17:DD:07
            X509v3 Authority Key Identifier:
                keyid:3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3133312e3139362e3136392e302f32342d3234203d3e20323635393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c3:1d:35:18:db:ae:57:cb:e8:b4:31:d9:4a:f8:bb:ea:a2:
         b8:9f:c0:dd:67:21:5c:af:e3:a7:ce:ef:9d:d9:9b:df:7f:f3:
         71:b9:07:8b:63:1e:e7:fa:f4:82:fb:25:47:df:43:05:c8:59:
         36:52:2a:bc:e9:9c:0d:4b:33:9d:7a:80:b0:bd:8e:48:51:a3:
         8d:89:39:ee:26:bb:79:1b:5b:b1:71:78:c4:cb:b1:aa:4a:f4:
         e6:25:a3:6d:fe:d3:da:d6:b5:4b:ac:f7:4f:e6:42:e3:e8:4a:
         92:14:22:d5:43:2d:82:3b:8e:50:a6:f0:75:57:2c:4e:cb:96:
         45:2f:79:42:6f:ff:38:2c:9f:41:f9:fb:e8:7e:de:76:94:31:
         13:de:59:02:de:96:23:6b:94:61:48:51:3c:a8:0c:d7:8a:87:
         93:eb:0c:c1:ed:1d:45:d9:8a:8c:2f:3c:66:48:24:32:ab:a5:
         63:2e:d3:2b:bc:2c:c2:ad:63:62:29:15:44:38:dc:c8:c1:04:
         c1:6e:6c:7b:18:21:de:15:35:83:17:d8:ff:7a:28:a9:1e:0a:
         20:26:0e:94:c9:f0:73:06:19:5d:03:d2:15:d9:ff:77:ad:1b:
         36:40:b9:46:55:a0:ed:83:31:df:1f:09:44:8c:aa:dc:e9:45:
         c1:f3:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:33 2024 by rpki-client on console-ams.rpki-client.org