Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa
File:                     3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa (raw, json)
Hash identifier:          l0YfA8W4HJzDeblNvcYfJxi2qQ3myY9q9a7WKtIUKSI=
Subject key identifier:   B9:84:24:65:99:25:BB:EC:37:B1:5C:75:8D:B9:22:CB:9C:0C:35:CC
Certificate issuer:       /CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
Certificate serial:       344BB93C9FAE25B246071C38B1C4F7BEF9291325
Authority key identifier: 08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa
Signing time:             Wed 14 Aug 2024 14:51:51 +0000
ROA not before:           Wed 14 Aug 2024 14:46:51 +0000
ROA not after:            Wed 13 Aug 2025 14:51:51 +0000
asID:                     264404
IP address blocks:        131.161.228.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl
                          rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4b:b9:3c:9f:ae:25:b2:46:07:1c:38:b1:c4:f7:be:f9:29:13:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08B392C8173BC063ACE9F4F42C85E8F3BC297FA4
        Validity
            Not Before: Aug 14 14:46:51 2024 GMT
            Not After : Aug 13 14:51:51 2025 GMT
        Subject: CN=B98424659925BBEC37B15C758DB922CB9C0C35CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:ab:2e:e1:8b:ff:63:04:d5:0f:bb:f5:b5:
                    3b:dd:9c:16:c8:e3:68:27:9b:84:f0:75:5b:32:c0:
                    fa:97:5b:71:ef:ef:2f:6d:d3:f5:67:62:9e:4d:15:
                    3f:f7:76:6a:42:ea:3b:56:7a:46:c5:b5:b4:29:8c:
                    0f:50:9d:40:14:f0:13:2f:ab:44:be:6b:cc:aa:b5:
                    a3:4f:c7:c7:cf:99:e5:bc:16:0e:89:e6:f1:89:4a:
                    b8:c3:ee:78:26:f5:be:20:5e:03:12:70:4e:69:91:
                    cc:d9:5e:06:4a:53:6d:ff:b8:a3:36:be:58:bd:d1:
                    af:08:21:1f:6f:fb:87:4a:d0:05:14:16:2f:9f:50:
                    8c:84:1e:88:c4:93:b5:bc:0c:1d:46:46:2b:17:b3:
                    84:cf:9b:44:ef:06:30:f5:42:ce:d5:15:bc:af:7c:
                    11:ef:e4:0c:d5:d1:9d:77:b6:91:3d:7d:ef:aa:fc:
                    66:a6:3c:e1:d8:f4:2a:77:88:1b:8b:18:ba:6a:c7:
                    23:24:79:c9:33:74:86:e1:f7:9e:10:27:de:61:32:
                    d2:65:85:42:29:67:13:3f:65:64:b3:41:cd:ec:6a:
                    73:31:b5:92:2a:2f:39:1a:40:d0:e3:d5:9d:e2:c1:
                    98:d5:2f:92:d7:63:81:d7:f0:0b:0d:8f:77:5d:eb:
                    9d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:84:24:65:99:25:BB:EC:37:B1:5C:75:8D:B9:22:CB:9C:0C:35:CC
            X509v3 Authority Key Identifier:
                keyid:08:B3:92:C8:17:3B:C0:63:AC:E9:F4:F4:2C:85:E8:F3:BC:29:7F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08B392C8173BC063ACE9F4F42C85E8F3BC297FA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:2f:1e:60:98:6b:94:ae:a0:f1:71:09:b0:24:67:8d:cc:5a:
         b8:3e:8a:29:81:16:60:f5:19:56:0f:01:69:9c:c8:f2:aa:0d:
         b4:32:af:4f:06:fb:54:27:91:b9:d8:74:19:b3:81:2c:a2:97:
         95:65:bc:b1:83:51:03:70:12:25:2f:ab:aa:6c:f8:95:a7:f6:
         09:44:a4:9a:80:81:2f:14:67:05:31:29:a2:42:2d:c5:5a:a1:
         3c:f0:1e:92:e7:fd:cf:c0:e8:57:3d:51:64:7c:16:01:54:c7:
         d0:9a:2f:3d:8a:c5:6d:50:57:7e:b7:4c:99:19:27:25:21:42:
         78:ab:38:d3:78:81:62:07:49:c8:e4:b9:64:8c:e6:87:46:36:
         b7:4e:74:5e:75:2c:55:4f:01:e1:30:da:94:81:4e:4a:a6:9e:
         81:be:53:7b:56:2b:23:92:bc:71:3e:5e:0e:cd:27:5c:10:85:
         4b:76:69:71:11:8b:38:ad:e2:e8:0f:f2:80:11:be:6c:d6:73:
         82:42:74:b8:fe:1b:80:4d:f1:6d:49:7b:a4:cb:60:a5:a6:06:
         07:38:bd:31:4f:ae:65:5e:3a:35:66:62:df:4c:79:2e:f8:98:
         5e:c5:e7:93:18:9d:04:c9:92:27:28:37:1b:86:73:fd:75:9c:
         4c:e4:c7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:48 2024 by rpki-client on console-fra.rpki-client.org