Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3133312e302e38342e302f32322d3234203d3e20323632343230.roa
File:                     3133312e302e38342e302f32322d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          r/LN3emg57CxSTY6a7Pu7jLQDYCy7kpxFUgCNo+plio=
Subject key identifier:   16:3D:E9:B5:18:D8:B3:B6:30:AF:0A:4A:02:C4:4E:D5:8F:76:7E:02
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       1009FC4C2A0761EF8FCD1FAB1FF06AB2CABB284B
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3133312e302e38342e302f32322d3234203d3e20323632343230.roa
Signing time:             Mon 08 Jul 2024 19:43:08 +0000
ROA not before:           Mon 08 Jul 2024 19:38:08 +0000
ROA not after:            Mon 07 Jul 2025 19:43:08 +0000
asID:                     262420
IP address blocks:        131.0.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:09:fc:4c:2a:07:61:ef:8f:cd:1f:ab:1f:f0:6a:b2:ca:bb:28:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:08 2024 GMT
            Not After : Jul  7 19:43:08 2025 GMT
        Subject: CN=163DE9B518D8B3B630AF0A4A02C44ED58F767E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:93:83:1f:54:2d:d3:fd:ef:44:6a:7b:a0:78:
                    ae:f6:40:e1:50:5b:1e:c5:aa:a4:41:ad:e4:e7:6b:
                    ca:3d:2d:6a:49:4f:71:b7:78:48:a1:48:78:8c:62:
                    c1:6d:39:fc:fb:39:30:84:9f:1d:7c:f3:6e:fe:58:
                    5a:d7:54:58:dc:7b:cf:b9:77:63:bd:29:50:20:c1:
                    68:d0:50:e6:8e:d9:a7:ef:7f:f5:8a:15:f6:44:c4:
                    e3:c4:fc:3f:30:f6:26:52:33:71:1b:70:bb:82:de:
                    2e:4d:1f:fe:52:66:aa:06:1c:9c:e8:9b:47:3a:a3:
                    67:70:67:09:a3:7e:4a:6b:02:8c:88:03:e1:d1:11:
                    af:39:0f:e7:4d:7c:27:b5:7e:fc:61:19:ed:b8:90:
                    75:04:4b:a9:81:00:ea:0e:05:14:52:6d:02:c7:f7:
                    63:9e:4c:99:f8:f0:c4:19:f9:ed:a3:aa:4b:c4:5c:
                    89:41:2f:f4:c7:0d:71:ae:04:a5:46:8a:e2:28:26:
                    f1:5d:54:7f:77:d4:a7:54:68:30:4e:4d:11:62:cc:
                    92:8d:04:57:7c:c7:25:92:98:6e:a3:a4:37:54:8e:
                    50:18:ea:f7:5e:08:28:01:24:9e:d2:7d:e5:55:75:
                    00:eb:b5:d2:b4:2b:4b:00:6e:65:de:c0:18:96:67:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3D:E9:B5:18:D8:B3:B6:30:AF:0A:4A:02:C4:4E:D5:8F:76:7E:02
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3133312e302e38342e302f32322d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:7a:2e:3e:c9:67:3c:e7:35:db:6d:22:99:c9:ea:75:33:53:
         aa:dd:67:0e:8c:74:b5:37:f1:c1:59:00:0e:b8:6a:85:f3:b0:
         a3:78:6e:69:7d:f3:c3:39:e6:c3:4c:3d:7b:c9:7f:a9:6c:bd:
         97:39:c8:d1:85:73:bb:75:0f:0b:4b:9b:51:41:c9:4d:10:c5:
         85:d5:74:98:ce:fb:7a:c9:07:84:6c:0f:03:e2:be:b6:dc:ac:
         75:a1:70:75:5e:da:76:e5:17:0b:94:c8:21:bf:2b:cb:48:e7:
         ff:4e:b1:8c:82:93:09:74:b3:1d:80:8c:e8:23:83:8c:0e:96:
         66:41:37:d8:f5:27:61:4f:13:a1:8d:91:e6:95:6b:6e:cb:0e:
         4b:88:d9:80:14:64:37:9d:7f:ab:6c:e5:e7:06:33:f9:f2:db:
         7f:a2:7e:1f:b6:fe:07:ea:f7:69:fd:7c:3e:d5:ed:e5:cd:a9:
         96:ab:cb:b0:75:09:02:a0:3d:3f:20:0b:c0:c0:4d:42:8d:af:
         ec:4e:e4:a1:1c:72:83:a8:11:f0:14:99:24:b9:4a:c6:9d:96:
         a8:9f:42:0a:25:ff:d2:3b:00:e5:84:dc:1b:4e:39:2b:51:9f:
         fb:e1:f4:19:0c:01:9a:02:72:ca:36:04:75:29:df:67:44:8e:
         55:97:88:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 02:55:58 2024 by rpki-client on console-ams.rpki-client.org