Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e34382e302f32322d3234203d3e20323634333638.roa
File:                     3133312e3136312e34382e302f32322d3234203d3e20323634333638.roa (raw, json)
Hash identifier:          5RNVsEvmjSz0HySl5yKMpf1X+MLX7xMMxQxvmNOd/5c=
Subject key identifier:   03:20:C1:33:54:30:03:69:7A:08:06:72:CA:E6:51:D7:AB:F6:D7:84
Certificate issuer:       /CN=00099678E157EF4EBF18B52B07C133567D365A04
Certificate serial:       488259BC1173C9B95967A9AF49657ADBBB2830E4
Authority key identifier: 00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e34382e302f32322d3234203d3e20323634333638.roa
Signing time:             Wed 03 Apr 2024 20:48:42 +0000
ROA not before:           Wed 03 Apr 2024 20:43:42 +0000
ROA not after:            Wed 02 Apr 2025 20:48:42 +0000
asID:                     264368
IP address blocks:        131.161.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.crl
                          rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 20:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:82:59:bc:11:73:c9:b9:59:67:a9:af:49:65:7a:db:bb:28:30:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00099678E157EF4EBF18B52B07C133567D365A04
        Validity
            Not Before: Apr  3 20:43:42 2024 GMT
            Not After : Apr  2 20:48:42 2025 GMT
        Subject: CN=0320C133543003697A080672CAE651D7ABF6D784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:c7:e2:4f:bd:10:5d:10:fc:7c:9d:4f:8e:
                    06:d4:49:b8:c5:32:5b:92:e8:78:b4:32:7e:cc:e8:
                    fc:ed:8d:4d:80:64:ea:0a:98:1a:2a:89:5f:fc:1e:
                    cc:96:3f:f1:93:2e:b1:42:ec:00:fd:26:de:8a:b6:
                    99:8b:b5:a5:1d:63:bf:6a:bc:0f:bb:f0:5b:da:6a:
                    76:02:63:02:e4:e0:c4:fb:8f:71:28:b2:8f:ed:64:
                    69:35:28:b3:35:4f:52:c4:92:c6:05:44:4d:69:34:
                    89:6f:04:e5:81:f6:25:04:08:f9:6c:c4:8d:a6:4d:
                    c4:e2:4f:3c:60:da:4a:27:32:90:7a:8b:47:5d:54:
                    51:89:b9:16:26:09:62:a2:7e:25:ca:8b:44:52:79:
                    2f:d0:c4:00:f8:98:cd:c4:5f:1e:b4:72:4b:5e:46:
                    ba:7f:8e:81:c5:90:f6:b1:4a:22:ff:fb:a6:85:46:
                    16:05:39:9b:22:ab:e0:56:f7:67:39:63:a3:85:55:
                    db:2a:ec:27:5d:4b:d0:4f:7a:63:2d:f7:8d:52:ac:
                    22:89:49:33:91:10:7f:21:dc:f4:70:fd:66:7c:d8:
                    7f:9c:98:34:f5:0c:55:0e:86:57:74:40:59:c1:2e:
                    0a:3a:3a:20:4d:64:d2:85:2c:25:f2:aa:bf:3f:21:
                    94:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:20:C1:33:54:30:03:69:7A:08:06:72:CA:E6:51:D7:AB:F6:D7:84
            X509v3 Authority Key Identifier:
                keyid:00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e34382e302f32322d3234203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:d0:c2:b6:a7:d9:82:86:81:bb:d2:73:0f:7c:11:38:8c:3e:
         2c:ab:85:37:a2:c8:44:98:4a:8b:f7:47:21:c1:9c:65:1f:dc:
         49:8d:a5:0d:a6:b6:c5:14:15:d3:16:28:5f:9b:1e:a2:f1:03:
         59:86:3c:74:a4:ac:27:42:f8:3b:5d:ad:71:84:41:bf:28:00:
         b8:b0:45:86:97:5e:56:82:a6:5b:a0:51:e7:c2:18:27:6d:b6:
         76:35:4f:d1:44:b6:46:a3:74:d4:d7:74:17:fb:d9:7c:e8:f2:
         2b:1e:ac:28:65:3b:2b:bb:9e:7a:b3:ec:a9:6a:ca:61:b8:6f:
         a5:5f:49:f6:70:2f:99:8c:ea:07:37:24:5c:60:11:6b:aa:a0:
         d6:53:8c:8b:c5:56:1d:cd:6c:88:39:68:b6:45:c1:19:71:16:
         dc:4e:fc:ef:66:c4:14:10:25:96:45:fe:31:83:f1:96:d6:d3:
         cc:ab:3b:e8:df:ef:25:6d:8f:0d:91:95:99:3b:af:82:8a:e0:
         4b:a4:ab:a4:1e:86:a0:d6:d2:ec:fa:d8:05:6f:82:99:be:4d:
         77:72:3e:80:61:47:e2:6a:a0:c6:03:9f:2d:b5:bf:c2:ce:98:
         ea:1b:f1:dc:a9:91:38:f8:6b:31:e5:2e:bb:be:f9:9a:b6:13:
         7a:22:0a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:44 2024 by rpki-client on console-ams.rpki-client.org