Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e34392e302f32342d3234203d3e20323634333638.roa
File:                     3133312e3136312e34392e302f32342d3234203d3e20323634333638.roa (raw, json)
Hash identifier:          osb1R1GiaUewMU6iI6daXHKnFg3/DK/JZa1o2znxaqM=
Subject key identifier:   AA:2C:AC:92:C8:3B:5F:01:F5:2D:72:39:39:2C:ED:51:2E:01:75:A3
Certificate issuer:       /CN=00099678E157EF4EBF18B52B07C133567D365A04
Certificate serial:       0C82FD4E57D5911F0D28F5345D85AFA0579E6517
Authority key identifier: 00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e34392e302f32342d3234203d3e20323634333638.roa
Signing time:             Wed 03 Apr 2024 20:48:41 +0000
ROA not before:           Wed 03 Apr 2024 20:43:41 +0000
ROA not after:            Wed 02 Apr 2025 20:48:41 +0000
asID:                     264368
IP address blocks:        131.161.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.crl
                          rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:82:fd:4e:57:d5:91:1f:0d:28:f5:34:5d:85:af:a0:57:9e:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00099678E157EF4EBF18B52B07C133567D365A04
        Validity
            Not Before: Apr  3 20:43:41 2024 GMT
            Not After : Apr  2 20:48:41 2025 GMT
        Subject: CN=AA2CAC92C83B5F01F52D7239392CED512E0175A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:32:5a:71:91:ad:8e:b0:e9:7d:4b:b8:5c:
                    40:6f:97:0f:e5:4a:e2:e2:02:3f:0b:d4:1b:e1:bc:
                    fd:65:f4:97:d9:4e:97:b9:c4:4e:f5:96:bc:a7:e1:
                    b3:f5:54:bd:a2:eb:33:14:cb:88:00:42:76:8f:2c:
                    2a:f3:45:09:bb:e8:b9:b2:19:66:53:a4:9e:ec:62:
                    c0:cf:9b:13:ee:c2:12:cc:d1:6e:0a:5f:25:d1:24:
                    b7:a4:26:43:85:62:db:a7:b0:d8:3b:56:4c:aa:0d:
                    7f:72:3c:65:0c:78:13:56:f4:2f:da:32:f0:e9:e9:
                    d8:d3:aa:62:08:0d:5a:97:c9:7f:c2:07:54:a5:7d:
                    be:46:ae:1c:44:4f:9a:4f:93:ed:13:f9:9f:9f:61:
                    3b:f3:b4:5e:1f:18:aa:6b:e7:de:90:97:5d:10:1b:
                    6b:78:2b:15:02:5a:aa:41:d0:57:93:94:65:e7:5a:
                    fc:74:07:0f:16:ef:24:87:5d:0d:79:12:0e:d5:b9:
                    54:52:4d:5c:ea:83:8b:36:23:6e:a7:a5:3f:d6:71:
                    3e:48:99:73:c4:a4:00:eb:ac:eb:b2:5d:47:99:b3:
                    37:9b:4a:51:16:cc:31:0c:39:c7:b8:40:6e:d5:a7:
                    02:63:91:1d:20:b3:ed:2b:4f:0e:50:07:3b:54:45:
                    4a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2C:AC:92:C8:3B:5F:01:F5:2D:72:39:39:2C:ED:51:2E:01:75:A3
            X509v3 Authority Key Identifier:
                keyid:00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/3133312e3136312e34392e302f32342d3234203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:18:2f:44:7b:70:27:18:d7:a2:3d:b1:3e:32:c8:05:9c:e7:
         25:8b:f8:d5:92:20:0b:01:92:99:7b:6f:e2:5f:41:dd:20:fb:
         12:7e:25:82:d0:a5:4f:c2:6d:69:04:4d:9a:58:dc:b2:19:79:
         1a:51:9a:d8:4e:c4:e2:6e:d1:9a:96:33:6c:87:31:5e:fd:60:
         51:50:fc:f1:b4:07:02:2d:c2:92:46:a1:33:9e:21:e3:a9:16:
         46:9d:73:25:fe:b3:dd:21:dc:b1:58:7f:d0:65:01:35:f5:19:
         8a:ef:0c:9b:90:ca:73:43:cd:bc:4a:a7:ce:c4:98:7d:4e:9d:
         dd:f4:7d:d8:d4:a4:61:86:94:5e:c7:05:04:53:2b:6c:07:b5:
         af:39:2e:64:52:82:a3:58:4e:c7:38:15:29:06:76:e5:cd:11:
         ed:20:ac:58:da:47:dd:9e:b9:42:bb:0c:98:80:a9:c5:1b:95:
         7d:59:aa:22:cf:fc:95:9a:d0:9f:d0:41:a4:e8:45:88:bf:68:
         87:99:c9:be:ed:49:8c:58:39:48:83:bb:3b:0b:cf:f0:86:8d:
         72:0d:15:02:0a:9c:62:19:f9:e1:d9:45:bf:54:b4:15:26:88:
         e6:82:5d:49:ad:40:a1:c1:00:4d:21:74:cf:d5:22:00:61:46:
         7f:26:ed:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:55 2024 by rpki-client on console-fra.rpki-client.org