Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa
File:                     3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa (raw, json)
Hash identifier:          SVG9cltBbo+/ewNWykzhwQ4nnJx5mu67nXLFGxC+cRI=
Subject key identifier:   F6:FF:EB:03:83:1A:2E:A2:7D:6E:46:4E:53:09:C7:89:C3:87:CC:7A
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       2DE07C56233DA615A19EC508519741BFA65985A6
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa
Signing time:             Thu 04 Apr 2024 22:41:16 +0000
ROA not before:           Thu 04 Apr 2024 22:36:16 +0000
ROA not after:            Thu 03 Apr 2025 22:41:16 +0000
asID:                     52783
IP address blocks:        131.255.116.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e0:7c:56:23:3d:a6:15:a1:9e:c5:08:51:97:41:bf:a6:59:85:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Apr  4 22:36:16 2024 GMT
            Not After : Apr  3 22:41:16 2025 GMT
        Subject: CN=F6FFEB03831A2EA27D6E464E5309C789C387CC7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:41:75:43:f4:f7:d9:dd:dd:d3:0a:94:28:
                    6e:11:8f:79:96:8f:b7:9d:51:9c:97:10:26:90:4e:
                    d0:89:e7:f1:00:74:91:3c:bb:34:b5:6b:74:5e:4b:
                    57:9d:3c:d4:d2:c8:48:ac:b4:c7:d8:99:07:f7:1e:
                    1a:f8:a1:83:1c:26:47:28:e7:ac:9d:c7:c8:33:fc:
                    40:08:f7:be:bf:13:2e:6d:c2:2e:8a:4d:20:26:f8:
                    31:15:1b:31:7d:f3:7e:47:ba:cb:3a:9c:e2:ef:1b:
                    ac:b7:7a:f6:d3:80:30:35:46:79:71:28:f6:76:65:
                    21:2c:de:9a:e9:ed:ae:6a:54:c8:66:08:5c:1d:d1:
                    a8:98:32:06:85:a1:7e:85:87:90:bf:69:70:34:1e:
                    ef:63:08:ed:e8:96:6c:d1:b8:3f:c8:56:d1:9e:c5:
                    73:7a:b3:17:26:17:ba:3d:46:ce:56:cd:96:ba:69:
                    06:88:e8:0b:68:10:5f:c6:b6:0f:29:af:1b:0e:1f:
                    9c:04:af:a4:a0:32:14:0b:bd:b4:c7:c6:d2:c4:a7:
                    8a:2f:2e:40:ac:03:74:b2:ce:2c:99:fc:00:c5:cb:
                    ab:f2:66:e6:68:b3:49:05:f2:f2:64:c9:1a:45:40:
                    68:df:66:13:50:03:a8:22:b5:e5:14:72:14:1b:4b:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FF:EB:03:83:1A:2E:A2:7D:6E:46:4E:53:09:C7:89:C3:87:CC:7A
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3133312e3235352e3131362e302f32322d3332203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:ed:5b:76:d4:bc:5d:c7:93:7a:e7:32:bd:3f:8a:6b:49:fe:
         36:a9:bb:9a:39:0b:fd:5b:e7:5f:12:f8:90:3d:65:14:a9:29:
         30:5c:ce:13:b0:3c:66:39:f4:84:31:bc:a7:41:8f:da:e9:cd:
         46:16:e9:c2:44:43:5e:bd:6c:8c:fd:88:37:fe:2e:61:18:47:
         3f:e3:47:66:82:41:26:fb:03:aa:ae:01:28:5f:6f:f1:9a:e9:
         6b:af:99:ac:e6:6a:83:03:13:21:dd:e6:22:d4:db:41:72:17:
         6e:09:aa:ff:0b:06:62:80:6b:b8:81:28:27:d7:ee:45:5b:d0:
         ad:a1:ed:e7:aa:9b:ae:07:d9:80:f0:5c:a9:72:9b:2c:fd:ac:
         33:c4:87:0d:b3:a1:5c:47:01:57:fa:a2:b7:f4:5f:5a:da:e9:
         93:27:4e:5d:52:8a:4e:b1:0d:44:f8:cb:20:24:31:92:33:72:
         95:d3:0c:d3:0e:5e:cc:30:5b:03:9a:3b:41:a3:33:b0:65:06:
         4b:91:d2:1e:b9:cb:23:e6:c0:ff:cc:ff:8d:a2:f9:19:d8:8d:
         e2:62:76:a7:ea:d7:51:06:56:45:5d:ba:27:4b:a4:f8:36:04:
         c2:fe:61:2c:5a:8b:1c:93:94:8e:c8:97:19:04:3d:73:e0:94:
         d3:bf:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org