Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137332e302f32342d3234203d3e203232313737.roa
File:                     3133312e3130302e3137332e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          mMSqZYVlCp/rvgPtSI0V3KVHPr15XT0DrticSKgLR9k=
Subject key identifier:   6F:96:12:FF:86:9F:C3:C7:B1:5B:64:D4:87:6B:96:BA:4D:59:F0:5D
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       43807427E545792E12679C947D1100DAEA21F373
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137332e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:21 +0000
ROA not before:           Thu 04 Apr 2024 03:25:21 +0000
ROA not after:            Thu 03 Apr 2025 03:30:21 +0000
asID:                     22177
IP address blocks:        131.100.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:80:74:27:e5:45:79:2e:12:67:9c:94:7d:11:00:da:ea:21:f3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:21 2024 GMT
            Not After : Apr  3 03:30:21 2025 GMT
        Subject: CN=6F9612FF869FC3C7B15B64D4876B96BA4D59F05D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:43:48:fc:e0:74:f3:e2:47:d1:81:8f:17:
                    a7:8b:b4:bd:dc:db:e4:81:af:be:6a:b9:07:ef:ea:
                    6b:96:04:04:7b:cb:bf:52:a4:bd:cc:9c:82:27:56:
                    73:15:56:97:c1:5e:51:3b:2f:c1:cb:6c:88:39:f6:
                    86:24:10:5a:09:66:77:68:03:4e:b1:f0:72:85:91:
                    61:e9:d5:0a:06:a7:05:90:17:d7:6e:15:8c:ee:0b:
                    b0:85:74:2c:e1:78:f8:ce:6c:8a:3d:cd:79:1b:8b:
                    68:d8:6e:48:76:c2:5f:1a:b1:1d:bf:71:f1:d1:f5:
                    23:ec:44:22:1e:88:0a:ed:67:27:a3:e2:5d:47:c4:
                    32:36:94:37:a2:a0:0d:b7:5a:c3:b9:a2:75:47:5c:
                    85:c3:1b:1b:0d:34:60:19:bd:63:4b:96:b2:b1:3e:
                    6d:e2:70:59:03:84:7c:f4:a0:2e:79:5f:d8:35:f0:
                    20:9a:f7:cf:b9:e5:b2:8d:ba:e5:24:65:72:75:9f:
                    ed:51:69:3e:fd:9f:e2:9b:7d:d7:70:93:70:0b:bd:
                    6a:9f:3c:75:7c:c4:28:51:1f:b2:04:5d:a6:26:58:
                    8d:75:c7:6f:5d:3a:47:4d:19:c9:f3:12:c1:0d:a3:
                    6d:d6:23:8b:58:7c:f3:ed:fd:ce:f9:32:c5:67:26:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:96:12:FF:86:9F:C3:C7:B1:5B:64:D4:87:6B:96:BA:4D:59:F0:5D
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137332e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:e3:12:7b:f5:88:29:74:f4:b2:bd:d1:67:b7:5f:ac:ef:
         47:81:78:d4:16:cd:6a:cd:0b:3f:b0:3c:5c:62:77:4a:e0:6d:
         ac:5b:20:4d:2d:e9:71:57:9d:4d:5f:2f:4e:86:e1:ae:e7:27:
         a7:9d:c6:0f:57:07:35:b6:02:c6:96:6f:5e:45:28:8c:84:af:
         f7:b2:a2:48:f6:73:0e:70:36:3d:f3:1b:61:e7:7f:62:01:17:
         34:86:41:21:04:7e:35:3e:73:04:14:5e:86:e2:26:28:e3:f2:
         2c:0d:59:b0:ad:40:a2:50:1b:f5:9d:f1:68:51:cd:2a:57:df:
         84:d1:ed:0e:2d:df:33:9f:5c:32:43:95:1e:47:60:0e:58:bb:
         e8:e9:ca:dc:82:9c:63:da:26:63:d9:08:45:8c:2c:77:75:98:
         48:d0:a9:57:b4:57:ba:e8:74:31:b1:00:c8:a3:eb:53:37:d6:
         95:ea:49:0b:be:17:92:5d:0c:d5:4e:44:38:96:d5:ca:eb:a4:
         53:61:30:72:d5:71:52:ed:d7:72:6f:c4:9c:1d:5f:02:83:d4:
         f5:e1:38:55:e3:cb:67:96:4a:6c:0c:e0:40:ba:84:04:9d:0e:
         5e:d3:4c:e2:a3:d8:8b:54:44:e5:fd:ae:ca:96:1b:4b:1b:52:
         85:99:2d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org