Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137352e302f32342d3234203d3e203232313737.roa
File:                     3133312e3130302e3137352e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          TM0q/rWcUtM9E3iypKU0G0+LvNpBPABMz9bFviHXTgE=
Subject key identifier:   9D:7A:53:A0:DD:43:CD:46:20:09:02:32:A4:E1:63:D5:84:65:FB:BF
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       221C80CF634B7F5A75A729EEC3B9BD0DA068AE88
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137352e302f32342d3234203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:22 +0000
ROA not before:           Thu 04 Apr 2024 03:25:22 +0000
ROA not after:            Thu 03 Apr 2025 03:30:22 +0000
asID:                     22177
IP address blocks:        131.100.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1c:80:cf:63:4b:7f:5a:75:a7:29:ee:c3:b9:bd:0d:a0:68:ae:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:22 2024 GMT
            Not After : Apr  3 03:30:22 2025 GMT
        Subject: CN=9D7A53A0DD43CD4620090232A4E163D58465FBBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:70:05:dc:37:66:a3:2f:cf:cb:c8:ff:48:
                    7b:87:55:a8:f0:64:3e:97:bf:86:1a:df:e5:d9:55:
                    c6:f6:c2:f2:c1:2a:2d:c6:7c:08:c5:a1:4f:49:66:
                    d1:04:99:ad:e8:ce:f3:45:af:60:6a:9f:3b:a7:9f:
                    84:16:58:f4:2f:04:83:77:f9:bf:84:19:49:2e:88:
                    66:15:d8:47:88:e6:41:ec:0a:c9:39:f3:d3:f3:c7:
                    f9:58:36:6a:3b:24:48:d5:5c:b9:42:d7:c7:97:ff:
                    01:b6:5d:2a:c7:dd:2f:a7:f1:86:17:89:03:0e:5f:
                    db:e6:1d:ba:32:0e:5d:59:84:8e:8a:ba:f1:a3:4c:
                    a6:10:ef:a4:d1:cd:fd:01:d5:95:ad:e9:bb:2a:c2:
                    a3:e2:e9:a8:85:b5:c4:10:83:37:62:7e:08:74:43:
                    9c:6c:51:97:b6:c2:2c:0d:fb:3d:c7:1c:57:81:ce:
                    49:42:f2:7c:f8:50:52:f8:cb:98:58:f6:26:5f:7a:
                    63:de:7e:4c:1a:4b:ef:89:fb:bf:70:65:06:da:c5:
                    3d:02:e1:2d:43:dc:10:5c:45:ff:e6:4d:73:2e:2f:
                    b7:03:4d:f9:ec:dd:9f:cb:3b:a6:9f:da:91:f5:5c:
                    75:d9:e4:cf:2d:50:86:6c:50:00:03:f5:7f:dc:8b:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7A:53:A0:DD:43:CD:46:20:09:02:32:A4:E1:63:D5:84:65:FB:BF
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137352e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:8c:56:19:f0:d3:ec:96:28:73:04:6c:04:fa:88:a4:6c:cd:
         17:80:c4:6f:13:cd:a5:7c:40:f9:2b:d1:a4:9c:fb:a1:bb:fe:
         26:37:63:45:38:f5:87:19:d6:54:db:ee:76:e7:f3:3e:ca:a6:
         ce:dc:eb:7a:d4:ca:d0:2f:bd:26:87:15:d4:be:1d:50:04:85:
         32:1e:37:bc:ef:95:9f:9a:27:41:94:55:0d:36:e3:0f:e8:66:
         90:e2:ae:97:a6:a4:97:53:72:9a:63:b5:ef:90:65:2b:cc:01:
         e6:21:12:a1:0d:01:57:46:93:7d:8b:6c:ce:60:78:22:05:a6:
         8f:2a:70:ca:b7:a8:ab:35:21:44:01:71:58:7b:2d:41:65:48:
         08:fe:4c:da:06:5a:41:10:3b:75:6f:80:96:42:f0:1c:69:d9:
         83:1d:d7:8b:0f:2f:16:f7:cb:84:ea:79:1f:1c:9d:f6:cd:7b:
         6d:46:3f:ad:73:5c:ac:e7:81:2a:18:21:71:9a:c1:f2:ae:0a:
         00:73:10:62:4e:64:c0:37:d1:af:8d:9d:57:21:d6:6e:91:20:
         ae:fe:06:5e:cb:54:55:02:41:f9:b0:fb:3b:31:75:14:a8:d8:
         68:1a:71:4a:03:36:c5:bb:e1:2d:ce:dc:52:65:41:56:a7:97:
         a4:06:e2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:41 2024 by rpki-client on console-fra.rpki-client.org