Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/3133312e302e3232382e302f32322d3234203d3e203631373039.roa
File:                     3133312e302e3232382e302f32322d3234203d3e203631373039.roa (raw, json)
Hash identifier:          MhWqKeK6HmtjF/YA9047Sk6UzJXNNPd1o058H8iC9Rs=
Subject key identifier:   D9:7D:EF:9D:11:CC:A6:80:47:5A:79:55:2A:C9:F0:DF:C3:EE:9F:A6
Certificate issuer:       /CN=EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34
Certificate serial:       06879559C9771294ECFBF78994D0B0C9A13B1BD8
Authority key identifier: EA:07:CB:42:A7:DC:EB:70:8A:94:E2:A1:5A:A0:C4:6F:A5:27:1E:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/3133312e302e3232382e302f32322d3234203d3e203631373039.roa
Signing time:             Thu 04 Apr 2024 02:22:26 +0000
ROA not before:           Thu 04 Apr 2024 02:17:26 +0000
ROA not after:            Thu 03 Apr 2025 02:22:26 +0000
asID:                     61709
IP address blocks:        131.0.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.crl
                          rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:87:95:59:c9:77:12:94:ec:fb:f7:89:94:d0:b0:c9:a1:3b:1b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34
        Validity
            Not Before: Apr  4 02:17:26 2024 GMT
            Not After : Apr  3 02:22:26 2025 GMT
        Subject: CN=D97DEF9D11CCA680475A79552AC9F0DFC3EE9FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:74:b6:8d:1f:41:4c:95:55:d4:56:8d:ed:
                    4d:ee:e9:ff:49:11:eb:67:bc:45:b0:5b:b8:ac:d4:
                    27:07:f9:ce:73:7e:31:58:89:6f:a9:d6:6f:34:93:
                    6c:a3:0b:47:d9:04:2a:ce:05:e9:ac:4a:3d:e9:79:
                    2e:f1:d4:51:26:1d:8e:ad:90:6c:0d:5b:94:f4:e0:
                    53:1a:41:59:bb:43:19:8b:37:c4:c3:9b:6e:52:ff:
                    9b:bd:c6:ec:b6:c7:e9:cc:2c:33:e0:b5:c1:b3:cc:
                    6b:23:26:18:32:14:62:a4:94:07:9a:0d:40:d4:ba:
                    a1:d5:42:a9:8a:89:6e:b7:f6:6e:42:a1:74:bf:3f:
                    af:e9:4a:7a:bb:af:24:70:e8:a4:55:7b:06:10:da:
                    1a:10:66:59:e2:08:38:25:cd:fc:dd:4d:53:de:07:
                    6a:bf:4c:3b:a6:77:e8:89:e1:0b:87:92:85:7e:f7:
                    f1:ba:bf:d1:c1:4a:ea:bc:65:af:de:a4:94:6d:3b:
                    c7:c4:0a:23:a3:23:d8:29:24:c2:7b:28:a3:0b:e0:
                    00:9b:91:85:84:39:c4:6c:f7:84:23:4b:cf:10:de:
                    f8:76:94:1b:3f:71:5c:16:02:df:53:da:f4:71:9b:
                    1d:ef:c6:14:f6:70:d1:19:f4:d5:20:c1:00:c8:b4:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:EF:9D:11:CC:A6:80:47:5A:79:55:2A:C9:F0:DF:C3:EE:9F:A6
            X509v3 Authority Key Identifier:
                keyid:EA:07:CB:42:A7:DC:EB:70:8A:94:E2:A1:5A:A0:C4:6F:A5:27:1E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/3133312e302e3232382e302f32322d3234203d3e203631373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:aa:7d:f0:3c:f4:fe:2c:23:a8:77:ea:3f:19:f4:b0:c8:
         01:00:0d:ca:82:cd:23:5c:5a:32:09:cf:20:29:fe:4e:e7:5f:
         39:6d:42:f1:60:f6:49:75:40:92:26:94:22:43:f8:79:8d:cc:
         83:30:eb:d9:1f:76:cd:de:96:31:b5:81:f6:98:37:f3:f7:a9:
         3f:b2:1d:e2:e7:10:3e:47:c6:b6:1b:10:9e:c2:39:16:43:70:
         00:c2:b5:f6:14:f9:71:73:f9:60:4e:a2:64:b2:a5:8f:fb:7b:
         3f:ab:27:6a:1b:1f:44:23:0d:3f:58:f4:b4:3c:92:24:79:95:
         6b:cd:05:1b:0c:bf:49:b8:dd:fc:bc:24:e8:07:22:0b:87:5e:
         10:d5:3d:db:e5:b7:08:f2:03:ca:c4:5b:16:4c:94:3c:83:7c:
         18:20:ed:ce:c8:07:ba:51:b2:27:5a:57:91:7f:60:eb:82:aa:
         5e:49:52:17:d1:7d:72:2c:a3:c8:4b:3b:a4:09:6a:25:3a:32:
         4d:58:5a:90:e1:e8:33:94:6c:04:df:71:4d:7e:86:a8:d7:b9:
         c7:2d:54:dc:cf:5c:08:f3:cc:b8:bf:d5:f1:bb:be:d1:3b:77:
         ae:12:14:af:1f:bd:a1:e6:24:98:c6:82:9e:df:8d:62:66:f3:
         5d:e1:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:06 2024 by rpki-client on console-ams.rpki-client.org