Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa
File:                     3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa (raw, json)
Hash identifier:          JWPeuPgLPU8SOVg58XREookkPQ3canhZCW2vtF64H48=
Subject key identifier:   1B:26:CE:42:93:7C:7B:5E:96:E8:9E:16:D7:EE:0F:9C:87:14:7D:B8
Certificate issuer:       /CN=4936D3D33202532B27ADCD7B44359BCF8ABCBC38
Certificate serial:       14EF61523AC6C68A3E19A7B03A9DC0C807B08DF5
Authority key identifier: 49:36:D3:D3:32:02:53:2B:27:AD:CD:7B:44:35:9B:CF:8A:BC:BC:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa
Signing time:             Thu 16 May 2024 14:24:05 +0000
ROA not before:           Thu 16 May 2024 14:19:05 +0000
ROA not after:            Thu 15 May 2025 14:24:05 +0000
asID:                     265942
IP address blocks:        131.196.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.crl
                          rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ef:61:52:3a:c6:c6:8a:3e:19:a7:b0:3a:9d:c0:c8:07:b0:8d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4936D3D33202532B27ADCD7B44359BCF8ABCBC38
        Validity
            Not Before: May 16 14:19:05 2024 GMT
            Not After : May 15 14:24:05 2025 GMT
        Subject: CN=1B26CE42937C7B5E96E89E16D7EE0F9C87147DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:a1:ab:df:cd:3b:2d:e8:b5:bb:6b:75:90:
                    0f:5a:4c:d1:ba:0f:3c:16:9d:11:04:1b:18:e7:32:
                    26:87:29:71:58:63:b3:20:7c:0f:aa:22:8b:ee:f5:
                    56:8b:7f:57:2b:97:88:f7:b7:cf:54:be:4c:74:63:
                    82:ec:84:50:2e:c7:1f:72:b4:b4:4e:35:c7:7f:f5:
                    0a:9e:0a:05:0c:14:6d:05:d2:47:27:ab:d9:8a:57:
                    c4:6b:75:41:67:ae:11:fa:98:73:d4:73:64:a4:b4:
                    3b:82:ab:48:93:e1:4c:d4:6d:56:cb:74:99:8b:22:
                    db:1b:e3:30:76:c0:15:fc:ec:8e:9c:94:02:28:c4:
                    02:14:fc:a6:c0:eb:f1:0b:d5:5c:9b:0e:66:c4:bc:
                    21:ac:cd:52:f6:cf:f2:4a:42:8c:a8:e9:73:52:07:
                    a7:a0:a2:8f:8b:c3:cf:aa:c6:b7:92:a6:ce:47:35:
                    f0:0e:5a:97:21:8e:04:3d:6f:5d:81:aa:36:ed:d6:
                    a4:37:03:7c:8d:cd:5b:a3:bf:2a:5f:38:e1:9b:22:
                    bb:d3:a6:96:7e:7a:ac:76:aa:a9:9b:f4:57:1b:72:
                    8c:aa:0e:84:55:b6:95:a6:c0:ee:ef:e9:8d:67:d8:
                    5e:ab:22:e3:8c:e5:a8:7e:0b:7d:bf:5d:2f:b1:16:
                    f5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:26:CE:42:93:7C:7B:5E:96:E8:9E:16:D7:EE:0F:9C:87:14:7D:B8
            X509v3 Authority Key Identifier:
                keyid:49:36:D3:D3:32:02:53:2B:27:AD:CD:7B:44:35:9B:CF:8A:BC:BC:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4936D3D33202532B27ADCD7B44359BCF8ABCBC38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:2a:95:b1:36:c9:86:4f:b2:8a:f0:f6:3e:f5:3e:9f:3b:ca:
         c5:a6:6b:b8:ef:e9:13:5a:b6:26:10:7a:af:16:89:ef:6b:e2:
         e9:56:7e:d3:d6:dc:78:1a:db:13:34:01:c3:e5:ed:14:b4:32:
         5b:f1:b6:16:7e:de:38:35:28:27:61:1e:ad:4d:21:fd:58:1c:
         85:8a:ae:f9:e8:07:10:6c:dc:c2:af:04:31:b6:01:a0:3f:2d:
         be:22:a2:7c:ee:1b:ea:ac:4d:40:2b:c6:10:73:07:19:eb:24:
         36:2e:28:b7:7c:91:65:04:b6:df:44:ba:62:19:27:4d:22:4c:
         86:c2:f0:81:5b:ef:68:f3:b2:76:46:49:da:f0:1d:21:65:8c:
         75:ee:3c:fe:ef:ac:a2:ef:41:89:cb:1e:75:f4:fa:39:72:c8:
         5d:31:3e:a0:af:a1:56:d3:85:e9:3d:24:6b:e4:50:3d:be:b0:
         f4:76:21:aa:9d:6d:45:13:d8:85:8c:76:ac:d1:d4:03:7a:02:
         59:13:21:20:bd:e2:1f:e6:47:81:05:d1:fb:83:39:e4:0b:e2:
         fd:19:1c:99:ed:e2:ed:4f:e8:66:3c:fa:c9:25:d3:d2:c0:6c:
         1a:26:4e:04:c1:cb:2f:0f:36:e3:62:94:c9:84:58:ce:aa:be:
         6f:61:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:48 2024 by rpki-client on console-fra.rpki-client.org