Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa
File:                     3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          QT/8840aCQzIBIgJq9wP0tXm3eZ2KPh0fyrbYBNhiwo=
Subject key identifier:   2A:13:8D:63:CE:58:77:A7:62:60:06:14:24:8D:84:F7:AE:4C:82:1F
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       0875BE92029FB005C8DC3BD298122B6439902765
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 08 Jul 2024 18:44:08 +0000
ROA not before:           Mon 08 Jul 2024 18:39:08 +0000
ROA not after:            Mon 07 Jul 2025 18:44:08 +0000
asID:                     266433
IP address blocks:        131.108.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 23:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:75:be:92:02:9f:b0:05:c8:dc:3b:d2:98:12:2b:64:39:90:27:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Jul  8 18:39:08 2024 GMT
            Not After : Jul  7 18:44:08 2025 GMT
        Subject: CN=2A138D63CE5877A762600614248D84F7AE4C821F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:6d:04:94:78:8b:f4:9f:b1:4a:9e:b2:9c:
                    08:3e:ac:bf:fb:50:f9:0c:b4:f4:31:eb:f5:96:26:
                    d0:84:c9:ba:a3:fd:08:d4:b4:91:fe:1f:fd:10:20:
                    0a:bf:74:0d:01:2d:6a:f2:7d:88:fe:0d:6a:3a:47:
                    69:02:1c:33:90:2e:78:22:27:71:13:d1:84:a0:7c:
                    ce:89:37:12:a2:cb:71:55:29:43:ba:79:46:5b:b9:
                    a6:a3:8f:ea:bc:47:8a:95:33:3f:46:95:63:af:fe:
                    44:69:1a:9e:1e:94:8b:05:0c:09:80:1e:7d:4e:0d:
                    2a:a1:2b:b7:dc:64:ba:d8:f7:aa:f5:64:9f:5b:c9:
                    11:6c:b4:ea:36:5c:35:8a:fc:20:ee:c9:d9:b4:75:
                    1d:14:81:c7:c5:0f:c2:ff:15:68:1a:19:b6:ef:74:
                    d0:3a:56:b8:aa:9b:91:db:0a:01:51:c6:65:7d:be:
                    0e:5b:d0:4d:1a:fa:cf:7f:5e:0c:e3:39:33:95:c8:
                    9a:8e:89:05:99:3d:97:3a:a4:96:41:8a:0f:9a:88:
                    71:93:38:8e:f9:7b:25:f1:45:88:13:83:26:af:eb:
                    eb:cc:aa:99:04:82:d0:bd:4d:2b:7b:e5:61:5c:28:
                    33:0e:ac:9c:b5:dd:53:50:bd:5a:46:7b:40:86:f0:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:13:8D:63:CE:58:77:A7:62:60:06:14:24:8D:84:F7:AE:4C:82:1F
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3133312e3130382e3235322e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:67:44:a9:64:e2:14:3a:60:38:36:de:ec:42:85:98:34:f0:
         4d:93:b3:7e:b2:60:19:45:f8:f4:fa:90:78:b3:84:98:4b:ec:
         33:ed:f9:e5:a5:80:8c:2c:98:02:63:7a:f5:0e:b3:03:e8:25:
         49:bf:53:d8:5b:ca:a0:7d:06:be:0b:a5:99:f4:08:4c:9e:31:
         00:3c:15:ce:dc:64:d3:15:7b:99:93:82:a6:be:96:c1:76:f5:
         20:58:b9:9b:1b:f3:af:d4:bf:b8:a9:9b:71:c8:c1:55:1d:63:
         26:ba:36:d7:a7:74:78:a4:01:d3:85:b1:c5:fc:6d:71:b6:06:
         50:a7:72:03:9e:13:b9:0a:a4:d0:12:78:d3:fd:f4:b8:92:9b:
         5e:21:d2:22:f2:fc:05:bc:5f:d5:87:3e:a4:c3:0d:4e:d8:f4:
         90:d2:d4:4f:86:be:06:71:4e:55:54:f4:09:5a:30:c6:1f:0b:
         19:7e:a9:95:1b:44:75:30:55:50:1b:0f:35:69:b9:88:db:a4:
         2f:70:72:66:98:a4:ff:72:dc:86:ee:dd:84:77:4b:21:79:36:
         32:08:87:f7:20:9a:4b:49:27:ed:16:87:b7:4a:ee:10:7f:b5:
         1e:0a:5e:41:33:e4:f3:2f:18:9d:c2:5e:d8:11:62:7e:d8:1f:
         df:1e:2c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 02:47:02 2024 by rpki-client on console-fra.rpki-client.org