Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa
File:                     3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (raw, json)
Hash identifier:          g+FcDOVV278Yj5cQPiRq08JGG77rDvFavvoSMt51SdU=
Subject key identifier:   F8:D8:77:69:3D:35:5E:E2:C7:47:3F:B2:B0:0C:B0:36:24:D4:21:FF
Certificate issuer:       /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
Certificate serial:       068A351C6CC416665F8C70CACA585726C3E316BF
Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa
Signing time:             Mon 30 Sep 2024 21:38:37 +0000
ROA not before:           Mon 30 Sep 2024 21:33:37 +0000
ROA not after:            Mon 29 Sep 2025 21:38:37 +0000
asID:                     266006
IP address blocks:        131.196.224.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl
                          rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:50:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8a:35:1c:6c:c4:16:66:5f:8c:70:ca:ca:58:57:26:c3:e3:16:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
        Validity
            Not Before: Sep 30 21:33:37 2024 GMT
            Not After : Sep 29 21:38:37 2025 GMT
        Subject: CN=F8D877693D355EE2C7473FB2B00CB03624D421FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:77:b3:bb:b2:87:8a:6f:08:ac:71:a3:f1:b0:
                    17:33:da:0e:91:b0:fd:d7:e4:62:6a:01:db:1c:60:
                    32:22:43:cf:a6:90:36:ff:5b:ae:c8:18:d2:56:5c:
                    5d:7b:1e:9d:3e:a4:93:d1:1c:67:e5:1f:17:a8:aa:
                    4c:b8:a5:c3:b7:06:af:88:4e:15:b3:40:7d:bd:17:
                    d3:0d:ad:8c:4d:33:cc:32:ba:40:35:90:91:a2:72:
                    21:74:af:6b:6a:6f:2b:1c:dc:7a:ec:4d:c8:9e:15:
                    dc:12:98:25:a3:2e:b5:f4:f5:89:dd:88:3b:2a:da:
                    82:18:07:86:c4:97:a2:03:f2:ee:bc:41:70:c5:67:
                    1b:35:7f:63:cc:aa:33:65:3f:2f:ae:b9:a2:17:75:
                    cd:e1:d4:96:98:b9:82:be:64:10:3c:dd:9f:7b:42:
                    66:07:65:3f:2a:3a:44:0e:14:59:62:6e:f0:81:fb:
                    94:45:8d:c4:59:05:6f:f2:fe:4a:fb:d9:ee:95:17:
                    5d:71:aa:2f:ad:e8:73:a0:0b:83:3f:0e:8d:bd:b6:
                    ea:6f:97:d6:54:70:0a:9d:f2:0a:5a:ae:3e:7f:2a:
                    86:57:bd:4b:73:d8:1b:2b:b3:17:bd:ae:e1:aa:7e:
                    10:bc:9a:ad:1f:d6:38:77:aa:e2:5a:3f:51:94:ba:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D8:77:69:3D:35:5E:E2:C7:47:3F:B2:B0:0C:B0:36:24:D4:21:FF
            X509v3 Authority Key Identifier:
                keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:c4:35:16:4b:59:97:9e:83:f0:df:9a:50:f8:71:72:0d:5e:
         df:55:b1:46:55:40:47:3e:d5:1f:9e:e8:70:47:39:dd:52:53:
         68:08:5f:fe:e6:48:77:64:db:78:32:4d:c8:8a:8e:ae:93:a8:
         87:bb:13:48:4d:85:0a:53:59:93:ba:5e:f7:d2:66:d3:17:7a:
         7c:47:6b:64:8f:e7:ce:fc:75:39:fb:ea:3f:a0:01:b5:d7:e6:
         ed:13:bc:32:a0:65:0d:d5:7e:03:5d:51:51:65:1b:f1:e2:12:
         af:d8:2f:1e:8c:c7:8d:3e:f1:3e:60:dc:95:7a:40:37:ce:98:
         44:0e:35:2b:58:12:f2:7a:4a:cf:82:e0:39:6d:94:67:41:54:
         b3:a0:29:0e:d2:d0:c0:f9:17:7b:e5:a6:24:0d:a4:f4:bb:df:
         9d:3c:a0:ed:59:7b:8c:bb:05:06:47:2f:b3:2f:b7:00:db:52:
         74:d8:47:82:36:a2:61:f3:18:20:7f:12:98:6a:93:bd:5a:92:
         62:4b:69:94:d4:68:90:26:92:5e:ae:34:0a:15:d3:3e:2d:89:
         5b:5e:f7:bc:c3:2f:ae:c6:b9:89:be:a8:1f:b0:32:9a:d1:cb:
         f9:c8:66:3b:da:cc:1d:be:87:87:e6:9b:b4:20:17:a7:a2:10:
         39:38:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:16 2024 by rpki-client on console-ams.rpki-client.org