Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32322d3232203d3e20323634343235.roa
File:                     3133312e3232312e3138342e302f32322d3232203d3e20323634343235.roa (raw, json)
Hash identifier:          acjd7e6x/Z3Swhrn9NmeR6BUyzAPPlBriXxu31IUTfQ=
Subject key identifier:   74:69:50:9C:8A:0E:FB:99:1F:08:42:BE:ED:FB:FB:77:CD:8A:A2:36
Certificate issuer:       /CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
Certificate serial:       3D414F74E583DCAB463DAE742AAE749146C6E1B0
Authority key identifier: 56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32322d3232203d3e20323634343235.roa
Signing time:             Tue 23 Jul 2024 18:01:34 +0000
ROA not before:           Tue 23 Jul 2024 17:56:34 +0000
ROA not after:            Tue 22 Jul 2025 18:01:34 +0000
asID:                     264425
IP address blocks:        131.221.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:41:4f:74:e5:83:dc:ab:46:3d:ae:74:2a:ae:74:91:46:c6:e1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
        Validity
            Not Before: Jul 23 17:56:34 2024 GMT
            Not After : Jul 22 18:01:34 2025 GMT
        Subject: CN=7469509C8A0EFB991F0842BEEDFBFB77CD8AA236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:48:df:5d:bd:ab:64:c7:3a:5d:7a:d9:14:
                    95:98:42:b2:3d:53:2d:f1:ba:d9:70:88:f4:9f:b3:
                    a9:4f:c2:7b:13:8c:ed:21:41:ea:c2:63:f9:5f:28:
                    da:d5:6d:37:22:11:07:ec:a1:bf:52:60:a3:96:5b:
                    5b:19:e5:5d:0d:fd:bc:ce:a3:1a:0d:1e:bb:73:91:
                    dc:1b:d9:db:10:48:6d:9c:b1:50:df:b3:ee:40:07:
                    c0:80:0f:bc:59:ad:11:06:66:07:65:9d:ca:e5:31:
                    ee:fe:ff:2f:ee:59:96:59:0f:de:d3:2c:e0:c0:21:
                    05:8f:51:43:22:e1:3b:36:c2:c1:de:2f:7b:78:cd:
                    fa:d6:41:05:18:19:6f:04:07:28:b6:c4:cb:63:ba:
                    7f:a6:8e:10:8f:60:30:86:a7:d5:b7:99:e8:2b:f2:
                    4f:d1:ec:f8:21:5a:aa:e5:5d:01:5a:fe:73:c6:e5:
                    be:59:53:f8:a2:16:82:49:35:7c:41:0d:1b:17:57:
                    36:9c:4e:f7:18:86:e8:8c:55:22:9c:21:71:02:1a:
                    c3:33:d1:2f:f4:5b:05:07:21:1d:a5:6d:a2:bd:f3:
                    6b:7e:a2:a0:06:8a:7c:d6:ad:86:d1:29:01:c7:fe:
                    91:4d:eb:dc:17:32:94:b3:c0:82:5b:27:a2:7c:5c:
                    f3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:69:50:9C:8A:0E:FB:99:1F:08:42:BE:ED:FB:FB:77:CD:8A:A2:36
            X509v3 Authority Key Identifier:
                keyid:56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32322d3232203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:f0:66:8f:aa:9f:10:be:c0:67:92:b0:c2:bc:b2:bb:08:b8:
         8d:21:5f:2f:19:99:a4:8a:aa:13:3b:27:f7:8c:2d:95:62:8f:
         34:67:86:79:d1:95:6b:6a:ee:a4:af:a3:a5:2a:b2:a2:81:3c:
         3e:e3:b4:b0:59:a6:49:bd:c1:a9:d1:a8:9d:99:9d:47:a7:82:
         d0:15:e9:b1:11:3a:a0:16:6d:33:57:d9:08:bf:0f:ad:a0:ee:
         75:ee:17:b6:88:23:63:13:bc:bb:5a:cc:4b:5a:2c:57:3e:63:
         bf:33:37:d0:e4:61:68:2f:e9:55:c0:43:1e:05:8b:a0:ee:25:
         85:c1:37:bc:a6:03:20:c0:2b:b5:37:69:c1:c6:e8:bc:15:60:
         6e:9b:ed:2c:a1:58:b8:b0:ce:2b:1f:db:65:55:61:fa:f1:fd:
         92:eb:71:13:4b:c9:08:71:01:f2:c0:50:01:30:99:7a:ba:a0:
         96:bd:db:70:6b:a1:bd:c3:7a:c0:50:83:29:59:af:2f:7b:30:
         f7:81:75:65:52:be:f8:88:57:7e:4e:4c:2d:5e:5e:5e:d8:46:
         27:b8:86:85:f1:9b:51:4b:8b:33:8c:fa:61:73:0d:59:1d:03:
         72:07:09:c3:2b:11:04:84:14:d7:57:fb:b7:ed:3f:d2:b0:0d:
         e9:a1:39:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:23 2024 by rpki-client on console-fra.rpki-client.org