Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa
File:                     3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa (raw, json)
Hash identifier:          X0P+KuaOTN7WQiOS3caE1Edk+ng7myBLBrAG/M55nXU=
Subject key identifier:   38:0D:3A:50:1C:48:03:5C:62:50:F4:97:80:97:E1:68:34:DE:E0:4E
Certificate issuer:       /CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
Certificate serial:       7FFC54BCBF68DD7B7B6C69170CE85F418E5A6FD4
Authority key identifier: 56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa
Signing time:             Tue 23 Jul 2024 18:01:46 +0000
ROA not before:           Tue 23 Jul 2024 17:56:46 +0000
ROA not after:            Tue 22 Jul 2025 18:01:46 +0000
asID:                     264425
IP address blocks:        131.221.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fc:54:bc:bf:68:dd:7b:7b:6c:69:17:0c:e8:5f:41:8e:5a:6f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
        Validity
            Not Before: Jul 23 17:56:46 2024 GMT
            Not After : Jul 22 18:01:46 2025 GMT
        Subject: CN=380D3A501C48035C6250F4978097E16834DEE04E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:58:41:4d:b0:d0:9c:ea:e5:73:8c:81:f8:ae:
                    d4:10:93:99:47:f2:ea:2d:e9:ad:70:25:7c:0d:24:
                    b9:28:3c:7b:d4:e8:11:ec:e2:13:08:c5:66:5a:31:
                    bd:98:e6:4d:48:93:31:05:3c:33:21:0c:b4:f4:bf:
                    ee:a8:00:20:99:f3:d9:73:5f:8e:61:98:65:62:bb:
                    aa:b1:a6:ec:01:bc:7e:c4:73:6d:a7:ef:14:7d:40:
                    83:8f:2c:5a:05:bd:ee:c3:12:71:36:9d:7e:2d:ea:
                    c3:cc:97:ee:98:bd:fe:99:34:c0:fe:2e:32:6f:f5:
                    a5:7d:95:ab:6a:84:66:b2:1c:7d:80:8d:e0:c2:24:
                    14:d2:1d:76:18:3a:a2:c3:2a:26:fb:55:af:1a:b4:
                    03:1b:99:dd:92:00:9c:9f:99:8c:a0:88:a4:ea:6f:
                    5d:68:48:17:32:c7:6c:55:30:d7:b7:c3:24:6f:b1:
                    3b:6b:74:10:f0:69:7f:0a:3d:69:79:0f:6c:87:1f:
                    9d:4d:cc:96:f7:24:27:a7:38:48:0d:0a:37:df:ea:
                    d6:99:5c:e3:77:fb:45:b7:fc:c4:9e:79:d3:d4:3c:
                    55:13:4c:04:8e:9c:51:26:81:d1:61:30:ff:d9:73:
                    9d:f5:f4:bc:a6:2e:b7:75:9f:0f:0e:dd:1d:88:01:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0D:3A:50:1C:48:03:5C:62:50:F4:97:80:97:E1:68:34:DE:E0:4E
            X509v3 Authority Key Identifier:
                keyid:56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32332d3233203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:08:a2:6b:72:21:67:a0:8e:14:da:92:8d:9b:81:8c:9d:2e:
         be:53:ce:3b:fe:b4:65:0e:71:a1:eb:c0:bd:43:4b:82:3b:b7:
         a4:c1:dc:ac:3c:f3:92:22:c4:33:80:61:1d:e1:76:d7:50:d4:
         c0:69:3c:70:e5:c7:ef:e5:d7:07:ca:37:35:1e:70:15:78:59:
         b6:49:ed:97:05:4a:1c:d3:08:35:db:70:96:1f:27:4d:52:4e:
         2c:40:ed:ec:6c:ba:01:0a:72:3b:87:11:55:dc:4a:ba:0d:58:
         cf:cb:c8:79:61:d5:26:9b:ca:a4:7a:06:ce:f0:b2:25:9c:ee:
         a7:e0:d6:1b:a6:d9:95:db:1d:d7:9c:54:34:8e:5e:43:eb:39:
         9a:7f:70:8c:7a:de:48:0d:74:76:21:44:9f:56:19:86:8e:16:
         85:01:d0:58:be:56:28:2b:da:e0:0e:5e:f5:db:fb:f8:ca:17:
         5f:49:43:4f:df:c8:51:2b:80:b8:0e:7a:04:89:79:b1:ae:1f:
         35:26:d0:5d:ed:5d:3b:11:49:5d:ae:2c:9d:d2:d9:42:04:8d:
         8d:11:18:af:b2:5e:13:ec:41:e6:da:bf:89:ac:8c:2d:38:40:
         eb:e5:60:82:d1:04:63:3e:8f:08:d2:88:1a:09:f1:60:ca:74:
         36:2c:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:57 2024 by rpki-client on console-ams.rpki-client.org