Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32342d3234203d3e20323634343235.roa
File:                     3133312e3232312e3138342e302f32342d3234203d3e20323634343235.roa (raw, json)
Hash identifier:          m/CFLGHTH2TQlgtfAka0Fq79KKZFY8RQ1YsZuY89cRA=
Subject key identifier:   9D:C5:6A:50:07:BE:BB:44:B4:B1:D3:22:EE:0C:27:86:15:6E:DD:8E
Certificate issuer:       /CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
Certificate serial:       5FBB4EC87034B313F26993E27FDC7123D1CA7DCF
Authority key identifier: 56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32342d3234203d3e20323634343235.roa
Signing time:             Tue 23 Jul 2024 18:01:50 +0000
ROA not before:           Tue 23 Jul 2024 17:56:50 +0000
ROA not after:            Tue 22 Jul 2025 18:01:50 +0000
asID:                     264425
IP address blocks:        131.221.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bb:4e:c8:70:34:b3:13:f2:69:93:e2:7f:dc:71:23:d1:ca:7d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
        Validity
            Not Before: Jul 23 17:56:50 2024 GMT
            Not After : Jul 22 18:01:50 2025 GMT
        Subject: CN=9DC56A5007BEBB44B4B1D322EE0C2786156EDD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:25:63:da:27:06:ee:ae:91:bc:4d:15:f4:
                    3a:55:be:7f:84:3e:ce:6c:76:9c:2f:f8:fb:84:a8:
                    dd:77:9c:ab:7e:07:0a:99:22:01:5f:a6:89:ff:6d:
                    36:2f:c9:f5:68:06:16:70:c0:82:0f:b5:5f:4d:16:
                    1c:e3:82:0d:79:93:99:31:f7:a0:d2:b8:38:01:73:
                    63:7e:4a:d5:da:f0:b1:09:de:d2:58:a3:33:6c:c1:
                    d9:04:7c:3a:27:2d:43:5b:57:6a:fe:d7:8a:f8:a9:
                    2f:6a:41:53:5a:c8:04:bd:94:7a:06:df:26:87:51:
                    ee:fd:c9:2f:8a:f6:e6:1a:cd:9a:6d:2e:d2:2a:6e:
                    15:96:71:0e:97:f1:8d:db:b4:27:31:a8:51:6e:f0:
                    51:47:69:33:5f:08:ac:02:eb:52:83:a4:7b:cf:5f:
                    8b:b6:f8:dc:93:fd:d6:a3:ba:28:d5:12:cb:1c:66:
                    88:ee:9f:c4:a6:9b:d4:77:9e:3e:21:1c:d3:f9:bd:
                    94:ac:37:45:9d:e9:11:e2:85:f5:56:74:e3:ef:c0:
                    79:31:5b:3e:6c:06:dc:0b:89:5e:0e:f4:79:f3:ba:
                    45:24:07:9c:e9:f0:a8:59:06:a4:20:9c:8a:4d:0a:
                    0a:35:93:ca:4b:13:43:06:ef:ff:d1:86:ae:e5:20:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C5:6A:50:07:BE:BB:44:B4:B1:D3:22:EE:0C:27:86:15:6E:DD:8E
            X509v3 Authority Key Identifier:
                keyid:56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138342e302f32342d3234203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:8c:d5:4e:bc:b0:b5:e1:d7:65:5e:ad:b7:90:10:fa:e5:14:
         81:7b:a6:a3:bd:a4:cd:74:26:cd:c9:8b:df:f7:3a:62:42:72:
         07:de:3f:43:7a:16:24:b6:98:74:61:bf:33:24:34:dd:4e:db:
         ca:27:d2:25:f3:d0:e0:55:b9:c6:8f:3c:7f:6f:5d:81:b0:3b:
         bf:61:07:4e:8c:9c:3b:94:c8:0c:e1:09:7c:86:7e:30:a6:70:
         74:b2:ca:ff:60:92:cc:c6:e3:7c:ea:d7:8d:07:a5:05:82:8e:
         c6:a1:d7:22:9e:47:24:4c:28:12:f8:14:6b:c0:2d:d2:60:d4:
         da:12:63:90:49:99:3c:97:5c:87:84:eb:21:73:5f:fc:b9:5a:
         d9:04:45:05:e2:19:f3:d7:b3:10:1c:e6:e2:2b:b1:d0:86:73:
         db:4e:0f:8a:8c:79:3c:04:b8:46:7b:bb:b7:8d:9b:87:bc:05:
         54:74:4e:c2:e8:89:ec:86:7f:a6:70:e5:f0:c7:53:3a:de:fb:
         07:82:1f:3b:8d:04:a7:86:62:ad:c5:f3:b2:a7:ea:4f:0c:16:
         03:c1:8b:d8:30:26:60:10:cd:b7:01:fa:24:1e:f4:43:a0:e0:
         00:c7:c8:86:31:e1:01:36:28:09:ad:5d:ab:10:45:96:bc:31:
         42:32:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:57 2024 by rpki-client on console-ams.rpki-client.org