Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32342d3234203d3e20323634343235.roa
File:                     3133312e3232312e3138362e302f32342d3234203d3e20323634343235.roa (raw, json)
Hash identifier:          kjr+2F/0RdWNSajnrEi/iOKKQTL8v0K5toc9rpa3zOo=
Subject key identifier:   2D:F7:EB:02:E1:7F:88:AF:66:3E:77:0F:51:DB:4F:9F:65:25:2D:72
Certificate issuer:       /CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
Certificate serial:       4FE4263FCE7F5EE4F1F619C07C3E6B0970566AFA
Authority key identifier: 56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32342d3234203d3e20323634343235.roa
Signing time:             Tue 23 Jul 2024 18:02:09 +0000
ROA not before:           Tue 23 Jul 2024 17:57:09 +0000
ROA not after:            Tue 22 Jul 2025 18:02:09 +0000
asID:                     264425
IP address blocks:        131.221.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl
                          rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e4:26:3f:ce:7f:5e:e4:f1:f6:19:c0:7c:3e:6b:09:70:56:6a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563F220F1BE7F8A083408CCA243F8EDE091EA8DC
        Validity
            Not Before: Jul 23 17:57:09 2024 GMT
            Not After : Jul 22 18:02:09 2025 GMT
        Subject: CN=2DF7EB02E17F88AF663E770F51DB4F9F65252D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:f2:24:49:fa:e7:54:f5:bc:06:f0:e1:1d:
                    a1:23:92:50:ac:eb:ed:0b:e0:6c:91:c3:b6:77:34:
                    cc:9e:ab:45:94:ec:90:24:42:42:f5:e2:c2:f3:8d:
                    04:1a:76:1b:9f:40:14:fd:14:ed:6e:82:a3:9e:9e:
                    37:29:e3:22:19:82:15:d8:a6:19:4d:6b:af:cb:55:
                    ab:12:0c:bb:9c:0a:3d:13:92:2e:4b:d8:78:0b:f1:
                    5d:0f:78:c5:07:18:4c:2d:75:ce:ae:c5:a1:d7:4a:
                    a3:36:17:cc:e6:b6:3b:fb:79:13:f6:4b:0a:1c:d0:
                    f2:82:3f:5a:75:17:aa:68:a3:4e:bc:f9:95:9b:5a:
                    3a:76:63:48:0f:e8:4f:fa:a4:76:75:72:39:1b:98:
                    e9:12:4e:fa:15:bf:59:dc:2d:2f:d6:e6:d2:e3:9f:
                    eb:e8:d7:ed:79:d4:4e:4c:0d:33:ff:8d:20:d2:7c:
                    2f:2a:8b:45:e1:1d:6c:e1:80:00:72:eb:ee:50:41:
                    e4:fd:6b:15:5a:fd:bb:62:93:6a:d4:a5:d1:f4:02:
                    50:0e:67:24:52:80:dd:1e:a3:d6:01:35:59:f7:1c:
                    9c:2e:dc:ed:95:e6:69:aa:61:f6:48:fc:4c:4e:78:
                    41:63:76:55:ed:03:f1:e0:83:28:41:19:c6:0a:ac:
                    31:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F7:EB:02:E1:7F:88:AF:66:3E:77:0F:51:DB:4F:9F:65:25:2D:72
            X509v3 Authority Key Identifier:
                keyid:56:3F:22:0F:1B:E7:F8:A0:83:40:8C:CA:24:3F:8E:DE:09:1E:A8:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/563F220F1BE7F8A083408CCA243F8EDE091EA8DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGRLLmNh7N2pxgJ4LoX8Gt1bcg3yqJWVR5Eq5LXmZK4d/0/3133312e3232312e3138362e302f32342d3234203d3e20323634343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:b4:85:54:c8:b9:fe:f8:3b:b4:b1:b1:97:25:25:80:34:a3:
         33:29:05:a4:f1:8b:3a:c6:9c:2f:ae:17:76:26:f5:97:b0:08:
         53:4f:60:5e:ba:21:59:5b:ab:97:2f:d2:b5:d7:dc:d2:13:8f:
         2e:27:80:50:06:cf:ee:c1:9e:f9:60:c0:2e:e4:b7:a7:36:4e:
         af:22:d4:13:84:78:2e:a0:6c:80:0c:6a:e3:f2:36:b8:00:e6:
         c1:b9:99:0e:ce:54:82:21:c0:34:ee:2d:38:67:6f:ed:e5:af:
         6e:e6:c7:af:c0:7e:05:d6:bb:2e:a1:51:20:fa:38:17:72:20:
         03:ab:87:70:b0:7c:23:10:65:a2:a1:f9:95:2a:b4:ef:9e:00:
         83:8d:7b:21:53:b7:54:b0:c2:0c:b7:7e:19:b1:84:50:26:06:
         8c:09:83:e2:ab:d5:00:d7:ad:b1:90:5f:b5:8c:34:ef:31:02:
         e3:25:c3:a0:a2:da:0c:c5:88:7d:a4:4d:05:cf:34:7d:20:2d:
         e1:22:0f:b2:16:b2:91:5e:33:af:ab:e7:60:d5:28:8f:d7:25:
         b0:02:e8:50:0d:43:b0:12:c7:44:c3:d1:62:92:39:01:f7:68:
         ab:0f:81:44:80:cf:4c:f6:45:7f:1c:e2:80:d3:c0:ca:f7:c6:
         25:43:1f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:23 2024 by rpki-client on console-fra.rpki-client.org