Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa
File:                     3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa (raw, json)
Hash identifier:          RVy6fy8yIKcVScsa0IQG17sw6VqHD4+HyTzURBHD2r0=
Subject key identifier:   CD:7B:C6:9F:48:A1:72:6D:E4:AD:13:C5:5E:52:4E:FD:8F:C1:29:F7
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       4CF4CBD6CF1A93C8FFAFA444030FD130902F9FB3
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa
Signing time:             Thu 04 Apr 2024 09:18:03 +0000
ROA not before:           Thu 04 Apr 2024 09:13:03 +0000
ROA not after:            Thu 03 Apr 2025 09:18:03 +0000
asID:                     28658
IP address blocks:        131.221.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f4:cb:d6:cf:1a:93:c8:ff:af:a4:44:03:0f:d1:30:90:2f:9f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Apr  4 09:13:03 2024 GMT
            Not After : Apr  3 09:18:03 2025 GMT
        Subject: CN=CD7BC69F48A1726DE4AD13C55E524EFD8FC129F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:3b:67:76:f2:7d:2e:5f:98:d7:71:87:2d:
                    2e:32:a6:b8:97:d1:ad:f4:55:c5:93:76:90:89:a7:
                    e5:6c:be:51:18:3c:7e:ab:8e:1d:7c:3a:d3:cf:a6:
                    39:0f:f9:8b:ef:19:71:58:3b:e6:ba:27:5a:90:d6:
                    9a:98:30:bb:4d:75:c9:8d:6f:0a:2a:37:6b:f2:b0:
                    42:29:bb:4d:bf:90:33:cc:01:a7:11:ab:a6:cb:92:
                    84:5a:03:6c:17:5c:f9:87:2e:4a:34:42:8b:db:01:
                    f6:45:84:6d:b1:95:4a:18:19:51:99:bf:80:3d:3b:
                    18:fc:c5:2a:fe:cf:c2:3e:fe:8e:4f:82:e3:b8:46:
                    a7:9f:60:85:f5:61:06:06:2e:18:f3:63:40:26:15:
                    18:e4:e9:34:b7:99:97:d6:d5:10:3e:dc:4e:e2:21:
                    65:bb:7c:ae:8a:98:73:2e:6f:5d:68:02:15:78:b5:
                    4d:44:8b:b4:94:c5:46:4e:75:60:60:49:2e:4b:d1:
                    ac:2f:ab:7b:5c:fa:2e:80:1f:44:43:6b:ac:e9:53:
                    fd:5c:bd:31:3f:85:16:46:ec:d1:35:b7:27:84:e8:
                    44:8f:ec:42:0a:f5:a9:d4:77:9b:7c:51:46:8c:c6:
                    99:cc:9a:06:e7:3c:fd:86:c7:84:65:02:3d:4e:14:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7B:C6:9F:48:A1:72:6D:E4:AD:13:C5:5E:52:4E:FD:8F:C1:29:F7
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3133312e3232312e3230382e302f32322d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:e0:02:6c:1e:1b:4e:ba:2f:6b:ef:c9:68:83:71:be:de:ea:
         cb:fe:7b:fb:61:05:ea:da:68:d9:97:6e:81:74:10:e8:9e:dd:
         63:04:ea:ea:93:bc:00:99:f9:86:5b:14:83:f9:48:39:26:8d:
         09:24:29:7e:53:71:c1:09:bf:82:53:ba:c6:ee:5f:6c:21:19:
         e9:8f:15:98:ee:9b:f0:77:b4:74:b6:d1:67:c6:13:6f:7d:0c:
         61:fd:d7:5d:59:a4:14:91:cc:16:1c:37:74:68:e6:c6:7d:1b:
         40:dd:e4:32:22:30:60:8f:5a:42:14:e2:43:2e:c1:7b:3d:c1:
         fb:5a:ec:d6:25:4e:6b:1f:b2:a0:05:42:42:4c:c2:0b:97:9c:
         e7:df:2f:af:ae:2a:3c:fb:e8:11:ed:6f:64:42:f3:94:ef:1e:
         13:f9:61:d0:0f:b9:93:8a:c5:67:b7:0c:2c:da:34:62:3d:d5:
         23:7e:1d:c0:21:c5:e1:98:97:61:7f:f4:83:8f:cd:2a:6c:a4:
         ec:a5:77:71:15:97:16:91:0c:c6:70:95:d1:9c:79:ee:71:0c:
         b0:12:11:06:d6:67:ab:29:00:0e:21:07:5e:c0:97:ff:60:45:
         1f:de:17:e5:b4:90:6e:90:09:06:cd:98:57:d7:b7:bc:2c:4b:
         5a:a6:18:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:35 2024 by rpki-client on console-ams.rpki-client.org