Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139372e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139372e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          TXa39UXJmpmhJ18RHhsZt0EUug5AYJ27CafCGkmN6o4=
Subject key identifier:   38:A9:79:1D:EC:A9:47:01:8E:15:89:7D:9A:5A:22:B8:C3:19:EA:C7
Certificate issuer:       /CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
Certificate serial:       5C0F6D66B6F329ABCA34FFBD87535863597767A7
Authority key identifier: 09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139372e302f32342d3234203d3e20323635393139.roa
Signing time:             Wed 13 Nov 2024 02:54:38 +0000
ROA not before:           Wed 13 Nov 2024 02:49:38 +0000
ROA not after:            Wed 12 Nov 2025 02:54:38 +0000
asID:                     265919
IP address blocks:        131.196.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0f:6d:66:b6:f3:29:ab:ca:34:ff:bd:87:53:58:63:59:77:67:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
        Validity
            Not Before: Nov 13 02:49:38 2024 GMT
            Not After : Nov 12 02:54:38 2025 GMT
        Subject: CN=38A9791DECA947018E15897D9A5A22B8C319EAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:c2:73:bc:86:fe:69:f7:93:50:a7:35:9e:
                    a0:0d:4a:fe:c6:bf:ae:ff:cb:c2:e1:5f:fd:ed:b5:
                    af:b9:d2:69:16:9e:3a:3c:a9:ad:e1:08:97:1d:10:
                    f6:85:4f:74:7e:4a:36:42:db:a9:27:d0:a4:4f:98:
                    52:f1:84:76:99:60:0b:02:6d:fb:76:4a:c7:84:09:
                    df:5e:bd:45:68:99:a8:e1:f5:ec:41:84:91:3c:4a:
                    24:8b:ce:6c:9e:5b:81:41:dc:24:83:33:cd:e0:80:
                    e5:ea:2e:80:0e:43:85:b3:a6:61:26:d9:b8:77:4e:
                    ce:b4:f0:4e:76:5f:78:ff:2e:51:61:5b:55:d8:2e:
                    20:bf:b9:02:c5:9c:d4:f9:93:8d:a3:3c:97:1a:3d:
                    d2:b3:55:c8:d3:30:10:26:9e:9b:af:52:66:ed:1d:
                    c3:88:fa:43:bd:1c:79:a2:b5:9f:9b:e2:17:b1:bc:
                    1f:09:5a:bd:12:8c:b2:df:89:cc:6e:be:e2:c4:89:
                    92:40:fd:bd:17:c5:27:da:6d:86:b7:23:d6:cb:cd:
                    f0:ab:5e:2a:dd:97:9a:e2:3c:a8:bb:4d:76:6f:3b:
                    a3:5d:44:50:43:cf:99:8e:c4:02:89:33:58:7b:37:
                    e7:79:35:e3:6a:52:72:58:88:76:2f:a0:65:aa:f0:
                    f6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A9:79:1D:EC:A9:47:01:8E:15:89:7D:9A:5A:22:B8:C3:19:EA:C7
            X509v3 Authority Key Identifier:
                keyid:09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139372e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:fa:97:7c:bd:27:f2:b1:bc:3f:f2:13:89:62:3f:ca:55:
         18:44:28:43:da:c3:38:ca:be:0b:c4:42:43:87:68:36:b2:6a:
         b5:2c:ea:96:78:3d:ad:a8:b4:88:a1:75:72:d0:52:c3:b9:a2:
         89:81:a2:3a:78:26:da:8b:a6:9a:1d:67:1b:69:89:28:c4:f3:
         8f:2f:81:58:0d:be:5b:84:aa:40:30:9d:3b:05:c4:7a:31:b1:
         0c:62:14:ce:ea:60:ed:70:a6:48:fb:bf:27:63:11:46:99:68:
         e1:5a:88:49:6e:6e:47:b4:c8:c4:b1:b7:3d:99:df:a3:43:45:
         63:00:41:ac:04:dc:ef:ad:de:03:b9:61:94:44:92:20:e5:f4:
         9c:fd:af:d4:04:c1:47:42:c7:bd:7b:15:2a:8c:e3:d2:1e:5c:
         64:d5:81:df:30:60:47:9f:fc:ad:4f:ef:d2:59:c4:57:d8:22:
         9f:8a:39:9f:f9:a9:c1:9c:0d:48:80:78:48:92:b5:e0:81:0d:
         d1:30:ff:6a:79:6b:96:b6:7c:26:21:6e:50:33:07:b9:dd:5c:
         e8:36:9b:50:10:28:d0:67:38:fe:f2:3b:66:ba:4e:8a:f3:d5:
         9e:69:c1:dd:db:15:2a:0d:77:6f:a0:28:3d:a5:0d:d1:66:bc:
         29:ea:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:22 2024 by rpki-client on console-fra.rpki-client.org