Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          /wmEnfOxor8Ofa/91zCoi27u7v5tnUtdi3Bg18mQTjE=
Subject key identifier:   76:8D:DB:F4:EA:02:81:30:19:29:CF:4C:EA:13:E6:C3:2C:C6:15:D7
Certificate issuer:       /CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
Certificate serial:       5C6FF9C333C92D329EE79247140F478A89F28BC8
Authority key identifier: 09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa
Signing time:             Wed 13 Nov 2024 02:54:35 +0000
ROA not before:           Wed 13 Nov 2024 02:49:35 +0000
ROA not after:            Wed 12 Nov 2025 02:54:35 +0000
asID:                     265919
IP address blocks:        131.196.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6f:f9:c3:33:c9:2d:32:9e:e7:92:47:14:0f:47:8a:89:f2:8b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
        Validity
            Not Before: Nov 13 02:49:35 2024 GMT
            Not After : Nov 12 02:54:35 2025 GMT
        Subject: CN=768DDBF4EA0281301929CF4CEA13E6C32CC615D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7f:eb:1f:0e:b7:88:ce:62:20:93:0b:91:80:
                    43:91:f9:61:e5:d9:18:4d:3e:16:b3:07:ff:f7:6a:
                    cd:a4:bc:51:51:a5:52:88:7d:1a:6b:63:16:cf:08:
                    25:49:e9:c1:e4:2d:69:64:93:3f:9f:80:36:2d:81:
                    12:98:5c:c2:8a:f0:0a:05:9d:77:9c:12:a4:d1:06:
                    40:0b:27:d6:ec:67:e0:08:ac:9e:8d:e5:d1:09:1c:
                    28:6d:51:57:7b:71:2c:26:ce:80:a4:71:89:98:d7:
                    ef:ca:12:40:58:23:db:56:9c:6e:bd:e3:a0:e1:bf:
                    34:70:a9:37:9b:e0:62:50:d1:b4:b8:35:ea:ae:0d:
                    23:19:8d:d4:49:40:c9:90:af:1b:34:24:43:5b:1a:
                    70:c5:77:5c:65:44:33:d3:6c:ec:c7:ef:ee:63:e6:
                    47:e8:10:bc:e8:e1:f8:e8:ee:be:29:36:0e:45:19:
                    c3:5d:99:e6:ad:bb:dd:7e:77:26:35:dd:80:cc:14:
                    3f:71:75:ce:fc:c4:a7:d3:7f:22:56:a1:3f:7d:8b:
                    bf:a7:20:7e:8d:c7:31:6f:6b:04:0e:1e:2d:04:60:
                    bd:c7:ea:d6:15:bd:7a:23:87:57:82:59:a4:6e:c8:
                    b2:af:cf:be:30:80:e7:d9:d0:70:6c:82:f3:10:0e:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8D:DB:F4:EA:02:81:30:19:29:CF:4C:EA:13:E6:C3:2C:C6:15:D7
            X509v3 Authority Key Identifier:
                keyid:09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:85:5a:54:02:f1:8d:78:a0:ad:66:21:86:0b:72:b6:74:ec:
         56:1b:b9:c9:50:ad:f6:53:63:87:67:81:67:05:9d:ef:49:c9:
         c3:40:03:bf:e3:fc:b8:be:75:4c:2e:1b:f3:31:22:ce:d6:fb:
         75:a2:96:89:27:b9:08:7d:db:8e:f4:cd:15:63:26:73:57:b9:
         74:f9:de:60:a7:bd:4f:90:a1:e4:33:95:30:43:f4:87:dc:0d:
         a7:00:a4:c0:22:8a:22:4f:49:3c:19:d9:3e:b1:71:cc:e9:91:
         9f:64:52:bb:20:da:8d:16:f1:8c:07:e1:45:97:3d:a8:d7:66:
         ff:6f:88:ce:6a:a5:f8:1c:be:36:d5:68:9f:34:74:93:31:ab:
         42:ec:52:88:bf:42:b3:bf:65:03:c0:26:0f:bb:2e:bd:2b:5a:
         6f:3f:20:b7:cd:d8:3e:54:23:14:00:dd:f1:53:48:1b:31:cc:
         35:5d:46:b8:2a:ac:09:0d:d0:51:ce:20:78:eb:a1:fe:2b:8b:
         60:d2:1c:98:e3:8b:62:c9:44:1d:57:71:d1:bb:77:f3:7e:3e:
         8a:7b:b0:40:69:e6:cc:1d:1e:37:52:ba:f6:e7:91:02:e0:71:
         87:d7:77:bc:0d:24:03:eb:da:e7:02:4f:8e:39:02:30:76:ed:
         14:15:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:22 2024 by rpki-client on console-fra.rpki-client.org