Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          seOGyLATlHrQsliJ46PQyTU8NT1xwefIVrm0GXiu1tg=
Subject key identifier:   77:35:F6:1C:9C:F8:F0:63:E3:45:19:74:B4:77:88:AF:6B:66:65:B3
Certificate issuer:       /CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
Certificate serial:       1AB8CC64BE75CF3EF3204260CB4AE21A1867C603
Authority key identifier: 09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa
Signing time:             Wed 13 Nov 2024 02:54:27 +0000
ROA not before:           Wed 13 Nov 2024 02:49:27 +0000
ROA not after:            Wed 12 Nov 2025 02:54:27 +0000
asID:                     265919
IP address blocks:        131.196.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b8:cc:64:be:75:cf:3e:f3:20:42:60:cb:4a:e2:1a:18:67:c6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
        Validity
            Not Before: Nov 13 02:49:27 2024 GMT
            Not After : Nov 12 02:54:27 2025 GMT
        Subject: CN=7735F61C9CF8F063E3451974B47788AF6B6665B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:16:22:f3:47:03:c2:ab:46:14:15:1b:37:
                    bd:ba:9a:53:7f:56:56:7c:79:b3:c3:d4:3b:dc:34:
                    75:91:4f:fe:0f:ed:4f:24:e2:10:f7:60:d5:8c:28:
                    9b:2f:b7:23:e4:94:e2:4f:23:52:6d:e2:ae:a0:33:
                    04:46:d2:34:3e:23:90:d5:82:c6:49:6c:dc:3c:4a:
                    a4:70:82:ba:97:26:c6:e1:80:fa:20:b0:d3:1b:71:
                    06:17:9f:a1:f2:bf:10:fa:88:b4:ed:51:44:37:15:
                    6e:d5:de:8a:77:8d:91:8e:fd:f0:fb:7f:b4:45:17:
                    7a:73:e0:c7:3c:26:9d:57:87:3a:71:7f:ea:de:1a:
                    dd:78:3d:3f:9f:f9:10:f4:82:f4:a2:6e:b1:00:3a:
                    01:0f:fb:eb:e9:37:2d:23:da:b4:0a:e0:a2:4a:8e:
                    9c:7a:76:bb:57:d4:0f:94:fe:d5:54:5f:44:cc:2d:
                    d2:33:50:04:f9:f1:cf:58:93:d5:a0:a2:a8:97:7e:
                    2c:d0:ba:91:5b:35:aa:12:0d:8f:39:20:46:82:ed:
                    97:e5:53:cb:24:e2:d9:7e:f8:81:ec:30:bd:59:66:
                    11:ef:eb:11:e0:2a:4d:4a:4b:f4:79:1b:b3:8c:86:
                    37:bc:8d:44:9d:89:2a:f9:6e:7f:8c:5e:ea:86:f9:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:35:F6:1C:9C:F8:F0:63:E3:45:19:74:B4:77:88:AF:6B:66:65:B3
            X509v3 Authority Key Identifier:
                keyid:09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139392e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:2f:fd:f4:6a:c4:c9:8e:69:09:39:a6:fd:51:62:36:89:c8:
         30:64:16:e5:57:43:53:9a:c2:6f:c3:18:82:1b:79:fc:de:29:
         f7:66:ca:f2:33:fc:83:ac:8e:a0:69:7e:fb:1b:6c:03:4b:a6:
         4c:85:b2:5e:1b:57:de:d5:1e:e7:14:05:be:08:9b:fa:3b:33:
         b7:0f:f6:ca:23:17:70:12:08:a1:77:ba:71:b2:c8:25:48:1a:
         d3:68:b1:44:0b:30:12:f0:da:09:09:73:41:36:8a:fa:cf:97:
         35:75:bd:01:f1:7f:ca:2c:47:90:c9:6d:94:71:49:cb:b8:d9:
         36:f7:4d:2c:1c:df:b7:59:4c:63:d7:9f:60:f0:b0:91:9e:b4:
         68:67:d3:97:8a:ec:36:4d:84:f0:07:fb:9a:9e:cf:62:13:a8:
         1a:24:fa:2f:0f:e5:2e:5b:8a:8f:53:cc:2e:b4:c2:d0:7b:ea:
         9a:7a:e2:9f:58:2a:77:ea:0f:57:7f:df:b3:ff:ba:76:16:3c:
         b1:35:c5:e8:6c:da:e8:f3:ce:3a:74:30:3a:fc:4c:0b:a7:9e:
         b1:9c:91:2e:a1:41:df:de:ed:b2:15:b5:f5:cc:58:a8:7e:01:
         f9:e7:5a:74:28:76:52:fc:58:67:65:e1:27:8f:84:e9:ac:78:
         e2:6b:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:40 2024 by rpki-client on console-fra.rpki-client.org