Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa
File:                     3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa (raw, json)
Hash identifier:          xTDPQ+K0dm5oanJ1APudOG7OtBZqAwOABZGn/993EGk=
Subject key identifier:   BE:B6:D4:D2:58:31:98:D9:7F:C9:F7:8A:80:C5:85:D6:13:E3:93:F9
Certificate issuer:       /CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
Certificate serial:       74C25B87852CA07CB4F175A212DAAAC9E5C30099
Authority key identifier: 86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa
Signing time:             Fri 05 Apr 2024 01:04:59 +0000
ROA not before:           Fri 05 Apr 2024 00:59:59 +0000
ROA not after:            Fri 04 Apr 2025 01:04:59 +0000
asID:                     264411
IP address blocks:        131.221.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl
                          rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c2:5b:87:85:2c:a0:7c:b4:f1:75:a2:12:da:aa:c9:e5:c3:00:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B86B5CE986FADF5205AFD26561EEEC22B3A359
        Validity
            Not Before: Apr  5 00:59:59 2024 GMT
            Not After : Apr  4 01:04:59 2025 GMT
        Subject: CN=BEB6D4D2583198D97FC9F78A80C585D613E393F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:73:e1:d0:2d:b7:6a:ee:ef:23:69:2a:50:
                    f5:1e:84:55:64:b6:42:f3:78:d8:73:14:2f:79:98:
                    7f:ed:ba:e8:05:ea:73:48:a0:4f:14:34:e0:f4:93:
                    dd:97:af:86:d4:56:25:fc:36:c3:5c:7a:f8:74:97:
                    28:83:96:22:d7:cf:5d:0b:46:f3:26:a1:0f:45:b8:
                    90:13:00:68:be:8b:88:eb:d1:9a:c3:5c:e4:34:7a:
                    b2:83:58:8d:f9:70:28:ae:0a:8f:31:b6:44:4c:86:
                    b0:1b:f4:d6:d9:46:b6:f0:a0:9a:84:75:25:40:3d:
                    2e:b0:e4:99:d0:41:c4:6e:c7:ad:f1:4d:b8:e3:d9:
                    3f:f7:61:3c:e9:29:22:a7:92:d0:a2:8a:29:8d:21:
                    a0:61:1c:10:60:d8:47:35:7a:55:84:5c:30:6e:8a:
                    85:ae:b6:de:e4:22:7a:0a:76:68:94:a5:fd:a6:7c:
                    89:66:2a:15:54:46:62:b5:36:e5:40:8b:73:b8:c6:
                    2f:1f:fa:94:cc:ec:62:81:ec:c3:fd:a7:5a:3f:11:
                    6b:c5:eb:b8:99:fb:ae:5d:80:c3:09:61:c3:9d:66:
                    3c:23:1d:81:28:b9:6f:4d:a4:c9:e3:88:aa:cf:68:
                    86:41:33:69:06:b5:e4:6e:4e:9d:86:d3:d4:25:2c:
                    12:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B6:D4:D2:58:31:98:D9:7F:C9:F7:8A:80:C5:85:D6:13:E3:93:F9
            X509v3 Authority Key Identifier:
                keyid:86:B8:6B:5C:E9:86:FA:DF:52:05:AF:D2:65:61:EE:EC:22:B3:A3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B86B5CE986FADF5205AFD26561EEEC22B3A359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/1/3133312e3232312e3130302e302f32322d3234203d3e20323634343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:d2:d4:d8:d9:9e:2d:b6:a0:d3:68:33:06:f4:84:ab:18:bf:
         b2:94:5f:60:70:f6:8e:02:a4:02:26:65:ed:30:bc:c1:ce:e5:
         e1:18:13:f5:1d:db:95:e4:f4:48:2f:30:dc:76:56:f4:a1:ae:
         5c:8e:0d:f3:2f:78:9a:76:8a:73:68:ff:03:dd:47:cc:4d:c0:
         8f:f3:f7:4f:4c:5c:1e:72:65:b4:4f:24:e7:7f:fd:70:42:62:
         39:88:b3:5f:52:b8:62:e4:35:24:71:a2:99:bf:1f:19:89:d4:
         66:17:16:37:0d:c1:ea:26:f5:b8:03:9c:a9:69:ea:91:ce:b0:
         17:34:3a:9c:4d:e7:cd:d9:67:a1:0d:60:bf:5c:62:09:da:0c:
         61:3c:68:17:bc:db:ab:8d:76:44:1b:4b:e2:72:fb:0e:df:12:
         28:35:a8:80:a2:df:5b:04:71:99:e2:5e:0c:db:fb:63:46:d6:
         23:5e:f6:ff:33:1c:4b:dd:61:8c:0a:b6:19:94:53:71:93:c7:
         ea:39:85:f4:4f:a7:4a:37:dc:9b:77:c3:cc:06:f8:7d:0e:71:
         f5:92:4a:ac:bb:2b:7b:39:6b:5a:17:0f:7a:cf:a8:5b:75:04:
         81:f2:46:e7:4e:48:eb:27:19:cf:ca:de:f2:96:bf:06:89:c6:
         ba:f9:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:06 2024 by rpki-client on console-ams.rpki-client.org