Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa
File:                     3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa (raw, json)
Hash identifier:          4W61daHmUk6qrYiSPZnnhTeP5sbZ8BToxR2evNktj+s=
Subject key identifier:   09:54:E7:1C:CF:73:0D:A0:E5:67:38:9B:E2:77:05:63:F6:2B:F3:D8
Certificate issuer:       /CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F
Certificate serial:       6DCC8BAAF43B22FAB0EFFD5E24D18603DF040DF1
Authority key identifier: 28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa
Signing time:             Wed 03 Apr 2024 20:28:53 +0000
ROA not before:           Wed 03 Apr 2024 20:23:53 +0000
ROA not after:            Wed 02 Apr 2025 20:28:53 +0000
asID:                     61638
IP address blocks:        131.100.136.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl
                          rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cc:8b:aa:f4:3b:22:fa:b0:ef:fd:5e:24:d1:86:03:df:04:0d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28BD0171C54D34121D1DBDC77B512CBC25BED64F
        Validity
            Not Before: Apr  3 20:23:53 2024 GMT
            Not After : Apr  2 20:28:53 2025 GMT
        Subject: CN=0954E71CCF730DA0E567389BE2770563F62BF3D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:a9:76:91:29:74:2a:5f:19:67:38:61:fd:
                    98:5d:9b:15:48:6e:3a:97:56:ef:5f:7e:71:e7:2a:
                    83:21:f8:40:62:5d:80:44:fd:2d:9f:30:d2:b4:d8:
                    c0:20:2f:d6:1e:b1:e7:a0:36:60:e0:0c:9b:40:f7:
                    e4:38:61:60:1f:88:17:0b:05:c9:73:f6:44:6e:4b:
                    33:f3:d6:ff:f5:52:99:42:72:85:c5:f9:ee:39:17:
                    5f:54:8f:da:4c:a0:45:81:57:c2:a0:d8:71:8d:12:
                    4d:09:bc:4f:16:2c:83:8d:ec:d0:9c:b1:a9:ca:a0:
                    d4:c7:ed:fc:fe:06:04:c7:9c:94:1b:76:bc:3f:0c:
                    68:1a:e5:a5:06:70:29:e4:36:4e:f7:d6:60:53:76:
                    48:49:a3:a0:08:c0:4c:ca:40:e6:98:13:8e:4a:da:
                    eb:61:e2:31:cb:6e:7d:f0:5f:8b:6e:9e:75:27:ad:
                    04:64:88:69:79:3a:95:9c:66:f7:cb:9f:c3:a3:71:
                    1a:7f:51:51:1b:11:6c:16:b3:74:1b:ae:12:9d:f5:
                    5f:29:1c:2e:9a:fc:f0:bf:14:77:e8:db:8f:52:91:
                    1d:e7:d8:cd:50:64:a0:c8:90:de:80:c8:a3:29:92:
                    97:3f:59:87:9d:68:9f:45:f4:0c:5a:d9:91:d5:bc:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:54:E7:1C:CF:73:0D:A0:E5:67:38:9B:E2:77:05:63:F6:2B:F3:D8
            X509v3 Authority Key Identifier:
                keyid:28:BD:01:71:C5:4D:34:12:1D:1D:BD:C7:7B:51:2C:BC:25:BE:D6:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28BD0171C54D34121D1DBDC77B512CBC25BED64F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVt42ktqv2gnJ8LamcyfyGihosiogj9nmwUnSd3SH522/1/3133312e3130302e3133362e302f32322d3332203d3e203631363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:64:3c:f4:8d:2b:df:04:ae:db:70:2f:22:1f:45:2d:67:fe:
         e6:46:a5:1f:d4:5e:b4:4a:78:43:a5:15:76:c4:27:98:15:0e:
         7b:52:30:ad:24:2a:bb:d4:5c:82:33:52:91:3f:06:31:60:8b:
         7f:00:ec:85:97:9f:0b:a3:1c:36:99:62:e7:8a:c3:db:11:2c:
         6f:d5:31:36:dc:41:0c:0d:31:d0:43:5c:08:fc:ec:96:20:6e:
         c2:23:7e:90:ea:e3:3a:9f:e7:17:e1:ee:34:09:22:aa:e3:fc:
         16:78:78:e8:25:cd:e6:2b:a2:18:54:76:a4:6c:b7:49:41:49:
         72:11:a3:ad:cb:de:68:01:37:46:cb:5a:ed:66:4d:49:4a:cc:
         f9:22:e2:63:79:ff:08:09:f4:b7:51:4d:26:4c:1c:90:c1:89:
         79:f0:ea:a4:b8:91:8e:b4:93:cc:e8:fc:f6:89:45:11:87:24:
         b1:f1:28:4a:55:43:5d:d7:a5:42:5e:5f:60:8c:2c:68:d6:9d:
         00:7b:b3:5a:61:81:c0:74:68:f9:c6:51:20:37:61:16:1c:77:
         c2:85:90:16:5f:55:b3:e7:9f:a7:6f:20:51:39:a9:a2:5b:be:
         9f:91:27:18:b4:a2:36:f0:4b:22:12:f8:91:bc:6b:3e:3a:aa:
         e3:7a:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:09 2024 by rpki-client on console-fra.rpki-client.org