Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/3133312e3235352e33362e302f32322d3234203d3e20323634343530.roa
File:                     3133312e3235352e33362e302f32322d3234203d3e20323634343530.roa (raw, json)
Hash identifier:          z4P57jX39pbKwnboYFQE447Rxz/iJ89/xo4tpx+Fza4=
Subject key identifier:   1D:2C:61:73:54:EE:4B:A9:B8:71:5D:B3:75:28:94:75:97:F6:83:05
Certificate issuer:       /CN=E48F797567B9CA8F99E372027B386B7DD7DBB414
Certificate serial:       7D963FC7BEF780235B2AA58D3C303A413527D280
Authority key identifier: E4:8F:79:75:67:B9:CA:8F:99:E3:72:02:7B:38:6B:7D:D7:DB:B4:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/3133312e3235352e33362e302f32322d3234203d3e20323634343530.roa
Signing time:             Thu 04 Apr 2024 07:36:01 +0000
ROA not before:           Thu 04 Apr 2024 07:31:01 +0000
ROA not after:            Thu 03 Apr 2025 07:36:01 +0000
asID:                     264450
IP address blocks:        131.255.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.crl
                          rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:96:3f:c7:be:f7:80:23:5b:2a:a5:8d:3c:30:3a:41:35:27:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48F797567B9CA8F99E372027B386B7DD7DBB414
        Validity
            Not Before: Apr  4 07:31:01 2024 GMT
            Not After : Apr  3 07:36:01 2025 GMT
        Subject: CN=1D2C617354EE4BA9B8715DB37528947597F68305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:a6:56:ab:8e:9d:97:3e:f2:a8:fc:5e:86:
                    d8:07:f4:44:a9:f0:6a:2c:95:6c:79:8e:0a:f6:79:
                    2c:bc:8b:e8:3f:38:08:91:a8:5e:d6:b4:76:3d:f7:
                    7f:29:51:f7:32:df:ed:12:9d:25:54:0a:ff:7a:45:
                    d5:ef:9c:bb:07:cb:04:98:c9:76:ea:64:57:2f:27:
                    4f:28:18:53:63:97:56:08:2c:88:db:38:3e:88:78:
                    99:d4:76:67:6a:03:52:2e:ea:43:52:5e:e8:67:78:
                    2a:ce:8c:41:cc:8c:a9:39:1a:4b:59:d9:b6:8f:51:
                    c9:d7:2c:28:54:00:5e:24:b9:8c:02:05:43:eb:a7:
                    2a:08:e7:9c:d6:56:d7:c9:26:00:dd:2e:f9:f5:08:
                    84:26:6c:34:56:83:9c:b8:b8:8a:1a:56:69:d0:fe:
                    42:68:80:e1:be:3b:fd:17:87:28:13:06:34:ae:e2:
                    37:4d:a1:d3:57:3f:27:75:41:14:2c:45:a1:8c:54:
                    ad:77:e9:ba:09:4d:97:f5:80:be:3c:3d:53:f1:ff:
                    b5:62:14:ca:fa:1d:7c:d1:7a:bb:10:a3:e1:81:ff:
                    d7:92:4b:ab:83:84:5d:2f:68:d8:3c:f6:7a:e9:66:
                    0e:b8:87:46:eb:c9:80:fe:bd:e2:c4:e7:a0:d7:ae:
                    bb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2C:61:73:54:EE:4B:A9:B8:71:5D:B3:75:28:94:75:97:F6:83:05
            X509v3 Authority Key Identifier:
                keyid:E4:8F:79:75:67:B9:CA:8F:99:E3:72:02:7B:38:6B:7D:D7:DB:B4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/3133312e3235352e33362e302f32322d3234203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:37:73:85:89:91:d7:1a:53:7a:68:04:6b:ef:89:41:75:e9:
         3b:48:c7:bc:1e:00:e0:2a:2c:5f:e8:3f:eb:a5:e5:33:2f:98:
         3f:d1:f8:70:69:4f:2e:08:64:1c:3e:e4:a6:5a:20:72:96:2d:
         ce:f5:30:5e:35:d0:4c:69:1b:58:42:79:18:8d:8a:81:11:cd:
         98:69:e7:ea:cb:12:a0:85:a4:82:1a:f8:a6:34:0a:79:12:c1:
         80:5e:e8:cd:f3:8b:ef:98:2f:ab:1d:d1:cb:96:e5:25:f5:a9:
         bc:c7:ad:7b:09:2a:d6:f0:c1:f9:9c:b2:88:a8:b7:10:a5:fe:
         f1:71:29:f0:47:bf:09:97:0e:13:8e:02:b2:a1:d5:2e:90:d4:
         3e:47:87:5a:df:6c:84:22:06:96:27:19:7f:73:e8:5d:39:81:
         72:14:25:b6:fc:ad:80:d6:de:07:a1:a9:c0:e4:5d:2f:a9:d6:
         5d:80:79:bc:80:ad:28:c2:b1:66:29:aa:21:6a:4b:1d:75:61:
         81:81:ea:f1:e1:95:e7:6d:51:79:33:f9:cc:6e:44:86:d4:07:
         50:2f:f0:ea:2d:40:4f:41:e2:10:0d:94:0a:e4:1a:e1:31:8d:
         19:db:85:20:67:ee:81:04:4a:27:fc:ff:60:5b:07:cd:1f:00:
         cd:29:a2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:37 2024 by rpki-client on console-fra.rpki-client.org