Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133312e3232312e3234342e302f32322d3234203d3e20323634343430.roa
File:                     3133312e3232312e3234342e302f32322d3234203d3e20323634343430.roa (raw, json)
Hash identifier:          K1fNjOe3JNRQ7zm4dYVNLdS4Xvz8mIvhni8eAL4AFys=
Subject key identifier:   49:F1:0A:21:74:97:5F:86:CF:28:0D:AC:08:A8:E7:82:5D:17:B8:70
Certificate issuer:       /CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
Certificate serial:       7EDE19E0D86EFEC043035C38046FE5CDD45BD0C2
Authority key identifier: E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133312e3232312e3234342e302f32322d3234203d3e20323634343430.roa
Signing time:             Wed 03 Apr 2024 18:30:20 +0000
ROA not before:           Wed 03 Apr 2024 18:25:20 +0000
ROA not after:            Wed 02 Apr 2025 18:30:20 +0000
asID:                     264440
IP address blocks:        131.221.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl
                          rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:de:19:e0:d8:6e:fe:c0:43:03:5c:38:04:6f:e5:cd:d4:5b:d0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9
        Validity
            Not Before: Apr  3 18:25:20 2024 GMT
            Not After : Apr  2 18:30:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2b:48:d2:46:f3:14:5e:79:5b:a1:fb:7b:c9:
                    23:d8:36:72:32:d1:d7:4e:f4:69:8d:5e:4c:13:da:
                    2b:c4:c0:17:4e:c8:9a:b7:f0:96:42:2b:56:66:73:
                    2d:5b:7a:5c:65:f7:ca:9d:e4:2c:33:87:46:57:3f:
                    0e:75:b6:6c:93:77:1e:50:07:ad:f5:a0:d7:2b:76:
                    49:51:47:3a:cd:5b:e2:7c:a4:67:18:d4:9b:d7:2d:
                    5d:7c:78:59:67:26:23:20:be:2b:8b:78:18:9d:e0:
                    e2:6c:db:bc:75:aa:a0:8a:92:a8:d8:50:5c:60:8d:
                    98:e7:d0:9c:6b:e1:70:d6:7a:bf:7b:73:50:cd:e7:
                    c5:b3:5c:51:36:33:fc:20:4c:e6:97:4f:c7:3f:5c:
                    af:eb:44:22:97:dd:74:6b:fd:13:b0:a7:c7:b2:4a:
                    e6:42:b3:14:8f:c5:9f:e9:e9:86:0b:d8:10:ee:30:
                    1c:9d:cd:c4:90:ed:0f:87:23:96:e6:89:a2:54:05:
                    53:3d:e7:80:c0:fd:b0:51:67:43:76:1a:0b:53:7a:
                    31:19:7e:7e:b6:fb:44:e5:02:f4:b8:2e:c4:e1:f4:
                    06:f3:87:7c:8d:b3:5d:46:5a:84:c6:28:fd:e4:31:
                    e2:4b:59:d6:a1:a2:d8:38:90:6b:47:f7:77:92:96:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:0A:21:74:97:5F:86:CF:28:0D:AC:08:A8:E7:82:5D:17:B8:70
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CB:B2:81:E5:5D:A4:61:F6:EB:9D:AF:25:A7:E9:16:2A:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D9CBB281E55DA461F6EB9DAF25A7E9162AD2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/1/3133312e3232312e3234342e302f32322d3234203d3e20323634343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:ca:57:f8:c7:42:bc:b6:2b:d1:dd:f3:23:f8:7d:f0:42:08:
         7f:a7:2f:b6:72:52:57:f7:c0:7a:b2:eb:a9:ce:45:90:ea:c7:
         4d:4a:18:16:ed:24:77:ee:b9:83:c6:e7:98:f5:c3:2e:31:f6:
         cd:a1:2a:a8:ab:1a:ca:36:8d:18:7c:4b:14:2f:fc:d4:4a:26:
         2d:ec:4c:c1:e9:c0:b2:c8:ed:cd:bd:1c:8c:a3:f5:7b:e1:ba:
         f3:d8:a6:6e:41:54:96:1c:4f:4d:13:08:60:72:b0:b1:2c:3c:
         ff:bd:01:dd:18:37:20:44:62:be:c3:d5:d0:8a:1f:37:f8:30:
         be:39:ea:5e:72:4b:e7:eb:26:8d:09:86:e1:6f:d4:86:2c:e1:
         c1:13:5b:55:ad:b8:5d:56:95:de:40:d6:55:5d:86:02:3d:f1:
         98:65:43:e4:0e:83:c3:b2:dc:fa:fe:8d:71:ce:eb:7c:d0:34:
         16:db:55:75:80:e3:be:cc:c0:17:9f:9e:fc:7f:3c:a5:bf:99:
         2d:25:d4:dd:08:7f:d8:ed:03:27:15:3d:66:8c:ad:4f:aa:5c:
         8e:f0:a5:2a:b2:ce:62:c4:99:c5:d4:66:22:88:ef:10:99:56:
         c4:f5:ef:97:f0:90:b8:c3:39:e3:74:a2:9f:b5:3c:4e:db:3e:
         a5:2c:9d:13
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUft4Z4Nhu/sBDA1w4BG/lzdRb0MIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdEOUNCQjI4MUU1NURBNDYxRjZFQjlEQUYyNUE3RTkx
NjJBRDJFOTAeFw0yNDA0MDMxODI1MjBaFw0yNTA0MDIxODMwMjBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjcyQjQ4RDI0NkYzMTQ1RTc5
NUJBMUZCN0JDOTIzRDgzNjcyMzJEMUQ3NEVGNDY5OEQ1RTRDMTNEQTJCQzRDMDE3
NEVDODlBQjdGMDk2NDIyQjU2NjY3MzJENUI3QTVDNjVGN0NBOURFNDJDMzM4NzQ2
NTczRjBFNzVCNjZDOTM3NzFFNTAwN0FERjVBMEQ3MkI3NjQ5NTE0NzNBQ0Q1QkUy
N0NBNDY3MThENDlCRDcyRDVEN0M3ODU5NjcyNjIzMjBCRTJCOEI3ODE4OURFMEUy
NkNEQkJDNzVBQUEwOEE5MkE4RDg1MDVDNjA4RDk4RTdEMDlDNkJFMTcwRDY3QUJG
N0I3MzUwQ0RFN0M1QjM1QzUxMzYzM0ZDMjA0Q0U2OTc0RkM3M0Y1Q0FGRUI0NDIy
OTdERDc0NkJGRDEzQjBBN0M3QjI0QUU2NDJCMzE0OEZDNTlGRTlFOTg2MEJEODEw
RUUzMDFDOURDREM0OTBFRDBGODcyMzk2RTY4OUEyNTQwNTUzM0RFNzgwQzBGREIw
NTE2NzQzNzYxQTBCNTM3QTMxMTk3RTdFQjZGQjQ0RTUwMkY0QjgyRUM0RTFGNDA2
RjM4NzdDOERCMzVENDY1QTg0QzYyOEZERTQzMUUyNEI1OUQ2QTFBMkQ4Mzg5MDZC
NDdGNzc3OTI5NjhFQzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtytI0kbzFF55W6H7e8kj2DZyMtHXTvRpjV5ME9orxMAXTsiat/CW
QitWZnMtW3pcZffKneQsM4dGVz8OdbZsk3ceUAet9aDXK3ZJUUc6zVvifKRnGNSb
1y1dfHhZZyYjIL4ri3gYneDibNu8daqgipKo2FBcYI2Y59Cca+Fw1nq/e3NQzefF
s1xRNjP8IEzml0/HP1yv60Qil910a/0TsKfHskrmQrMUj8Wf6emGC9gQ7jAcnc3E
kO0PhyOW5omiVAVTPeeAwP2wUWdDdhoLU3oxGX5+tvtE5QL0uC7E4fQG84d8jbNd
RlqExij95DHiS1nWoaLYOJBrR/d3kpaOwwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FEnxCiF0l1+GzygNrAio54JdF7hwMB8GA1UdIwQYMBaAFOfZy7KB5V2kYfbrna8l
p+kWKtLpMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0UzUHdrVzlTZUJzcXBl
UndjZm9Wa2VweG9iYzNNblBEN0xEajNjZTEyWFBaLzEvRTdEOUNCQjI4MUU1NURB
NDYxRjZFQjlEQUYyNUE3RTkxNjJBRDJFOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FN0Q5Q0JCMjgxRTU1REE0NjFGNkVCOURBRjI1QTdFOTE2MkFE
MkU5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FM1B3a1c5U2VCc3FwZVJ3Y2Zv
VmtlcHhvYmMzTW5QRDdMRGozY2UxMlhQWi8xLzMxMzMzMTJlMzIzMjMxMmUzMjM0
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNDM0MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKD3fQwDQYJKoZIhvcNAQELBQADggEBAAzKV/jHQry2K9Hd8yP4ffBCCH+nL7Zy
Ulf3wHqy66nORZDqx01KGBbtJHfuuYPG55j1wy4x9s2hKqirGso2jRh8SxQv/NRK
Ji3sTMHpwLLI7c29HIyj9XvhuvPYpm5BVJYcT00TCGBysLEsPP+9Ad0YNyBEYr7D
1dCKHzf4ML456l5yS+frJo0JhuFv1IYs4cETW1WtuF1Wld5A1lVdhgI98ZhlQ+QO
g8Oy3Pr+jXHO63zQNBbbVXWA477MwBefnvx/PKW/mS0l1N0If9jtAycVPWaMrU+q
XI7wpSqyzmLEmcXUZiKI7xCZVsT175fwkLjDOeN0op+1PE7bPqUsnRM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:17 2024 by rpki-client on console-ams.rpki-client.org