Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa
File:                     3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa (raw, json)
Hash identifier:          3Nz+r14yzYytHWlU0YiLf+7iBrJLK18rpHltv7wqq2c=
Subject key identifier:   F3:6F:55:25:4D:D4:C4:7D:63:28:0C:DB:10:59:BC:E8:0B:57:B5:87
Certificate issuer:       /CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
Certificate serial:       2D95E8134107A9EC512C2F2CFE2D10475A1AA9AB
Authority key identifier: 17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa
Signing time:             Thu 04 Apr 2024 08:14:55 +0000
ROA not before:           Thu 04 Apr 2024 08:09:55 +0000
ROA not after:            Thu 03 Apr 2025 08:14:55 +0000
asID:                     267357
IP address blocks:        131.196.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl
                          rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:95:e8:13:41:07:a9:ec:51:2c:2f:2c:fe:2d:10:47:5a:1a:a9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ED80E395F8EFDA83018AB531CF36E32B3374B4
        Validity
            Not Before: Apr  4 08:09:55 2024 GMT
            Not After : Apr  3 08:14:55 2025 GMT
        Subject: CN=F36F55254DD4C47D63280CDB1059BCE80B57B587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:27:08:28:19:6d:77:e9:b6:ed:02:ea:8b:c7:
                    7b:17:19:1c:f9:6e:5a:c6:e5:58:e9:0f:16:2f:43:
                    33:63:be:e6:2d:c3:84:e7:6e:8e:ff:15:5a:ee:67:
                    3a:d7:d3:3e:de:0a:fb:40:f6:52:f1:bd:f2:35:d2:
                    8d:64:e5:ec:5c:a8:c7:f9:31:f2:b7:c3:c8:d9:0a:
                    3d:9f:06:db:6f:6c:fa:e1:a5:28:b0:ef:62:9e:9c:
                    10:75:7d:48:bb:ab:26:2c:23:24:29:35:3d:ae:4e:
                    55:76:45:c5:75:66:07:b6:dc:8e:f7:b0:96:d8:69:
                    81:09:7d:dd:99:6a:2d:85:2e:08:db:2c:ae:ef:2c:
                    70:cf:58:30:82:dc:80:68:f2:54:ea:36:0e:63:7d:
                    b0:92:81:7c:32:b2:aa:01:43:79:c1:34:f7:22:9e:
                    c4:03:e0:4f:5f:aa:0a:86:0e:21:6f:02:7f:b2:29:
                    80:52:5c:93:1e:89:de:f5:2b:2a:72:8f:b1:40:93:
                    93:45:86:0a:53:6c:a3:d2:43:86:33:f7:4a:41:10:
                    18:d3:06:f2:b6:9b:35:0b:26:ba:81:d0:dc:3a:e0:
                    53:ef:37:a7:99:5e:87:e6:a7:8b:f6:dc:14:83:8f:
                    b6:93:83:22:e4:44:f7:ba:52:8e:39:d7:3e:2d:93:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6F:55:25:4D:D4:C4:7D:63:28:0C:DB:10:59:BC:E8:0B:57:B5:87
            X509v3 Authority Key Identifier:
                keyid:17:ED:80:E3:95:F8:EF:DA:83:01:8A:B5:31:CF:36:E3:2B:33:74:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17ED80E395F8EFDA83018AB531CF36E32B3374B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6JRurryBTzUKgi5UbUNJPMPkJmrKuN2qHPKUikZ389U/1/3133312e3139362e35362e302f32322d3234203d3e20323637333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:06:55:8b:41:f1:3d:cc:f2:bf:05:3b:fa:64:c7:d2:8c:a2:
         19:92:f5:6b:70:1f:13:1c:d4:1f:ba:1f:9f:b6:84:24:ef:60:
         ed:a9:7e:72:d3:a1:8d:10:a9:f7:3d:af:7f:08:ed:43:2d:a1:
         0b:cc:75:19:8a:12:cd:33:57:74:10:20:75:93:be:06:bc:c1:
         e0:69:9b:bf:bf:ac:7a:c2:bb:64:31:88:18:6c:45:96:37:80:
         df:f1:37:9d:e6:c9:1f:d5:c8:97:31:6a:7a:b2:22:47:5f:24:
         1e:fb:71:e2:c1:b8:fd:5f:d2:7d:99:81:2d:a0:1b:e1:dd:8e:
         1f:08:03:30:4e:1b:7c:86:cf:92:49:1d:18:20:44:15:30:7a:
         68:61:69:70:82:b3:92:7f:93:55:ad:cc:cf:ba:81:34:62:44:
         1e:91:c0:7b:f0:18:aa:00:9d:04:85:de:c5:92:0d:81:35:de:
         da:33:f2:e6:0c:2e:2e:b2:b5:c9:f6:c0:c0:c6:4d:4e:24:d5:
         d1:26:54:80:f3:ab:78:24:3f:58:88:85:d2:cb:d5:44:e7:e5:
         74:18:80:e6:8b:4b:ce:bf:fe:60:80:a5:9d:df:49:62:9b:aa:
         ac:cc:ec:3d:c1:8d:09:73:e6:6c:fc:d2:e8:8f:ca:f1:b4:c4:
         df:95:1e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:57 2024 by rpki-client on console-fra.rpki-client.org