Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa
File:                     3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa (raw, json)
Hash identifier:          Lok8gRkNA5w7kR9ExWVkNKiB7XOvaM4MkHpIaJ8QXh0=
Subject key identifier:   8C:12:D0:A5:5F:E5:08:9F:7E:1C:A4:07:A2:13:44:9D:FD:AE:15:92
Certificate issuer:       /CN=16F623F7E404FC45279199F873CB67B24D28DD2E
Certificate serial:       6803F178050426690DDE85539F4D0644753A0307
Authority key identifier: 16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa
Signing time:             Thu 11 Jul 2024 17:24:34 +0000
ROA not before:           Thu 11 Jul 2024 17:19:34 +0000
ROA not after:            Thu 10 Jul 2025 17:24:34 +0000
asID:                     271253
IP address blocks:        131.255.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:03:f1:78:05:04:26:69:0d:de:85:53:9f:4d:06:44:75:3a:03:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F623F7E404FC45279199F873CB67B24D28DD2E
        Validity
            Not Before: Jul 11 17:19:34 2024 GMT
            Not After : Jul 10 17:24:34 2025 GMT
        Subject: CN=8C12D0A55FE5089F7E1CA407A213449DFDAE1592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:19:b1:2b:83:67:08:06:f2:b7:f0:3c:87:
                    ec:69:63:4e:23:5f:41:fd:d1:bc:a8:a3:6a:a7:34:
                    47:ed:2c:23:5a:75:52:22:5b:5d:ac:23:ff:d7:4a:
                    10:30:3c:51:82:5a:0b:a0:d8:3d:8d:40:22:70:59:
                    a4:6f:b6:5a:fd:ff:aa:e1:26:be:87:53:1a:5f:2f:
                    6f:c5:1e:79:1d:c6:6a:37:62:d5:ed:f3:56:13:6c:
                    e4:28:2e:79:ae:0e:6e:e6:a9:a2:38:a4:84:f7:db:
                    10:8d:f5:f9:d5:36:6e:92:33:4d:2f:b5:a5:8b:18:
                    20:d0:ba:65:65:08:9b:32:8f:4d:36:66:b9:7a:eb:
                    cf:79:a9:25:2d:b9:f6:91:e1:83:ff:f5:ce:53:b1:
                    ea:03:8b:ca:f2:a2:9a:51:ae:8d:43:cd:d0:56:b1:
                    95:0c:d0:bc:8d:6e:16:48:c1:fc:32:8e:68:de:53:
                    10:48:b8:b9:4c:7a:b2:16:d5:b6:36:aa:51:af:88:
                    d7:55:06:e8:97:56:03:65:c6:c3:bb:62:f3:79:9f:
                    91:96:99:f2:2c:28:d0:5c:10:a9:91:bf:ce:67:73:
                    b7:2e:b9:0f:7b:f4:b0:c6:2b:fa:fa:8e:23:08:1c:
                    be:e3:3b:85:92:91:36:4c:d4:3b:ed:28:e0:17:1b:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:12:D0:A5:5F:E5:08:9F:7E:1C:A4:07:A2:13:44:9D:FD:AE:15:92
            X509v3 Authority Key Identifier:
                keyid:16:F6:23:F7:E4:04:FC:45:27:91:99:F8:73:CB:67:B2:4D:28:DD:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/16F623F7E404FC45279199F873CB67B24D28DD2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F623F7E404FC45279199F873CB67B24D28DD2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/0/3133312e3235352e35362e302f32322d3234203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:66:88:30:84:b2:f8:a8:c2:9b:2e:23:ab:74:54:8d:1b:4e:
         f3:bf:b4:a8:5e:24:9a:5d:24:92:45:9a:8c:ce:50:04:8b:6d:
         3c:43:21:b1:96:7f:37:ba:7d:ec:33:f3:06:96:09:7c:39:eb:
         58:49:88:9d:30:1e:eb:e4:b2:4a:5d:2e:44:8d:1d:12:74:d3:
         3d:31:ad:59:e8:99:86:5b:59:d3:dd:4f:05:69:85:a3:30:82:
         5d:e4:91:a7:9a:bc:86:e4:9e:93:bf:90:f5:ae:ca:7a:62:0d:
         c5:21:63:d6:26:35:d7:03:16:7e:59:a6:94:27:95:47:51:6f:
         fe:64:f8:00:21:8f:1e:de:be:2c:ef:d2:14:61:88:54:52:61:
         f7:c6:6d:5f:47:b0:29:19:0c:54:18:80:bd:66:ef:b8:db:ce:
         c7:c1:6d:8a:20:95:84:6c:79:4f:ff:cc:16:a3:c7:24:b6:56:
         81:3b:06:50:b0:74:46:b1:0b:5a:a6:7e:e4:7d:9a:99:10:f2:
         f9:6c:cf:42:8b:a2:37:5f:83:1e:39:63:08:2d:da:d1:3e:b3:
         72:29:96:b3:da:29:5b:89:ec:6d:b6:af:a5:6f:0f:23:20:6d:
         e2:3f:52:64:6b:78:fc:86:b5:09:7d:d8:8b:30:1f:e7:33:e9:
         66:02:20:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org