Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa
File:                     3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa (raw, json)
Hash identifier:          Ks+uX7M2LebScXe6KuW2C6wFn0RBjKFboIUrRSWyRPU=
Subject key identifier:   80:70:B0:8A:2D:7D:6B:08:8F:31:A4:22:45:05:8B:07:8C:57:C4:6B
Certificate issuer:       /CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
Certificate serial:       17382461D5B7C0B7593E1C143D3889E7023B54C5
Authority key identifier: 05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa
Signing time:             Thu 09 May 2024 13:43:51 +0000
ROA not before:           Thu 09 May 2024 13:38:51 +0000
ROA not after:            Thu 08 May 2025 13:43:51 +0000
asID:                     53196
IP address blocks:        131.100.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl
                          rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:38:24:61:d5:b7:c0:b7:59:3e:1c:14:3d:38:89:e7:02:3b:54:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
        Validity
            Not Before: May  9 13:38:51 2024 GMT
            Not After : May  8 13:43:51 2025 GMT
        Subject: CN=8070B08A2D7D6B088F31A42245058B078C57C46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:dc:60:a7:01:17:74:fc:76:6e:6c:38:cf:
                    94:99:ad:55:9b:f4:c2:9d:a7:06:0f:8f:ed:02:f7:
                    69:c0:fb:fc:3d:57:01:a1:e3:30:fe:25:04:86:b2:
                    fb:7b:59:76:7c:a6:44:bf:d3:d7:92:6c:c3:f2:c7:
                    5a:f1:7c:58:7b:b9:57:a6:3a:5e:79:12:a0:eb:2d:
                    f2:6e:bd:3a:58:02:22:f3:03:14:2f:9d:01:ee:18:
                    57:14:08:12:b0:de:fd:bf:ca:59:7f:1f:d5:cf:24:
                    1d:c0:40:61:26:f6:81:b8:83:ea:aa:45:81:1a:01:
                    88:bc:f3:87:ba:f1:bc:b8:24:34:9a:34:7a:bb:17:
                    21:f6:24:88:f2:a4:2b:80:b4:af:ac:79:34:d6:a1:
                    68:d3:f2:02:cc:52:49:66:e3:7d:bb:c3:81:04:93:
                    59:03:69:4c:3a:d8:f2:fe:19:27:7f:a4:d1:62:1d:
                    ea:c6:46:5d:98:8e:9c:28:70:4c:99:f3:60:bd:da:
                    64:0c:75:f6:95:66:38:f4:33:05:43:0a:72:4f:2c:
                    32:60:57:ce:a5:0b:48:2c:9e:92:55:23:c6:58:bd:
                    0e:94:37:68:15:4c:96:ac:fb:1e:57:2a:7e:31:e6:
                    a5:d5:25:bd:b5:48:fe:ea:e6:e6:a6:ef:1b:96:e0:
                    b3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:70:B0:8A:2D:7D:6B:08:8F:31:A4:22:45:05:8B:07:8C:57:C4:6B
            X509v3 Authority Key Identifier:
                keyid:05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3133312e3130302e3139362e302f32322d3234203d3e203533313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:3f:69:ca:2a:61:dd:af:15:50:67:09:32:87:03:7c:df:5a:
         37:cd:32:46:14:b7:54:d8:38:fa:49:a0:8a:7e:b6:df:5a:7f:
         fc:d5:fb:66:87:ea:65:17:85:3b:61:b4:81:19:d5:09:30:1f:
         13:61:18:d8:5b:27:94:18:b2:0e:fe:17:43:6e:e1:fc:c0:42:
         7d:c1:c2:f7:58:78:6f:28:dd:0a:c0:b5:95:ca:2b:bc:d3:ee:
         ea:b8:43:5a:14:6b:bf:07:59:87:06:e6:73:f4:27:f1:0e:cd:
         50:02:bc:85:f5:20:61:1f:bc:92:15:b2:fe:96:38:7b:cd:ee:
         25:2f:4b:e4:45:04:17:0f:2e:43:38:01:0b:a6:d8:10:ce:c4:
         e5:91:40:ce:4c:95:5f:7a:10:26:53:db:02:b2:dc:24:43:4d:
         0a:58:2c:91:be:55:ba:3e:aa:04:8c:0e:2a:63:84:3d:e8:74:
         b8:2e:bf:bf:26:89:33:81:65:8c:db:a2:ef:8a:50:91:07:96:
         98:99:de:dc:22:e2:8e:24:21:b8:63:66:65:4a:53:5c:b9:e4:
         62:e1:98:4a:c2:b3:7f:ca:b8:45:3b:3f:4d:36:c2:99:00:3c:
         9a:9b:aa:7e:2f:db:de:2c:c9:9b:a2:88:91:3f:92:c7:83:c5:
         10:34:f5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:09:50 2024 by rpki-client on console-fra.rpki-client.org