Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa
File:                     3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa (raw, json)
Hash identifier:          6mJngZI3mLGcejPQrNrAEecFqgTImrPDHVmH3F033Ms=
Subject key identifier:   C8:1B:77:73:AA:42:28:8D:D2:F3:D8:05:6F:3D:EE:B4:9B:0C:C2:AD
Certificate issuer:       /CN=07767A41F66E619BE686DEE855A5A135F9F25C82
Certificate serial:       2F46ECDB4D27EC5D4ABDB5A31C99CBFDAEE016CB
Authority key identifier: 07:76:7A:41:F6:6E:61:9B:E6:86:DE:E8:55:A5:A1:35:F9:F2:5C:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07767A41F66E619BE686DEE855A5A135F9F25C82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa
Signing time:             Mon 26 Aug 2024 20:06:10 +0000
ROA not before:           Mon 26 Aug 2024 20:01:10 +0000
ROA not after:            Mon 25 Aug 2025 20:06:10 +0000
asID:                     271573
IP address blocks:        201.131.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/07767A41F66E619BE686DEE855A5A135F9F25C82.crl
                          rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/07767A41F66E619BE686DEE855A5A135F9F25C82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07767A41F66E619BE686DEE855A5A135F9F25C82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 22:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:46:ec:db:4d:27:ec:5d:4a:bd:b5:a3:1c:99:cb:fd:ae:e0:16:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07767A41F66E619BE686DEE855A5A135F9F25C82
        Validity
            Not Before: Aug 26 20:01:10 2024 GMT
            Not After : Aug 25 20:06:10 2025 GMT
        Subject: CN=C81B7773AA42288DD2F3D8056F3DEEB49B0CC2AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:90:e8:aa:36:af:55:49:13:16:42:26:48:
                    42:42:7a:8b:a1:bd:52:9e:20:67:7e:71:1c:97:6b:
                    0c:be:01:39:51:0f:21:01:89:ad:d4:65:fa:0d:3b:
                    d3:d5:35:20:cc:b0:dd:a0:0b:77:2f:63:25:43:10:
                    c6:67:d6:3a:0e:74:3d:13:4e:3f:f7:ab:f5:8d:80:
                    68:4d:9f:2b:6b:b0:47:4b:9a:64:a4:9c:cd:43:8a:
                    73:e6:7b:83:26:7c:b3:8f:30:80:8f:e9:77:34:5c:
                    b1:f5:b7:fa:4b:8f:ee:e8:64:03:bd:78:6a:d3:39:
                    02:72:8e:5f:b5:fe:f1:48:0c:c8:f6:be:86:05:b0:
                    6a:44:0c:1e:6a:26:c7:dc:6d:b4:2e:e4:a4:31:fc:
                    ff:9c:80:da:d2:18:eb:6f:80:7a:9c:d4:04:57:06:
                    d7:70:b2:e6:ed:49:10:d0:11:98:f6:a8:03:53:cc:
                    f8:a2:0e:c6:b8:51:86:5b:46:14:86:29:35:48:3b:
                    df:3b:9a:aa:79:44:89:6e:0c:71:10:ce:5f:9d:0a:
                    e5:72:3e:6a:7b:0f:fb:82:fd:50:9a:29:0f:04:d0:
                    84:62:bf:44:28:4f:b5:d7:d4:c8:50:97:cf:06:20:
                    bb:83:8c:bd:be:ea:23:de:75:b8:d3:ae:31:59:3b:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1B:77:73:AA:42:28:8D:D2:F3:D8:05:6F:3D:EE:B4:9B:0C:C2:AD
            X509v3 Authority Key Identifier:
                keyid:07:76:7A:41:F6:6E:61:9B:E6:86:DE:E8:55:A5:A1:35:F9:F2:5C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/07767A41F66E619BE686DEE855A5A135F9F25C82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07767A41F66E619BE686DEE855A5A135F9F25C82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhBsqUTKU7VKzkBcJQRpDNCigrTgcbVXZpvWzN3na53p/0/3230312e3133312e3130362e302f32342d3234203d3e20323731353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d9:76:8c:df:f9:b7:ad:30:5d:e1:a9:ec:d5:b0:57:4a:8e:
         94:0f:bd:e9:fa:89:90:d9:15:d1:db:9b:be:9c:52:6d:fd:f1:
         b7:1f:33:fe:99:09:95:1f:6a:a7:bb:b3:d6:56:fc:0d:bc:76:
         9f:14:9a:f2:75:d7:76:1d:50:e4:e7:7f:aa:6f:b2:3e:8f:08:
         ca:8e:52:d6:1d:d9:26:a3:34:54:98:91:de:f5:c2:d4:fe:55:
         2b:51:c2:3a:b3:cf:b5:59:02:0d:e1:eb:29:c5:30:2f:0c:87:
         17:16:85:a0:0c:23:ee:c6:56:a1:c1:3f:da:bc:06:49:e0:29:
         c1:5a:29:76:87:94:db:a1:41:db:16:71:77:31:78:d3:cf:c9:
         85:73:0d:2e:4b:53:e4:e5:eb:64:ec:ac:ec:46:f0:e3:9d:0e:
         ff:fc:2b:2e:b3:4d:cb:a2:4f:13:d3:85:d8:65:8a:1b:e4:9e:
         6c:85:43:24:93:e5:24:16:6a:0e:90:f0:0b:4a:aa:08:da:12:
         23:fe:65:6b:d0:a7:4b:85:3b:7b:23:8f:82:ba:af:48:af:d7:
         8a:e0:a5:f9:8a:b8:9e:02:a7:52:bd:45:d2:2c:5b:3a:20:f2:
         03:53:3b:c8:1d:94:e4:8d:24:7c:3a:5c:c0:63:b1:40:0f:e7:
         53:2d:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:15 2024 by rpki-client on console-ams.rpki-client.org