Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38332e302f32342d3234203d3e203233373634.roa
File:                     3133312e3232312e38332e302f32342d3234203d3e203233373634.roa (raw, json)
Hash identifier:          nV3EAzkjyjcLJlLYhUzZ1foiT4YiRW1MyOKwg9DBFxU=
Subject key identifier:   CF:B2:FA:F1:72:49:FB:D4:8A:5A:FE:F4:20:EE:B3:2C:A2:D1:01:6A
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       14F0BBA89F3CBAFE29B0BFFA5B2120A1E2C0F16C
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38332e302f32342d3234203d3e203233373634.roa
Signing time:             Tue 19 Nov 2024 22:47:58 +0000
ROA not before:           Tue 19 Nov 2024 22:42:58 +0000
ROA not after:            Tue 18 Nov 2025 22:47:58 +0000
asID:                     23764
IP address blocks:        131.221.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Dec 2024 00:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f0:bb:a8:9f:3c:ba:fe:29:b0:bf:fa:5b:21:20:a1:e2:c0:f1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Nov 19 22:42:58 2024 GMT
            Not After : Nov 18 22:47:58 2025 GMT
        Subject: CN=CFB2FAF17249FBD48A5AFEF420EEB32CA2D1016A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:d0:b3:42:ec:67:1c:8f:d3:90:5f:e9:dc:
                    e8:25:df:30:55:1c:75:c7:e1:d5:70:38:02:aa:22:
                    74:53:6a:45:cb:60:f9:e8:be:ee:0b:7a:92:f8:8d:
                    6c:56:5d:ad:97:25:99:91:17:cf:de:94:fe:da:8b:
                    2a:39:5d:14:c1:81:be:97:06:f1:0b:a5:73:bd:4a:
                    76:8d:8c:63:2a:ff:64:82:95:bb:89:1b:24:90:e7:
                    1f:f4:2b:c0:f6:c2:c6:4d:2e:dd:f0:19:9a:5f:90:
                    9a:eb:8e:15:de:1a:36:d0:bb:f1:3d:f6:da:60:fb:
                    c9:29:ad:09:bc:34:48:33:24:54:50:64:1f:44:06:
                    a9:89:c4:37:17:33:eb:64:13:be:e1:a6:c6:1e:eb:
                    ee:51:70:30:5c:27:a8:cd:61:db:f1:67:c5:2a:eb:
                    42:57:18:b4:d8:80:ef:4a:80:ea:1c:6b:fe:9f:ab:
                    70:a0:f6:24:d5:1e:c7:a3:7a:9b:1f:83:5b:ee:55:
                    74:07:91:a4:06:9d:62:52:67:d9:37:34:4f:e2:97:
                    2a:83:c8:0e:94:0d:c4:0e:81:29:31:4b:1d:34:12:
                    a9:0c:19:f6:88:f3:45:4d:20:13:15:73:68:8f:3f:
                    9c:70:b6:08:86:60:52:b5:c7:56:48:84:c2:0d:e0:
                    f8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B2:FA:F1:72:49:FB:D4:8A:5A:FE:F4:20:EE:B3:2C:A2:D1:01:6A
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/3133312e3232312e38332e302f32342d3234203d3e203233373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:54:0d:c5:d7:09:b9:6b:58:f1:b0:9b:8a:4b:0d:43:5c:c6:
         0d:58:8b:b1:85:6d:09:32:71:36:0b:da:52:c5:9f:88:f8:73:
         ee:50:83:11:a9:ef:3c:af:28:51:1f:97:91:87:64:36:82:0c:
         90:6b:78:28:2f:38:80:82:82:f2:6f:e1:d1:d5:b2:14:e3:e8:
         42:50:47:35:3e:1d:6f:3a:b4:72:ab:df:da:f7:9d:47:17:a5:
         ef:dd:02:b9:44:39:cd:27:2f:29:32:7e:b2:35:96:8b:c0:32:
         74:8e:4f:3c:4a:8c:d5:12:4e:50:9a:94:ae:e0:e2:92:4f:56:
         2f:b6:03:bd:9b:f0:ee:3e:45:82:01:45:1f:5f:56:77:73:6c:
         10:6b:de:01:2f:83:19:72:33:70:06:a1:e4:52:85:4e:46:cb:
         a9:b3:c2:c7:cf:65:af:20:e6:75:c9:aa:a2:ec:99:c1:33:03:
         82:26:1f:bd:cf:f0:08:93:ff:94:46:a6:49:fa:9b:7c:a9:d0:
         f7:b8:db:fb:47:0b:d9:5e:38:93:5b:27:79:7b:4f:e2:17:43:
         a5:76:00:b6:7a:08:ef:86:4e:ae:bc:12:ff:60:36:d6:39:d0:
         9c:48:cb:1e:9a:cf:f5:b7:f5:66:fa:1b:18:53:05:5a:88:0a:
         56:be:5c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 30 00:37:37 2024 by rpki-client on console-ams.rpki-client.org