Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3133312e302e3232342e302f32322d3234203d3e203532393635.roa
File:                     3133312e302e3232342e302f32322d3234203d3e203532393635.roa (raw, json)
Hash identifier:          VfuJDmfqCI7EkTqQUZEVwz0QVDdKjyij8RAKwbfKLt4=
Subject key identifier:   69:D3:55:E2:8B:1A:ED:36:F1:40:94:39:D0:56:94:C5:D4:80:36:81
Certificate issuer:       /CN=B1FAF030A01493504761E684192B146956A636E6
Certificate serial:       467B20807CAA038F3D920698087A7B9A9F51FAD2
Authority key identifier: B1:FA:F0:30:A0:14:93:50:47:61:E6:84:19:2B:14:69:56:A6:36:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1FAF030A01493504761E684192B146956A636E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3133312e302e3232342e302f32322d3234203d3e203532393635.roa
Signing time:             Fri 30 Aug 2024 17:19:30 +0000
ROA not before:           Fri 30 Aug 2024 17:14:30 +0000
ROA not after:            Fri 29 Aug 2025 17:19:30 +0000
asID:                     52965
IP address blocks:        131.0.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/B1FAF030A01493504761E684192B146956A636E6.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/B1FAF030A01493504761E684192B146956A636E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1FAF030A01493504761E684192B146956A636E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7b:20:80:7c:aa:03:8f:3d:92:06:98:08:7a:7b:9a:9f:51:fa:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FAF030A01493504761E684192B146956A636E6
        Validity
            Not Before: Aug 30 17:14:30 2024 GMT
            Not After : Aug 29 17:19:30 2025 GMT
        Subject: CN=69D355E28B1AED36F1409439D05694C5D4803681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:6a:f5:96:52:4b:dd:78:b4:7c:3c:47:56:
                    2f:3f:77:a7:36:03:1a:a4:c8:e5:33:09:f7:c2:0d:
                    66:b4:ea:13:28:a0:40:a4:1b:f7:5f:fa:7e:80:ed:
                    b9:fa:08:d4:4f:c6:b4:9f:4f:02:06:20:da:d4:14:
                    28:42:a1:9b:9e:8e:6d:39:3e:e5:06:8d:0f:24:f9:
                    cb:a0:23:15:31:bb:83:31:af:ff:8a:ce:12:d7:a5:
                    ca:04:25:9d:8c:2a:1b:0a:71:47:c0:c2:4e:f9:af:
                    e1:68:b4:a7:8a:c0:fc:f6:2d:83:12:a0:77:35:34:
                    0f:8d:87:8f:0b:47:41:73:e0:44:26:df:e7:db:c4:
                    ef:8d:63:a6:5e:8c:7c:92:74:97:7e:59:25:98:42:
                    97:36:92:36:ba:c9:81:a2:a4:e9:f9:b9:45:ae:10:
                    25:e5:21:74:18:dc:a4:3a:28:76:30:50:c6:73:d0:
                    89:34:5b:2f:81:ab:be:c1:e4:8c:e8:c9:ec:d9:dc:
                    f9:c7:ea:f1:03:75:b4:82:a8:a6:de:1d:a9:91:3f:
                    01:79:a8:d0:52:b8:4e:0b:43:2d:fa:36:c2:ba:98:
                    19:0c:20:92:89:cf:b0:ce:a5:a6:6d:ed:37:13:80:
                    4e:53:cd:8c:8c:d1:51:c7:fc:a1:47:8f:9b:db:53:
                    06:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D3:55:E2:8B:1A:ED:36:F1:40:94:39:D0:56:94:C5:D4:80:36:81
            X509v3 Authority Key Identifier:
                keyid:B1:FA:F0:30:A0:14:93:50:47:61:E6:84:19:2B:14:69:56:A6:36:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/B1FAF030A01493504761E684192B146956A636E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1FAF030A01493504761E684192B146956A636E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3133312e302e3232342e302f32322d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:13:d5:5b:fd:70:55:ed:2e:b9:f0:9b:03:0d:26:7c:6d:b2:
         6e:ab:28:3d:93:24:4e:da:4b:67:26:90:26:59:61:54:8b:48:
         92:4a:34:f6:75:03:a8:f5:e1:b0:6c:b0:87:a6:ad:9e:e2:4a:
         01:93:e7:8c:27:24:e4:ca:32:7a:7c:6d:01:bb:88:83:27:33:
         fc:be:78:14:0a:c0:86:94:e4:d8:3c:5f:b0:1f:11:34:4e:1c:
         17:3b:46:91:34:a3:f5:c3:d8:c5:0e:26:80:64:6b:83:ec:7c:
         31:21:a0:b8:47:b2:72:df:11:d1:e1:30:8e:db:24:45:91:3d:
         ae:e7:84:3e:37:3c:05:11:a3:35:08:84:81:55:02:c3:01:94:
         50:0e:c5:b2:95:2a:bf:35:f3:39:be:cf:44:f4:4c:82:44:7d:
         38:57:0b:bb:24:61:89:34:5a:99:4b:8a:f8:41:12:2f:f4:56:
         c6:a4:37:82:13:e4:22:ce:27:45:7b:12:4f:fd:71:d0:ff:4d:
         61:fd:64:0f:f8:a9:ea:14:9e:20:10:02:80:68:4d:8d:e2:67:
         29:75:58:0d:ab:0b:f0:1b:15:df:ad:80:c9:56:d9:d5:cf:7e:
         81:a1:c2:94:ff:bb:18:3d:ab:ac:9c:ae:c4:78:99:52:e8:f9:
         c8:e6:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:54 2024 by rpki-client on console-fra.rpki-client.org