Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa
File:                     3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa (raw, json)
Hash identifier:          SIfYeHFe8cs4qc6SRVzL4q+0hiJ1e+DzlaSva5wKKZE=
Subject key identifier:   64:61:AF:19:2F:41:5B:CD:05:2D:F0:4E:A2:FA:D2:DC:8A:CD:D7:7C
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       1B9C61006E8D78D112AEE43E04860D4A35B12844
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa
Signing time:             Fri 05 Apr 2024 03:07:34 +0000
ROA not before:           Fri 05 Apr 2024 03:02:34 +0000
ROA not after:            Fri 04 Apr 2025 03:07:34 +0000
asID:                     52758
IP address blocks:        201.131.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9c:61:00:6e:8d:78:d1:12:ae:e4:3e:04:86:0d:4a:35:b1:28:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Apr  5 03:02:34 2024 GMT
            Not After : Apr  4 03:07:34 2025 GMT
        Subject: CN=6461AF192F415BCD052DF04EA2FAD2DC8ACDD77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:1a:b5:8c:38:f5:9e:44:0d:3c:2f:80:51:
                    93:f6:b3:22:28:d9:c7:43:97:07:89:fd:44:aa:c6:
                    3c:f6:03:ca:a4:e6:3f:d3:99:74:eb:41:8f:fd:01:
                    7f:04:a2:aa:28:a1:b0:5e:b1:08:1b:c3:4f:70:05:
                    ff:2b:a7:db:2c:fe:69:0e:ab:d2:7b:46:0d:f9:68:
                    a8:b6:06:fd:0e:2a:91:78:f9:28:8a:09:8a:74:9a:
                    b1:77:ef:82:83:23:be:9c:04:fd:e3:b6:68:c7:ab:
                    ad:d4:6c:ef:05:01:b4:e6:a1:eb:c4:68:a0:00:8c:
                    85:d7:71:20:55:62:f1:4c:32:7f:a9:ca:21:1c:c8:
                    25:12:ad:76:63:3c:1b:61:3c:01:88:00:83:f4:ea:
                    c6:86:36:7a:29:4b:3d:f7:67:30:5a:81:f8:16:ea:
                    75:fb:87:5b:d1:f9:0f:d9:b4:f4:1b:b5:24:b5:e3:
                    5e:d7:36:56:93:35:7d:56:95:e8:e0:10:a9:46:fd:
                    c7:50:13:df:98:48:23:0b:9d:0f:2e:0b:11:f1:3c:
                    83:d5:78:91:11:de:ed:7e:3b:b3:fc:2a:5e:ba:18:
                    10:6b:03:b5:e7:68:38:d1:11:2c:46:86:d5:8f:55:
                    a7:c2:90:bf:c1:07:57:69:74:90:e5:2d:8e:25:17:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:61:AF:19:2F:41:5B:CD:05:2D:F0:4E:A2:FA:D2:DC:8A:CD:D7:7C
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32312d3231203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:cb:be:38:4a:ca:69:94:8b:83:28:05:6b:5f:5b:32:c5:71:
         a7:8b:88:41:97:da:aa:01:bb:9b:7f:4d:c1:26:cd:2b:7e:b1:
         56:37:71:be:08:c7:bb:d1:88:c2:bb:20:ca:b3:be:8e:86:12:
         47:91:48:07:4a:73:6c:39:d8:d6:bb:c5:f6:06:07:cd:da:a4:
         a6:f9:0f:4b:08:ef:29:fb:e9:01:51:6e:6a:f8:54:f3:1b:50:
         3a:b0:0c:cc:52:cf:a4:a6:4c:df:26:a0:98:36:d3:2a:93:18:
         07:b5:f4:50:4e:2e:8e:52:f1:dd:a2:e9:fd:e6:5a:6a:80:0b:
         da:27:2e:d8:72:24:6c:cd:de:ec:6a:d8:a8:69:15:1f:1c:a9:
         2a:13:fb:1b:8a:18:66:9c:9e:7e:ae:b3:4e:4a:6b:c1:b3:76:
         8c:1e:ca:eb:1e:6b:47:10:8a:03:d2:11:b1:9c:f1:81:1a:7e:
         2f:10:45:10:80:8d:56:92:2d:88:bc:da:de:c2:df:07:9a:58:
         e2:cc:d1:65:ec:cc:0b:49:86:88:1c:ab:2d:38:40:ff:22:98:
         4a:c3:7e:53:49:c3:5a:1a:7a:45:0f:11:5e:e7:81:1a:ff:50:
         1c:aa:3e:ad:c3:96:39:b5:46:a0:38:ca:56:d1:8d:d3:01:c6:
         cb:7d:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:53 2024 by rpki-client on console-fra.rpki-client.org