Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa
File:                     3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa (raw, json)
Hash identifier:          W1eMvO91GceiKrK0WezIOXAUu9aWIP7z8lT7Twofisc=
Subject key identifier:   A2:94:39:90:A5:2B:F1:42:23:B4:0E:2D:73:EE:A0:ED:AB:70:57:2A
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       07503F24FBDED2A828A5EAE7422BB47DCC0AB707
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa
Signing time:             Fri 05 Apr 2024 03:07:34 +0000
ROA not before:           Fri 05 Apr 2024 03:02:34 +0000
ROA not after:            Fri 04 Apr 2025 03:07:34 +0000
asID:                     52758
IP address blocks:        201.131.242.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:50:3f:24:fb:de:d2:a8:28:a5:ea:e7:42:2b:b4:7d:cc:0a:b7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Apr  5 03:02:34 2024 GMT
            Not After : Apr  4 03:07:34 2025 GMT
        Subject: CN=A2943990A52BF14223B40E2D73EEA0EDAB70572A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:94:b1:3d:4a:5d:ec:8c:93:94:03:c8:48:
                    97:5c:03:66:bd:70:d8:6b:52:86:0d:8a:aa:40:8a:
                    fe:19:1e:1d:0f:8c:0b:77:d8:b8:df:d6:95:ea:96:
                    48:de:2d:5c:83:57:c1:ed:eb:57:ec:22:46:85:ec:
                    d4:66:35:6a:2d:32:2d:78:67:f8:08:bc:01:4e:eb:
                    ff:47:85:77:53:02:ee:7a:a7:0f:32:2e:c1:c6:dd:
                    f3:01:09:fb:0b:dd:ec:65:cf:3c:af:31:f5:1e:83:
                    4d:21:24:43:bc:9a:89:e8:81:09:5a:40:ac:a1:34:
                    e7:a3:3e:e7:ba:51:02:c3:ac:2b:0c:bb:29:8a:37:
                    8a:68:33:b7:db:0d:c3:29:04:32:d0:d0:e0:5b:9e:
                    5e:fd:2e:a9:67:3d:78:7b:8a:97:69:8b:b1:90:b5:
                    2e:29:02:86:e9:a2:d4:b0:bd:3e:5f:08:93:09:54:
                    ff:f3:45:1c:3b:37:10:4b:c4:b8:96:9b:37:fe:02:
                    84:fd:7c:78:48:2f:c4:f4:63:c0:b7:a6:6b:74:84:
                    35:01:1f:bd:c8:67:32:69:d7:d5:50:4f:b6:28:1a:
                    99:7e:fe:62:f6:68:77:4b:89:5c:3a:b4:fc:99:57:
                    9b:6f:61:38:af:50:10:41:ee:23:4e:74:ba:32:22:
                    e0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:94:39:90:A5:2B:F1:42:23:B4:0E:2D:73:EE:A0:ED:AB:70:57:2A
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234322e302f32332d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:da:a9:be:b9:51:26:f1:19:e4:cd:b2:64:de:a8:2c:d5:38:
         fd:9e:b2:5a:1e:90:e9:01:99:cc:ed:85:f3:c0:6a:2e:2f:c7:
         bc:f2:03:85:1a:cb:f0:0f:5b:fb:c5:8c:0f:cd:26:c7:3f:0b:
         a5:50:e9:e4:6c:45:e7:fa:9e:b0:b8:29:f8:fe:32:11:dc:99:
         77:f5:36:17:ef:3c:e0:8c:94:64:7b:a5:a6:1b:45:39:4f:b0:
         48:c7:c2:6e:94:20:e2:13:90:13:16:a7:6b:4c:92:52:c5:5a:
         9e:a1:cd:00:fa:91:b2:99:59:ff:74:19:6c:17:fa:47:4e:6b:
         f1:36:2b:77:0c:ea:14:0a:53:2d:20:92:94:7f:4b:4b:6e:42:
         50:6b:69:27:89:e2:07:5f:31:03:fc:52:62:bb:b1:dc:fd:ea:
         5f:6f:35:e4:ea:98:03:c3:18:78:78:98:98:0d:6c:64:ce:29:
         94:0c:b0:e4:7e:5d:fc:38:93:5a:21:5d:cc:31:bf:3a:f2:9b:
         0d:08:20:74:7e:67:6f:9c:46:d7:bf:de:e1:12:69:31:bf:0d:
         f8:ae:c7:cc:06:f9:89:c9:4a:1a:2a:92:a9:33:63:76:70:b8:
         b7:f9:c8:9b:70:86:24:d9:87:dd:61:91:05:84:93:cc:32:63:
         a9:1c:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:53 2024 by rpki-client on console-fra.rpki-client.org