Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa
File:                     3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa (raw, json)
Hash identifier:          A+CAR5wxTUIFGx5bNwjkc7lG0r0NX/KM42aDJg8u6DE=
Subject key identifier:   B6:64:34:F0:C1:32:CC:4D:EE:B3:E8:23:E3:CE:35:2D:03:00:A8:D5
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       5B0F9626B70628C298F85DD3A242100F6DDE728D
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa
Signing time:             Thu 04 Apr 2024 02:26:16 +0000
ROA not before:           Thu 04 Apr 2024 02:21:16 +0000
ROA not after:            Thu 03 Apr 2025 02:26:16 +0000
asID:                     266611
IP address blocks:        128.201.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0f:96:26:b7:06:28:c2:98:f8:5d:d3:a2:42:10:0f:6d:de:72:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Apr  4 02:21:16 2024 GMT
            Not After : Apr  3 02:26:16 2025 GMT
        Subject: CN=B66434F0C132CC4DEEB3E823E3CE352D0300A8D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f5:ea:74:c9:02:42:69:da:7c:48:61:c0:60:
                    9c:5a:ab:ac:25:e5:5e:0b:8a:13:12:d0:54:89:3b:
                    d9:6c:60:fd:5c:05:f3:32:0f:5d:5a:be:ac:d7:dd:
                    d8:93:b2:c9:27:a5:07:6e:e0:49:b2:11:8f:5f:56:
                    c3:02:dd:f3:d3:69:f4:70:fa:b2:7e:98:da:97:a2:
                    c8:9e:ca:78:9a:8f:d3:e8:84:ff:81:91:e9:35:92:
                    87:57:aa:cf:c3:f7:2f:54:a0:55:08:22:98:64:45:
                    5f:04:f6:5b:af:cc:6b:67:da:d9:c0:b7:40:7e:bb:
                    c8:c8:fe:62:5c:82:af:1e:9d:9a:03:0c:24:d5:76:
                    a0:9f:48:a4:3d:70:59:07:84:d2:de:17:33:e6:e5:
                    bf:14:5f:5f:2a:c3:2c:28:6f:9a:1d:2c:88:5a:4e:
                    59:09:d9:63:5c:d2:18:b7:b9:05:a4:c1:bc:3d:e9:
                    5a:85:e8:8f:16:c1:8a:fd:77:42:a0:b9:6c:4e:67:
                    7a:c8:26:55:c7:ae:68:6e:1b:cf:66:f3:cb:01:a6:
                    b2:57:f8:72:9d:b9:bc:67:4e:bb:91:88:a9:08:80:
                    88:1c:a4:c4:69:62:f5:20:d0:2b:52:bf:a3:3d:28:
                    45:dd:1f:2a:04:b2:40:07:7d:0b:8c:69:77:b5:bd:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:64:34:F0:C1:32:CC:4D:EE:B3:E8:23:E3:CE:35:2D:03:00:A8:D5
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e33312e302f32342d3234203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:1e:30:58:b6:8f:4c:26:25:e9:ae:a7:73:47:48:03:c1:8d:
         af:0c:b0:15:21:d6:2a:69:35:cd:23:2d:58:69:20:9b:0f:6c:
         9c:f8:79:95:13:0d:e4:b0:76:94:e9:97:1e:ac:e8:7d:ef:56:
         3b:57:da:4b:0b:19:5f:30:00:87:31:d3:12:e8:92:28:45:be:
         2f:e9:0f:24:b2:72:03:3a:9c:29:00:49:30:55:bc:d8:5f:c8:
         11:12:3b:39:19:72:c6:3d:a9:6c:e7:90:ba:89:fb:1d:16:ac:
         85:8a:70:01:56:2e:d8:32:5c:09:0a:93:6a:10:92:5c:40:b0:
         a0:69:52:00:5d:22:d5:ff:64:dc:a9:fb:af:c2:94:d1:7a:fc:
         46:78:40:76:e8:4b:9f:ae:a9:6a:6e:69:94:bb:62:59:18:fa:
         b2:de:8f:4b:60:f4:3c:d5:c2:09:63:ad:0b:a4:55:90:d8:58:
         f9:c6:df:0e:0f:e9:ef:76:c6:e0:04:78:d5:23:72:48:50:b8:
         a2:9c:bc:60:41:31:32:d0:d9:4d:24:ee:5a:f3:34:9d:2a:7a:
         2b:8e:f0:0e:fe:e5:27:89:4b:61:1e:51:75:11:0a:f2:21:05:
         d7:a3:14:95:6b:a7:74:a2:e5:56:57:90:98:13:d2:e2:7a:21:
         ee:29:40:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:53 2024 by rpki-client on console-ams.rpki-client.org