Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1Thq83KXhwZRqdxmN1sACotAoSKzZG2aAG4wb5sqa9H/0/3133312e37322e3138382e302f32322d3234203d3e203631373430.roa
File:                     3133312e37322e3138382e302f32322d3234203d3e203631373430.roa (raw, json)
Hash identifier:          68/u9OOS6nOje3m6PjgZAmL2B4MZ6MIaA8uZO+K8TRY=
Subject key identifier:   90:32:35:ED:46:E8:49:C8:13:89:BE:F0:E5:ED:30:BC:36:74:61:14
Certificate issuer:       /CN=9493A80CAADC7A914A69771041280F1EFF1AC9E5
Certificate serial:       5F0B1FC07243ACE37B99563E21072141F4D633DD
Authority key identifier: 94:93:A8:0C:AA:DC:7A:91:4A:69:77:10:41:28:0F:1E:FF:1A:C9:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9493A80CAADC7A914A69771041280F1EFF1AC9E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1Thq83KXhwZRqdxmN1sACotAoSKzZG2aAG4wb5sqa9H/0/3133312e37322e3138382e302f32322d3234203d3e203631373430.roa
Signing time:             Mon 16 Sep 2024 10:34:52 +0000
ROA not before:           Mon 16 Sep 2024 10:29:52 +0000
ROA not after:            Mon 15 Sep 2025 10:34:52 +0000
asID:                     61740
IP address blocks:        131.72.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1Thq83KXhwZRqdxmN1sACotAoSKzZG2aAG4wb5sqa9H/0/9493A80CAADC7A914A69771041280F1EFF1AC9E5.crl
                          rsync://rpki-repo.registro.br/repo/H1Thq83KXhwZRqdxmN1sACotAoSKzZG2aAG4wb5sqa9H/0/9493A80CAADC7A914A69771041280F1EFF1AC9E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9493A80CAADC7A914A69771041280F1EFF1AC9E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0b:1f:c0:72:43:ac:e3:7b:99:56:3e:21:07:21:41:f4:d6:33:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9493A80CAADC7A914A69771041280F1EFF1AC9E5
        Validity
            Not Before: Sep 16 10:29:52 2024 GMT
            Not After : Sep 15 10:34:52 2025 GMT
        Subject: CN=903235ED46E849C81389BEF0E5ED30BC36746114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:85:11:88:bf:ea:c0:09:9d:4e:67:85:c4:
                    b2:f3:99:a4:6a:38:ac:19:94:a7:2d:67:cc:64:83:
                    f2:2b:14:6b:1a:d6:04:17:6b:35:e1:3b:4b:4f:c6:
                    e1:ca:48:c7:ef:00:86:34:a4:09:83:10:54:b5:70:
                    24:95:b8:6d:69:5d:79:23:38:c0:54:23:9a:8c:bb:
                    26:c9:86:e5:75:76:f1:04:4c:c9:15:97:9a:50:0c:
                    e6:d6:1f:d3:e5:73:be:9a:83:45:6b:4f:ba:10:5a:
                    5a:f7:2a:20:9c:65:1b:c4:dc:b8:e0:68:a2:90:10:
                    b2:70:9a:7f:11:60:3f:bd:e1:ed:86:56:72:38:23:
                    03:2e:c3:9f:91:8a:c3:08:f2:1f:05:48:a5:ab:fe:
                    31:ef:d4:79:8f:a1:31:d1:88:0f:7d:9c:ff:30:88:
                    4e:3a:9e:41:b1:e4:ed:6a:8d:09:1b:aa:33:3c:78:
                    b8:b5:3b:a4:a4:cd:2f:8a:8b:3f:6e:af:35:48:49:
                    5a:34:df:fb:31:a0:11:0e:d2:a7:f3:5c:56:d6:96:
                    1f:08:04:c1:75:0e:aa:e8:61:c6:26:12:66:01:bc:
                    85:01:43:f4:42:fb:53:6e:9d:09:4d:ab:15:54:5e:
                    ff:9e:37:76:01:ec:f3:c4:4f:47:17:6f:a6:11:79:
                    05:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:32:35:ED:46:E8:49:C8:13:89:BE:F0:E5:ED:30:BC:36:74:61:14
            X509v3 Authority Key Identifier:
                keyid:94:93:A8:0C:AA:DC:7A:91:4A:69:77:10:41:28:0F:1E:FF:1A:C9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1Thq83KXhwZRqdxmN1sACotAoSKzZG2aAG4wb5sqa9H/0/9493A80CAADC7A914A69771041280F1EFF1AC9E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9493A80CAADC7A914A69771041280F1EFF1AC9E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1Thq83KXhwZRqdxmN1sACotAoSKzZG2aAG4wb5sqa9H/0/3133312e37322e3138382e302f32322d3234203d3e203631373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:50:5b:17:e4:d3:28:d6:4c:8e:19:42:6d:31:07:33:a5:
         e4:bb:00:08:a1:57:83:ae:6b:5a:bc:9a:13:b8:87:96:8d:1f:
         b9:89:55:a0:41:8d:98:51:aa:cf:26:ce:c2:aa:de:bb:97:a5:
         ae:4e:3d:e0:4b:84:e8:0e:c8:c6:10:73:75:fb:70:18:b1:30:
         b3:83:48:c0:6c:2a:4b:88:25:1d:88:b2:13:37:64:65:91:f3:
         4b:b8:06:8e:2d:9f:6e:da:0c:42:58:49:07:c1:68:a8:8e:c4:
         ca:d4:4e:41:cd:54:94:cb:f2:79:1a:75:26:bb:e6:1b:a1:9f:
         7e:1e:6e:a9:57:69:67:2c:c6:eb:ca:a4:a7:34:f1:ca:d1:da:
         79:81:b9:fc:e3:ff:c9:06:75:37:f6:d9:c7:6a:68:78:00:7b:
         bf:59:54:48:56:c6:21:13:c5:4d:b7:86:97:08:0e:3a:7b:66:
         ac:a2:ce:39:44:d6:9d:87:65:1a:41:55:3f:ee:8a:7d:5a:b2:
         88:5d:77:08:aa:e8:4c:fc:71:1f:3e:2d:35:57:59:89:56:2f:
         d6:be:5e:2c:8f:28:03:95:a3:6e:0c:8f:98:c3:d8:7a:1e:05:
         36:2a:92:d0:71:0d:43:4e:a9:b8:fc:ab:4a:96:d7:7f:e2:35:
         c4:cc:26:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:05 2024 by rpki-client on console-fra.rpki-client.org