Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32332d3233203d3e203631373139.roa
File:                     3133312e302e3139322e302f32332d3233203d3e203631373139.roa (raw, json)
Hash identifier:          GOvZ0rJC9N+rNmzBG8uibHi3JnDQbh7ETyp5zQ7swZM=
Subject key identifier:   7D:E6:56:B1:E4:85:CF:0D:75:4A:36:FE:13:07:CC:3E:85:A3:EE:3B
Certificate issuer:       /CN=34DD33570D927291CC982869E0C396FAAE2C34A1
Certificate serial:       17AE982D9AD17C31E19A8A0FC671344A678474CE
Authority key identifier: 34:DD:33:57:0D:92:72:91:CC:98:28:69:E0:C3:96:FA:AE:2C:34:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34DD33570D927291CC982869E0C396FAAE2C34A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32332d3233203d3e203631373139.roa
Signing time:             Tue 12 Nov 2024 21:44:23 +0000
ROA not before:           Tue 12 Nov 2024 21:39:23 +0000
ROA not after:            Tue 11 Nov 2025 21:44:23 +0000
asID:                     61719
IP address blocks:        131.0.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/34DD33570D927291CC982869E0C396FAAE2C34A1.crl
                          rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/34DD33570D927291CC982869E0C396FAAE2C34A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34DD33570D927291CC982869E0C396FAAE2C34A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ae:98:2d:9a:d1:7c:31:e1:9a:8a:0f:c6:71:34:4a:67:84:74:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DD33570D927291CC982869E0C396FAAE2C34A1
        Validity
            Not Before: Nov 12 21:39:23 2024 GMT
            Not After : Nov 11 21:44:23 2025 GMT
        Subject: CN=7DE656B1E485CF0D754A36FE1307CC3E85A3EE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:dc:13:6f:dc:6a:b4:b1:b5:78:ff:84:0f:
                    fc:50:1f:12:c1:24:6d:48:aa:cc:7a:b2:99:a6:43:
                    2d:9a:94:38:f7:52:e5:7f:4c:1b:62:69:57:2b:8a:
                    b5:75:a3:33:14:76:d7:db:25:ab:f8:37:27:33:27:
                    34:c8:9a:12:32:af:f9:a4:af:08:5a:89:13:a1:2f:
                    3a:33:28:be:3b:74:01:ae:d0:c6:95:80:fb:da:c6:
                    bb:e9:68:10:10:cd:57:30:f6:a9:ce:6a:03:ab:c0:
                    0b:ec:6f:e4:ad:2d:ac:3b:08:24:87:3e:8a:79:a8:
                    eb:99:6a:7a:43:4e:c0:02:f3:7a:80:fc:7a:ff:ea:
                    b3:f9:73:bd:e6:3b:58:45:0d:ed:56:b2:eb:ec:05:
                    a0:51:14:2a:f8:9d:c8:46:2c:28:80:9a:47:70:c7:
                    1d:68:02:11:43:d7:70:2b:3b:6f:b8:34:9c:14:7b:
                    f1:7e:e2:7f:9f:d2:fe:e2:42:75:37:38:85:56:2e:
                    79:ce:e8:0c:ad:91:15:b4:d4:c3:a7:67:96:91:9d:
                    23:73:3c:93:5b:f8:a9:11:af:58:4f:de:91:bb:30:
                    b9:21:9c:b6:41:7c:44:c7:f4:03:0b:ee:f4:0e:74:
                    b5:0b:29:ee:1f:96:67:f1:8d:b3:ab:16:64:96:f8:
                    e4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E6:56:B1:E4:85:CF:0D:75:4A:36:FE:13:07:CC:3E:85:A3:EE:3B
            X509v3 Authority Key Identifier:
                keyid:34:DD:33:57:0D:92:72:91:CC:98:28:69:E0:C3:96:FA:AE:2C:34:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/34DD33570D927291CC982869E0C396FAAE2C34A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34DD33570D927291CC982869E0C396FAAE2C34A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/3133312e302e3139322e302f32332d3233203d3e203631373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:0f:78:70:98:07:cf:5f:63:87:d0:1d:3b:73:3b:07:ae:6d:
         7f:ab:57:af:b8:dd:9d:f1:30:0a:8f:33:cc:7e:b0:aa:ce:9f:
         75:82:0d:34:f1:74:29:26:dc:c5:c0:8a:95:d9:ad:e6:83:b9:
         ff:01:bc:c3:db:4c:73:3c:8d:3f:d5:4f:c9:65:76:82:fd:7e:
         ee:8a:8c:2b:72:83:c8:bb:ff:55:59:18:87:85:0c:be:fc:32:
         73:df:5d:58:dd:23:66:6e:8d:9e:0c:57:e5:8f:8c:38:68:9a:
         91:a6:86:7d:73:44:63:0b:56:ec:80:62:ed:36:4d:cb:eb:54:
         e5:16:dd:23:85:87:5a:be:91:5a:24:a2:54:5d:cb:99:d0:03:
         f2:ca:15:3c:58:98:11:e9:04:21:0e:e6:35:70:01:3c:fe:8b:
         bc:be:57:b9:c2:df:08:dd:17:d9:3c:b9:7d:1e:c6:5a:31:91:
         03:07:5a:d1:8c:fe:69:73:3d:fc:18:8b:bc:bd:0a:f6:37:1e:
         6d:73:0b:1c:90:c0:57:0f:0e:80:33:da:e5:e3:2b:fc:a8:5c:
         cd:cc:bf:4e:39:cc:e5:a8:3c:86:bd:d5:fc:41:7a:66:a3:d8:
         94:d1:b4:8c:ea:01:3e:b5:aa:00:ed:55:fd:5c:29:7a:d0:02:
         50:62:d1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org