Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa
File:                     3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa (raw, json)
Hash identifier:          NfYS2l9GY5s0w3D9yPPnEuArYdmmxelHzCeNpQGbqyI=
Subject key identifier:   1B:F7:F9:14:0A:81:C1:BF:75:48:E4:32:A6:D9:01:46:25:7B:64:18
Certificate issuer:       /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Certificate serial:       1F9610E2D54D89741710496A52753A82A9566376
Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa
Signing time:             Thu 04 Apr 2024 02:34:53 +0000
ROA not before:           Thu 04 Apr 2024 02:29:53 +0000
ROA not after:            Thu 03 Apr 2025 02:34:53 +0000
asID:                     264350
IP address blocks:        131.108.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl
                          rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:96:10:e2:d5:4d:89:74:17:10:49:6a:52:75:3a:82:a9:56:63:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
        Validity
            Not Before: Apr  4 02:29:53 2024 GMT
            Not After : Apr  3 02:34:53 2025 GMT
        Subject: CN=1BF7F9140A81C1BF7548E432A6D90146257B6418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1b:ee:b7:3c:0c:bb:bb:49:37:ec:33:fe:13:
                    e9:84:2d:13:61:c0:15:25:86:51:48:98:ca:fd:1c:
                    7b:af:27:72:cd:30:bb:76:77:86:7f:7a:88:e0:07:
                    18:6d:c7:a8:e0:61:68:6a:e3:63:bd:cd:b8:37:c7:
                    01:af:4a:0e:ab:9c:b2:c7:79:b7:0b:8a:74:06:53:
                    32:b8:78:c1:9c:ef:df:a6:d3:a6:19:a7:aa:aa:aa:
                    d6:52:1f:fa:8b:70:64:54:65:a0:1e:7b:1b:f2:73:
                    3a:49:e7:1e:c3:7f:c6:90:d4:4a:56:30:d1:04:68:
                    70:5d:ae:cb:58:26:a4:3a:fb:79:db:4e:1e:9d:78:
                    91:33:65:f0:22:66:de:f6:e3:23:92:78:c0:e8:d4:
                    ac:fb:77:ce:3d:a7:57:fa:37:a9:f3:f4:07:32:10:
                    9d:cb:1d:52:cf:f5:d3:29:19:31:e3:1d:fd:ce:28:
                    41:1e:df:04:d8:c8:b1:1f:dd:ca:2a:d4:a2:15:39:
                    12:8f:5d:9e:c7:7d:80:a5:10:4c:1c:b6:4f:8b:75:
                    aa:5d:6c:db:d7:ab:88:f6:ef:1d:77:0e:42:41:22:
                    5d:85:91:9d:60:71:1e:c4:13:db:01:82:c7:ee:7b:
                    c0:52:f0:ae:e2:95:cd:f6:74:9e:79:9e:5f:c9:c0:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F7:F9:14:0A:81:C1:BF:75:48:E4:32:A6:D9:01:46:25:7B:64:18
            X509v3 Authority Key Identifier:
                keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/3133312e3130382e39322e302f32322d3234203d3e20323634333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:f3:08:d9:09:a1:cb:0b:8c:33:65:fc:a3:ff:db:f3:55:d9:
         18:16:74:83:5f:31:5c:68:0a:20:fa:b8:90:1f:4e:1d:d8:85:
         05:d0:3f:91:e0:ef:de:39:e4:40:34:ae:a6:33:1e:23:db:45:
         58:6f:44:15:e6:7c:cc:6f:6b:3d:2e:ae:85:bc:78:ce:e3:c0:
         bd:b0:1e:5c:42:5c:79:1e:31:f1:2b:62:15:2d:27:13:55:5a:
         2e:a5:dc:c3:61:63:57:97:4b:0a:e8:5f:90:bb:a3:fb:8a:95:
         7c:05:23:0a:12:73:74:90:68:68:ac:01:bb:30:6b:bf:08:ec:
         ac:2a:7c:71:5c:13:1a:4d:cb:f1:c5:4c:da:f0:32:37:0b:44:
         ea:d0:13:72:4d:58:a8:60:d4:0e:9a:78:4c:0d:ef:e8:8d:17:
         bb:14:b3:fc:94:ea:ab:82:07:f6:b3:c4:e0:87:86:7e:82:64:
         c8:29:ae:47:dc:9b:5e:9d:57:d8:8f:ed:d6:5d:84:fe:9e:fb:
         17:9c:79:92:12:66:b2:1c:36:de:76:aa:b4:de:b4:8e:c9:da:
         f3:53:2d:6f:02:cc:94:16:85:24:ac:18:fa:d8:10:38:33:78:
         cf:9a:27:81:f1:75:6e:61:db:0b:f2:83:e3:9d:dd:7a:93:0c:
         63:90:23:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:54 2024 by rpki-client on console-fra.rpki-client.org