Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa
File:                     3133312e3139362e342e302f32322d3332203d3e20323635383930.roa (raw, json)
Hash identifier:          xqxZo7GErGdSOkDqmyihPI1yyhtw9wQLg6aTlgky9Uk=
Subject key identifier:   5A:F8:77:2A:E6:7A:95:E8:58:A9:94:19:93:B6:A0:5D:7F:1E:8F:CC
Certificate issuer:       /CN=A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C
Certificate serial:       525193D4A8116F53B22B07E5F3AE7F3DABC782D4
Authority key identifier: A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa
Signing time:             Thu 04 Apr 2024 17:51:25 +0000
ROA not before:           Thu 04 Apr 2024 17:46:25 +0000
ROA not after:            Thu 03 Apr 2025 17:51:25 +0000
asID:                     265890
IP address blocks:        131.196.4.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.crl
                          rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:51:93:d4:a8:11:6f:53:b2:2b:07:e5:f3:ae:7f:3d:ab:c7:82:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C
        Validity
            Not Before: Apr  4 17:46:25 2024 GMT
            Not After : Apr  3 17:51:25 2025 GMT
        Subject: CN=5AF8772AE67A95E858A9941993B6A05D7F1E8FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:74:62:55:d3:9e:d3:80:92:10:7c:8b:ed:6b:
                    cc:e7:bd:d9:db:f1:e7:7c:8c:28:4a:98:e3:15:0d:
                    fb:4b:63:4d:6c:92:86:dd:9c:53:26:d7:64:d3:44:
                    ab:8e:bc:d1:ce:fb:7f:79:d6:6e:8c:89:4b:59:b5:
                    46:ef:82:45:4c:4f:bd:96:34:f5:83:5d:26:d2:92:
                    74:69:4d:67:e3:d7:88:77:43:dc:32:1a:20:4c:bf:
                    54:a8:fc:7e:34:34:18:36:4c:d1:9e:cb:d5:5c:9a:
                    ea:03:fb:19:e2:a7:08:ac:2e:d2:db:00:eb:f6:22:
                    9a:1f:2b:92:d1:b5:17:78:14:60:ef:4a:66:d6:a5:
                    ed:23:8f:8e:29:af:39:b0:03:a2:37:4e:28:a7:df:
                    17:6f:b4:25:bd:4b:85:0d:07:65:39:7c:53:3c:14:
                    f7:ab:0d:75:3d:a4:22:ee:66:e4:bb:6b:39:86:0c:
                    a1:71:d8:6d:0c:8c:d4:94:18:a4:21:da:5f:bf:04:
                    04:36:3f:ff:80:c8:fe:f6:c1:d0:6d:72:ac:5d:ba:
                    63:93:d3:cb:db:e8:9d:a4:40:20:1b:15:ce:15:0d:
                    5b:8e:83:b3:0c:6e:90:e7:e9:79:e1:7e:43:a8:c7:
                    fd:78:6a:06:f7:65:5b:54:a6:6d:97:83:c8:d9:00:
                    b1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F8:77:2A:E6:7A:95:E8:58:A9:94:19:93:B6:A0:5D:7F:1E:8F:CC
            X509v3 Authority Key Identifier:
                keyid:A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/3133312e3139362e342e302f32322d3332203d3e20323635383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:c7:8e:82:4b:e9:cb:05:9a:42:a4:31:ed:d3:76:75:d9:36:
         19:33:a5:37:45:dd:b0:4b:7a:9e:38:2b:d8:3b:4d:b7:3e:c4:
         15:15:36:e1:a2:d8:98:55:d4:8d:fe:72:87:a4:66:2c:79:72:
         2b:19:ee:59:dd:13:73:30:b1:27:1b:53:e6:4e:d7:24:5f:c8:
         63:4d:8b:4f:75:f0:b4:97:2e:f9:d2:9d:0c:d3:d2:75:34:16:
         11:9a:69:e7:83:e4:d4:07:2e:88:a3:e3:b2:31:ed:1d:64:a1:
         89:f9:89:3e:96:14:99:fd:5a:84:19:bd:4c:97:58:cb:2d:1d:
         ac:33:88:b9:be:b7:2d:ea:4e:d5:92:09:b9:56:f0:0f:8b:eb:
         aa:de:9e:28:00:22:05:34:f5:5f:07:1d:be:36:e3:93:94:94:
         93:04:0a:fc:c0:a9:27:28:eb:a8:c1:67:76:71:2e:02:14:66:
         ed:c3:a6:df:80:05:43:c5:c3:84:be:ea:09:6a:0a:b7:ca:3a:
         8a:92:5b:4b:68:c2:5a:01:7d:f6:bc:13:2b:15:df:23:ba:31:
         8d:bf:e8:91:15:4d:47:f0:aa:25:93:2d:65:45:e1:58:98:c1:
         46:4f:94:6a:08:51:6f:2b:e1:05:fc:7a:ba:09:ac:98:55:5d:
         97:eb:20:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:16 2024 by rpki-client on console-ams.rpki-client.org