Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/3133312e3235352e3137322e302f32322d3234203d3e20323632343931.roa
File:                     3133312e3235352e3137322e302f32322d3234203d3e20323632343931.roa (raw, json)
Hash identifier:          OY4L1jJpn7jLNHR7BpK2VjoxaRU2dwVAi3r9G5vgfLs=
Subject key identifier:   05:67:1A:32:49:4B:B7:4C:E4:4A:DA:C4:EC:51:5C:5A:9D:DB:62:A7
Certificate issuer:       /CN=FA1BB5615A4C0E692CEE2AF571867C35017ED68A
Certificate serial:       3CE093D299D5C34AEC199C14BC6AE4346CB5B54C
Authority key identifier: FA:1B:B5:61:5A:4C:0E:69:2C:EE:2A:F5:71:86:7C:35:01:7E:D6:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/3133312e3235352e3137322e302f32322d3234203d3e20323632343931.roa
Signing time:             Thu 04 Apr 2024 14:53:47 +0000
ROA not before:           Thu 04 Apr 2024 14:48:47 +0000
ROA not after:            Thu 03 Apr 2025 14:53:47 +0000
asID:                     262491
IP address blocks:        131.255.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.crl
                          rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 14:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e0:93:d2:99:d5:c3:4a:ec:19:9c:14:bc:6a:e4:34:6c:b5:b5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1BB5615A4C0E692CEE2AF571867C35017ED68A
        Validity
            Not Before: Apr  4 14:48:47 2024 GMT
            Not After : Apr  3 14:53:47 2025 GMT
        Subject: CN=05671A32494BB74CE44ADAC4EC515C5A9DDB62A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:5e:86:6f:86:27:94:86:26:10:3a:6f:48:
                    58:57:6a:ac:60:b6:b5:07:50:e4:6d:f5:4a:74:b4:
                    31:cb:75:43:3a:56:2e:ff:60:e0:30:79:fd:97:ce:
                    1f:b4:28:33:15:8a:7c:a3:1a:84:79:95:ba:f6:c2:
                    f1:ec:0d:70:d3:f6:64:ae:c3:ce:ef:b0:99:57:25:
                    36:19:2a:ca:82:e5:9c:20:d2:45:69:36:73:44:eb:
                    e6:b6:4e:a8:9b:3d:7c:75:c3:0f:33:d8:98:c2:91:
                    f2:78:c1:67:04:6b:96:1a:a9:06:8b:5f:dc:3c:e3:
                    d3:cf:4f:51:63:72:3e:86:e5:46:4c:db:4e:1c:27:
                    20:00:82:0f:98:9b:d4:26:a0:2d:6e:ae:b8:c0:7c:
                    67:c5:24:1f:3e:9e:cd:5b:03:f0:cc:57:78:cf:62:
                    16:a7:41:6a:d3:16:27:a5:22:ba:6c:11:14:2f:3f:
                    49:a3:cd:8e:b1:d9:40:7f:e5:b8:f0:72:ca:05:4f:
                    21:1f:7e:90:78:86:f7:f8:9b:d5:3f:84:9b:8f:2c:
                    68:97:5f:46:89:ec:41:86:6b:47:82:04:f5:31:c6:
                    14:01:12:95:1d:3d:b1:18:c3:ca:3f:1c:32:1c:01:
                    94:13:24:bf:9e:3c:07:b0:28:49:14:4e:71:4e:15:
                    ff:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:67:1A:32:49:4B:B7:4C:E4:4A:DA:C4:EC:51:5C:5A:9D:DB:62:A7
            X509v3 Authority Key Identifier:
                keyid:FA:1B:B5:61:5A:4C:0E:69:2C:EE:2A:F5:71:86:7C:35:01:7E:D6:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1BB5615A4C0E692CEE2AF571867C35017ED68A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwRtKBKxSP5bQFmnC58yZRBNt6G5XLMy1Awm2NQ6dnvN/1/3133312e3235352e3137322e302f32322d3234203d3e20323632343931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:5e:3c:b4:45:16:b9:bf:75:76:4f:17:86:bb:e9:3b:e4:e9:
         db:aa:91:c1:7f:3f:f0:a0:f1:87:ca:db:80:a3:24:d9:8d:f2:
         f8:a1:b9:80:67:64:b7:1d:50:73:25:31:09:41:5b:6c:d6:26:
         fc:10:44:c6:8d:60:2a:f7:fc:86:5d:f7:5a:3b:fc:15:c3:e7:
         27:19:64:4e:24:51:64:e4:ac:3a:6f:c2:09:05:b3:05:d1:cc:
         ef:bb:b9:a2:fa:e4:65:78:5a:74:74:75:34:e5:2e:b4:9f:0f:
         fa:09:09:16:1a:69:da:1f:df:05:a7:15:98:6b:dd:b7:66:ae:
         e4:51:0b:80:f7:d9:a3:97:c0:f9:da:af:0b:f7:84:f3:39:fa:
         79:02:30:26:52:89:2f:08:b5:aa:0e:6f:9f:2a:6b:c6:1a:74:
         db:56:6f:20:7e:82:0c:d1:2f:19:73:04:48:d2:92:04:c5:ea:
         e7:79:f4:62:25:fb:57:7c:10:05:7e:90:68:46:f8:f0:e9:f0:
         9b:f3:91:5f:a7:66:6e:9c:b1:00:2f:a0:9b:d2:f5:bd:53:37:
         e6:83:90:7c:9e:fa:96:cc:dc:a9:07:67:7f:c1:5e:67:df:ce:
         cd:17:16:7f:1e:d8:78:d1:5a:23:8e:2f:d3:85:3e:2a:54:21:
         b7:bd:4b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 16:00:01 2024 by rpki-client on console-fra.rpki-client.org