Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa
File:                     3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa (raw, json)
Hash identifier:          fFH3VtWOocExl7Vvfywt/ysqpWpVKhpDwEnHGPljNOE=
Subject key identifier:   DD:71:0D:2E:96:4E:FC:9A:80:6F:72:A4:EA:1A:DF:3D:06:63:B2:FE
Certificate issuer:       /CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Certificate serial:       0D734A4E4B2B25E59A62061A0F14D6FB98A29BE4
Authority key identifier: 99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa
Signing time:             Wed 03 Apr 2024 20:29:44 +0000
ROA not before:           Wed 03 Apr 2024 20:24:44 +0000
ROA not after:            Wed 02 Apr 2025 20:29:44 +0000
asID:                     264444
IP address blocks:        131.221.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl
                          rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:73:4a:4e:4b:2b:25:e5:9a:62:06:1a:0f:14:d6:fb:98:a2:9b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
        Validity
            Not Before: Apr  3 20:24:44 2024 GMT
            Not After : Apr  2 20:29:44 2025 GMT
        Subject: CN=DD710D2E964EFC9A806F72A4EA1ADF3D0663B2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ab:5f:93:00:97:87:41:79:3c:41:0a:ba:ca:
                    1e:9d:58:8d:e0:55:4b:90:54:ac:0b:9a:ac:89:ca:
                    1a:f6:a6:83:ae:20:1b:03:7f:dc:50:51:ed:16:9f:
                    f3:17:2b:39:c6:50:2e:72:29:1e:ff:96:81:2a:2d:
                    4b:d3:58:c2:93:3b:e9:11:35:7b:1b:8e:fa:20:dc:
                    7b:8a:26:ea:5b:f2:99:a5:cf:26:c2:7d:0d:a0:cc:
                    45:1c:9d:5e:38:6f:e1:52:aa:5c:27:b3:1d:38:84:
                    a6:28:16:11:54:df:20:55:97:cc:1a:45:b2:37:70:
                    1b:ea:71:f3:6a:f0:1a:1c:ec:b0:ef:05:5c:f9:9e:
                    18:d0:a7:48:52:ef:b0:ef:e1:5b:84:f8:75:32:e1:
                    67:57:2d:3d:6c:71:0b:fc:4a:51:12:80:0a:85:b2:
                    56:96:f3:07:a9:2f:d7:80:f4:45:4c:9e:5b:2c:20:
                    71:7d:b8:0b:1a:fe:d6:06:bd:5b:17:2e:e4:38:2e:
                    e1:0e:b9:c7:96:db:7b:c9:24:54:cb:0c:2c:78:40:
                    cc:1d:4c:75:dc:df:a3:d8:9e:a4:6d:4c:81:5c:e4:
                    43:66:bc:b4:97:77:ca:6c:c9:d4:8c:17:47:fa:04:
                    2d:e4:1f:0b:c4:11:f1:d6:86:8d:69:86:96:16:7f:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:71:0D:2E:96:4E:FC:9A:80:6F:72:A4:EA:1A:DF:3D:06:63:B2:FE
            X509v3 Authority Key Identifier:
                keyid:99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/3133312e3232312e3232342e302f32322d3234203d3e20323634343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:b6:2e:92:92:72:cb:79:9a:6c:8c:55:dd:c4:2c:13:40:50:
         55:62:de:ac:20:ea:61:f6:f0:91:30:8f:1d:70:be:64:e4:6e:
         2c:45:ba:4b:dd:89:fb:94:73:0a:32:3e:32:5c:17:52:d4:1f:
         bd:f3:6f:60:d0:af:1c:39:13:9e:0f:ea:8a:6c:75:64:eb:90:
         05:86:4b:c9:38:b5:45:e4:af:47:0d:1e:f1:69:2a:fb:7d:fa:
         5b:d4:42:f4:1b:a3:a2:27:79:cf:f1:17:ee:13:fd:e0:f1:c6:
         c6:2e:e9:f7:6d:45:31:10:b7:39:a2:97:60:3e:d1:4b:12:eb:
         3a:3f:c7:08:23:ca:b1:ec:f6:9d:12:a7:f7:eb:3b:98:a3:ab:
         cc:24:05:0e:72:e5:b0:f7:d9:5f:42:d5:c0:11:32:39:c4:e5:
         bd:64:ca:b9:9b:f0:df:21:a7:ad:bd:22:73:a8:2e:a1:68:b6:
         d9:7b:e9:89:c7:5d:d4:f6:ff:d1:3e:93:82:1e:22:42:60:c6:
         f4:12:3b:a9:ee:7e:d0:83:3b:ca:7f:3f:b7:55:7e:f8:02:f4:
         05:82:42:50:74:a6:ef:45:91:54:da:91:e7:ce:41:ae:98:bf:
         cc:89:7f:eb:99:e7:44:1c:a8:08:bc:9b:79:69:21:13:f3:2a:
         cd:cd:39:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:55 2024 by rpki-client on console-fra.rpki-client.org