Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa
File:                     3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          D6cR5INElfvZ/JOQx/h4MYuCecmFwU3bSEmo30R1UIc=
Subject key identifier:   45:03:2D:F3:97:8D:70:41:16:08:6E:50:F5:17:0E:E3:85:30:A0:58
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       3221C4546080C27B1DCAE2D67F630FD6C3DD0D94
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa
Signing time:             Thu 04 Apr 2024 06:12:50 +0000
ROA not before:           Thu 04 Apr 2024 06:07:50 +0000
ROA not after:            Thu 03 Apr 2025 06:12:50 +0000
asID:                     262773
IP address blocks:        131.255.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:21:c4:54:60:80:c2:7b:1d:ca:e2:d6:7f:63:0f:d6:c3:dd:0d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Apr  4 06:07:50 2024 GMT
            Not After : Apr  3 06:12:50 2025 GMT
        Subject: CN=45032DF3978D704116086E50F5170EE38530A058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:53:ba:4e:6c:f4:a8:21:62:79:bf:c8:aa:
                    b8:9e:9e:76:02:48:90:e6:42:29:16:50:99:2a:9c:
                    32:9c:fc:66:7d:f5:c4:da:b4:8a:41:d3:1f:46:40:
                    a3:6f:10:60:c6:7c:e4:b7:a2:1d:41:c2:7c:28:16:
                    c3:e8:98:78:a8:22:3f:ba:16:1d:ce:49:17:9b:04:
                    12:bc:06:13:ac:49:ba:90:40:52:09:35:c9:b4:1e:
                    c9:42:ee:0d:c0:1d:f2:49:be:8b:ff:c7:e8:cc:f1:
                    36:c8:a5:84:9d:d6:0f:49:0b:4a:80:71:4a:76:4b:
                    c4:44:e6:c8:ef:b6:7f:6d:af:c7:fb:3d:05:07:1a:
                    d5:8e:94:f5:95:5d:1b:23:1c:d0:91:b3:da:0f:24:
                    4e:f2:5d:f9:e8:7a:d1:ba:d9:ce:3d:9f:a0:3f:f5:
                    a0:23:7c:06:b4:20:0d:93:1c:69:ee:72:2d:15:96:
                    02:ae:68:7d:61:2e:32:fd:3c:14:26:eb:9a:a6:84:
                    e0:a7:95:8d:87:b5:f3:f3:ef:6f:ec:e6:f2:d8:6a:
                    cc:b6:43:4e:0b:01:ca:01:fa:e0:a7:54:a4:8c:69:
                    6a:19:7f:6c:a5:9e:2f:cb:c0:94:4e:8d:7c:8c:c6:
                    ad:78:ee:74:df:bd:bb:85:22:60:8d:1a:4d:ba:c7:
                    21:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:03:2D:F3:97:8D:70:41:16:08:6E:50:F5:17:0E:E3:85:30:A0:58
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3133312e3235352e3232302e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:f6:0f:e6:d2:67:79:c2:2c:48:5f:54:ab:03:e0:8f:d6:0a:
         b9:82:c4:7f:ca:80:5a:5b:82:7b:b5:84:17:41:73:ea:78:66:
         fc:f8:18:7f:44:ab:8b:78:e2:ba:58:4a:a0:e0:c5:ed:a3:9b:
         a9:78:d6:9c:d7:3e:3f:37:bb:e2:52:e2:99:23:b9:0b:bd:9f:
         a8:6b:3a:fa:11:c5:84:b0:89:8d:dd:f9:59:dd:ca:bd:0a:ce:
         ba:2f:c3:53:b9:fd:63:d6:33:7d:64:43:ec:fc:cf:90:b3:5e:
         50:83:47:fe:11:55:01:e6:e1:7d:76:71:75:0e:cd:25:c1:4f:
         e1:b3:4f:0b:f7:95:d7:da:4a:ca:1b:4a:66:d7:14:e7:1d:45:
         a7:4c:0b:37:1d:29:f5:7f:43:fc:0a:94:ef:ed:c6:67:91:a5:
         f7:8f:76:1c:d6:fe:dc:ea:ce:13:b4:87:c5:fd:76:24:09:74:
         31:90:e9:2c:68:7f:f2:23:d6:0f:7f:0c:bc:2b:b4:36:7f:09:
         dc:14:81:9b:9f:6e:eb:bd:f9:0f:a4:d5:54:2f:04:29:7f:1b:
         ce:5c:30:b4:ce:27:cc:76:f1:eb:b2:31:9e:a4:2b:a8:86:8f:
         f7:c8:66:81:b0:e9:f4:bc:0f:c0:03:c8:e1:e8:e3:2b:e2:02:
         3f:0a:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:12 2024 by rpki-client on console-fra.rpki-client.org