Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa
File:                     3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa (raw, json)
Hash identifier:          KCH9Qt14zJvJfSGVyqgLhUpFculZUpUctrCY+0OiVSk=
Subject key identifier:   CC:F3:48:15:01:76:FF:75:02:DF:B3:86:BD:02:E8:E7:18:3D:38:F9
Certificate issuer:       /CN=9951F6EBAAA7813C694F3D0F966BFA8B04610665
Certificate serial:       78B6FC4564DB617B2AE9D373F9A0F38B75754012
Authority key identifier: 99:51:F6:EB:AA:A7:81:3C:69:4F:3D:0F:96:6B:FA:8B:04:61:06:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa
Signing time:             Wed 03 Apr 2024 23:47:17 +0000
ROA not before:           Wed 03 Apr 2024 23:42:17 +0000
ROA not after:            Wed 02 Apr 2025 23:47:17 +0000
asID:                     264497
IP address blocks:        131.255.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.crl
                          rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b6:fc:45:64:db:61:7b:2a:e9:d3:73:f9:a0:f3:8b:75:75:40:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9951F6EBAAA7813C694F3D0F966BFA8B04610665
        Validity
            Not Before: Apr  3 23:42:17 2024 GMT
            Not After : Apr  2 23:47:17 2025 GMT
        Subject: CN=CCF348150176FF7502DFB386BD02E8E7183D38F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:4f:7b:4f:e1:a1:2a:fc:c8:bb:7e:ef:02:
                    22:5d:d4:f7:1a:74:4f:bb:c4:ec:a1:f3:15:ee:bd:
                    59:a7:09:b5:a3:45:92:77:79:20:1b:af:3a:6c:ea:
                    c1:b6:75:df:40:3a:b7:d9:c9:99:4e:ae:ac:25:db:
                    84:94:cd:9d:ca:a5:b9:c1:c6:7a:62:f5:e9:93:5a:
                    68:a9:35:8e:82:a3:fc:d5:7b:02:c1:ea:6e:57:d4:
                    1e:20:a2:30:da:c9:8e:91:39:a7:2d:4b:9c:b0:dc:
                    0c:64:29:27:14:dd:40:db:45:f7:18:cf:64:13:82:
                    f2:9b:55:2f:34:35:51:29:53:12:a7:fe:94:9d:fb:
                    1f:7d:cc:dd:4d:82:c4:d2:9c:32:e6:f7:ad:e0:53:
                    bf:81:bf:f4:fa:8c:dc:42:07:bf:53:94:bd:ac:d1:
                    e8:1e:d2:f7:64:1a:21:bd:cc:90:f3:5b:5e:73:a2:
                    a6:d0:56:02:d6:1c:e5:cc:ad:dc:95:1d:21:2f:06:
                    4f:8a:a1:e9:75:c4:63:07:75:d4:bc:76:c1:77:a2:
                    b3:bc:e2:0e:70:4a:1e:3c:cd:67:fb:18:f9:77:d7:
                    41:b7:0c:06:a8:3a:fc:1d:26:56:3c:45:dd:4c:fd:
                    ee:3b:81:74:01:48:98:69:ba:1a:90:73:6c:70:c5:
                    af:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F3:48:15:01:76:FF:75:02:DF:B3:86:BD:02:E8:E7:18:3D:38:F9
            X509v3 Authority Key Identifier:
                keyid:99:51:F6:EB:AA:A7:81:3C:69:4F:3D:0F:96:6B:FA:8B:04:61:06:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9951F6EBAAA7813C694F3D0F966BFA8B04610665.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gHpd9ZyoyCyD2NAAFezW1mXxnFigdkEycmfyoYumeAj/1/3133312e3235352e3138382e302f32322d3234203d3e20323634343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:e5:2f:93:80:23:6a:d2:35:5f:4e:05:e2:72:67:9e:07:
         55:86:a6:6b:b7:85:97:e1:30:8f:64:98:50:65:c0:56:96:4d:
         46:7b:b9:5e:0c:13:84:37:dd:63:b8:ba:9c:07:3b:54:6d:f5:
         2d:35:e8:b5:e1:78:d7:33:5f:51:a5:71:ff:85:5c:32:a3:6f:
         c0:c2:0f:fe:a9:02:6a:6e:60:7a:6e:43:8a:94:b0:6c:3d:4e:
         97:c0:7a:2a:7f:31:78:68:0e:59:bc:77:51:96:8a:c7:2e:4a:
         1a:5b:9b:ca:16:e2:23:ee:b0:90:a7:02:6e:57:32:cb:89:c2:
         0f:ce:a4:ca:1c:78:89:24:91:29:50:98:1d:0d:25:14:b5:42:
         8e:dc:0d:66:7e:b0:72:53:d9:9f:d9:66:e4:46:1d:f0:bb:bb:
         f3:08:2f:71:d7:d3:2b:3c:27:8b:23:bd:d4:65:d9:9b:e6:fb:
         be:c1:59:6f:bb:46:28:a1:fe:b6:31:a4:36:12:2e:06:14:9b:
         e9:37:60:d9:3d:31:19:9e:f7:a7:5e:2c:54:8a:58:e3:bf:66:
         90:79:47:d0:80:8c:49:57:1f:6e:3d:5a:e9:da:5c:8b:23:c4:
         be:93:dd:86:9a:81:29:bf:fd:7b:90:02:7d:92:ae:85:db:c7:
         a6:d7:7d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:25 2024 by rpki-client on console-fra.rpki-client.org