Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32322d3234203d3e20323632373635.roa
File:                     3133312e3232312e35362e302f32322d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          wnqmO7zy+DY1zGNM6U0m4VxBJ0bceSOLw74PAZdaiag=
Subject key identifier:   58:3E:10:BD:AE:63:C9:0A:C1:2D:5E:95:90:5E:0C:7C:EE:82:77:87
Certificate issuer:       /CN=19E724000CC4B5225FE7DAD4435ECEAE6D462B59
Certificate serial:       3A5059D95D1D52B54E4BFE7B5715B90A21580045
Authority key identifier: 19:E7:24:00:0C:C4:B5:22:5F:E7:DA:D4:43:5E:CE:AE:6D:46:2B:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32322d3234203d3e20323632373635.roa
Signing time:             Mon 13 Jan 2025 13:13:39 +0000
ROA not before:           Mon 13 Jan 2025 13:08:39 +0000
ROA not after:            Mon 12 Jan 2026 13:13:39 +0000
asID:                     262765
IP address blocks:        131.221.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 21:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:50:59:d9:5d:1d:52:b5:4e:4b:fe:7b:57:15:b9:0a:21:58:00:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19E724000CC4B5225FE7DAD4435ECEAE6D462B59
        Validity
            Not Before: Jan 13 13:08:39 2025 GMT
            Not After : Jan 12 13:13:39 2026 GMT
        Subject: CN=583E10BDAE63C90AC12D5E95905E0C7CEE827787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:e3:93:cd:c5:df:ea:ae:83:7c:04:e0:24:
                    09:b2:d3:34:f3:cb:db:53:c4:09:23:d9:01:a0:e1:
                    5c:cb:d7:9c:fc:0f:9f:e5:5a:c5:e7:a9:cc:76:d0:
                    c4:69:3b:3f:90:e1:f1:ac:d0:a9:72:6b:79:0b:ef:
                    ce:71:b4:0c:27:12:24:e6:21:9f:bd:7e:24:9c:20:
                    38:7f:c5:06:7a:4f:65:87:c1:24:c6:1f:77:fc:65:
                    b8:a5:e6:c8:94:8a:76:b8:eb:82:63:bd:9d:7c:da:
                    68:3f:f2:2e:27:8e:a7:21:d6:8b:26:65:5d:7d:74:
                    6a:72:ea:ca:b3:29:2d:34:01:79:33:be:1d:3b:64:
                    1a:0d:ee:b9:9f:a1:ee:9a:be:8e:95:f2:9a:96:0f:
                    cd:19:b9:88:77:88:b1:63:c6:6e:3e:d4:2d:43:89:
                    1a:4c:cf:3d:8b:89:55:f3:e0:0b:30:a4:50:1e:4b:
                    f3:cf:60:bf:1c:e3:fc:f5:38:25:9b:db:28:e7:7f:
                    5f:b1:bb:bf:c2:52:b6:80:c9:6c:dc:e4:34:ba:95:
                    73:2a:7a:a3:a2:f5:c2:9e:75:0a:93:c8:ed:8b:ab:
                    6c:b0:f5:1e:f2:66:c7:c7:23:ea:82:33:cd:8c:c0:
                    b6:d5:9b:e7:de:db:5a:58:a3:92:b1:83:fa:c9:f7:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3E:10:BD:AE:63:C9:0A:C1:2D:5E:95:90:5E:0C:7C:EE:82:77:87
            X509v3 Authority Key Identifier:
                keyid:19:E7:24:00:0C:C4:B5:22:5F:E7:DA:D4:43:5E:CE:AE:6D:46:2B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19E724000CC4B5225FE7DAD4435ECEAE6D462B59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32322d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:67:1b:f3:39:16:7e:2f:89:e5:4e:e8:a5:80:5e:6b:1f:f8:
         2b:15:c2:57:ea:da:48:6d:97:04:7f:50:fc:f9:07:cd:ed:08:
         c6:78:99:47:63:a9:33:64:0c:f0:4e:41:e5:06:35:f5:b8:da:
         f4:83:35:bc:c6:4d:f6:62:73:1e:65:d8:42:49:f6:95:47:9d:
         1a:1e:ac:0c:82:69:63:ed:80:08:fa:51:0e:d9:66:92:6d:85:
         4f:fa:c3:85:6c:2c:1a:96:8a:0b:6b:90:44:f3:41:8e:ff:a8:
         c7:05:00:e7:a3:cd:d3:5c:a5:fe:a9:fd:f5:eb:2c:c9:c0:71:
         c7:19:b3:7f:24:c5:e6:e1:6e:17:82:14:52:8d:11:bf:ce:ba:
         5f:bc:ad:b1:fe:35:fb:81:08:66:3e:05:ff:5c:36:53:34:ca:
         14:a7:97:06:67:ad:9d:a8:61:ea:b5:2f:b6:2a:fa:8e:46:34:
         ec:f7:f3:8c:63:53:bf:86:97:ac:35:64:65:1f:03:c5:d8:d9:
         53:3d:3b:e5:3c:68:fd:3f:cd:da:27:cc:c9:cb:df:d1:49:80:
         0e:34:93:7e:c8:53:28:c6:39:aa:04:6c:61:ac:a8:0b:fe:d5:
         92:c1:d8:ee:24:61:71:f2:97:1c:09:49:78:d3:a8:f6:f4:c7:
         02:5d:1a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:56:51 2025 by rpki-client