Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/1/3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa
File:                     3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa (raw, json)
Hash identifier:          B6ujMHmOiMEFNTAqBT17YeZqgKjzfvZtN+druzZlJBw=
Subject key identifier:   F5:51:0F:47:EB:08:1E:D7:D4:03:F5:08:20:A9:D3:D3:E5:5B:73:4C
Certificate issuer:       /CN=72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771
Certificate serial:       22BB16E851865F9AE0E86867EC32BA7619A2927D
Authority key identifier: 72:F3:AB:6B:CB:2E:B6:FB:FF:DC:E1:91:61:72:89:E9:F4:BD:57:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/1/3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa
Signing time:             Thu 04 Apr 2024 23:14:03 +0000
ROA not before:           Thu 04 Apr 2024 23:09:03 +0000
ROA not after:            Thu 03 Apr 2025 23:14:03 +0000
asID:                     264448
IP address blocks:        131.255.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.crl
                          rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bb:16:e8:51:86:5f:9a:e0:e8:68:67:ec:32:ba:76:19:a2:92:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771
        Validity
            Not Before: Apr  4 23:09:03 2024 GMT
            Not After : Apr  3 23:14:03 2025 GMT
        Subject: CN=F5510F47EB081ED7D403F50820A9D3D3E55B734C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:94:c3:93:6d:ad:d1:f9:0e:af:de:a0:31:
                    a5:3b:ce:9e:61:39:83:79:63:e9:bb:a7:20:68:c3:
                    b6:6e:20:ee:36:ae:27:21:8d:4d:ed:17:45:4d:ff:
                    c8:97:de:e7:b3:46:a3:b2:ce:2e:a7:86:75:42:c0:
                    40:50:37:34:6f:96:5b:b0:27:09:d6:ac:a8:9e:eb:
                    dd:42:4a:9a:1f:14:3e:79:d3:22:f9:d9:ef:6d:fb:
                    1d:b5:b4:79:71:50:c4:89:da:c8:47:d8:ce:45:e4:
                    05:f5:50:1c:4a:ff:8c:fe:2e:ff:0e:00:8f:db:96:
                    59:38:96:b6:3e:c6:f3:70:2c:f2:e8:02:5d:c8:dc:
                    33:9c:b9:8d:0a:e9:77:d0:bd:a0:1a:eb:7b:da:69:
                    a4:80:ff:1c:88:4c:04:f3:8a:c5:dd:83:33:d1:9a:
                    cc:83:34:5e:39:f9:51:51:8a:9d:3b:62:cb:4a:5d:
                    b5:71:85:ad:20:02:a7:28:7e:a3:e4:8d:c4:94:93:
                    01:8a:41:a9:e9:be:39:f0:10:9a:ff:02:19:27:0c:
                    db:54:a0:f7:ca:9e:52:cd:df:9f:75:60:51:19:87:
                    6e:cf:d4:b3:51:fc:c5:de:2f:08:5e:2d:4e:ee:69:
                    ad:19:a2:39:fe:ea:ec:43:27:5a:39:f3:b0:88:f4:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:51:0F:47:EB:08:1E:D7:D4:03:F5:08:20:A9:D3:D3:E5:5B:73:4C
            X509v3 Authority Key Identifier:
                keyid:72:F3:AB:6B:CB:2E:B6:FB:FF:DC:E1:91:61:72:89:E9:F4:BD:57:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72F3AB6BCB2EB6FBFFDCE191617289E9F4BD5771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/p9bxpXMjwg4MTQnLBtjGdMzRbjfSRpFR1GCBfWMAkZU/1/3133312e3235352e32382e302f32322d3234203d3e20323634343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:89:95:6c:52:be:10:b4:d7:93:be:33:05:9b:c4:b5:4c:75:
         27:ee:15:97:7a:e6:08:b1:0f:36:91:1a:c2:41:fd:2b:7d:a8:
         26:5e:5d:32:9b:14:79:31:4c:f2:b6:f2:b5:8e:85:d9:33:6b:
         3a:b3:a8:48:26:d5:fb:b8:44:2f:53:51:94:43:a9:ec:b1:46:
         65:88:cd:b0:06:6c:f9:d4:9e:f4:41:ed:a0:fc:9c:1e:98:06:
         d6:70:f9:3e:80:15:e9:b8:76:f3:1b:44:a2:95:c8:b8:b2:23:
         59:e5:6b:9e:7f:cb:2a:55:8c:bb:8e:74:90:00:ac:53:86:ac:
         88:e8:b3:93:96:73:a2:eb:79:ad:34:4b:49:f1:3d:32:0c:37:
         0d:07:7e:b4:55:a1:c3:62:26:c0:f4:bd:b8:28:01:e2:8b:76:
         8d:42:7e:f3:ef:8b:2c:f5:46:17:3e:ce:c4:bc:70:9d:62:2e:
         9c:5e:54:c8:dd:13:fd:19:c9:e9:39:5f:36:b2:1d:ad:bf:52:
         a2:a7:37:c5:ac:49:ea:de:49:85:19:2f:d3:61:1a:01:e9:4c:
         2e:9e:e5:03:39:2c:da:19:d4:1c:9b:59:8d:0c:b2:2a:a4:8b:
         59:75:78:4a:a6:1d:34:f0:40:95:2a:f9:08:d1:bf:69:65:2a:
         22:bc:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:55 2024 by rpki-client on console-ams.rpki-client.org