Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa
File:                     3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa (raw, json)
Hash identifier:          /GwKeqS6zDuYxlrn1jYTH8ZargsWnUmZVhue7tGWaig=
Subject key identifier:   93:93:5F:36:D5:F3:D1:24:35:59:26:59:53:D2:9C:CB:84:C4:F9:6A
Certificate issuer:       /CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
Certificate serial:       21B2A67E6713EFC0A5F5896A9027FE8F5C42D9AF
Authority key identifier: 21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa
Signing time:             Wed 21 Aug 2024 12:06:21 +0000
ROA not before:           Wed 21 Aug 2024 12:01:21 +0000
ROA not after:            Wed 20 Aug 2025 12:06:21 +0000
asID:                     262993
IP address blocks:        131.72.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl
                          rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b2:a6:7e:67:13:ef:c0:a5:f5:89:6a:90:27:fe:8f:5c:42:d9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F41A1DE6B061FF1919072AF54DAF54380B0F27
        Validity
            Not Before: Aug 21 12:01:21 2024 GMT
            Not After : Aug 20 12:06:21 2025 GMT
        Subject: CN=93935F36D5F3D1243559265953D29CCB84C4F96A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:9c:7f:ea:73:6a:e4:00:86:99:d2:d9:56:
                    c0:e8:3f:9e:cb:3f:22:b3:97:06:de:47:a4:76:c9:
                    81:45:31:f8:92:da:74:96:90:95:16:04:83:d7:66:
                    15:ed:34:41:57:ac:e3:9b:9b:da:cf:80:54:bc:b5:
                    29:fa:83:33:52:cb:f1:dc:d6:ea:fb:c9:5a:df:b9:
                    75:7f:bc:a4:62:f9:bf:09:92:29:6b:db:d6:ac:ba:
                    c9:73:5a:af:04:3f:f6:7a:0f:40:bd:d2:4b:05:bf:
                    88:4b:53:82:70:c9:e9:a8:7c:af:3e:71:70:44:ff:
                    23:23:df:86:9c:7e:8d:c7:1e:e8:d9:6a:13:b5:a8:
                    1c:d7:6d:dc:9a:4d:11:01:de:50:5d:cd:53:90:70:
                    2f:72:77:86:0e:1f:71:52:ae:e5:94:e4:05:12:46:
                    36:a8:3d:6c:01:cc:0c:59:c2:49:69:7b:5b:19:54:
                    27:72:ee:96:4a:58:74:37:99:c4:ad:51:3d:0d:21:
                    be:c8:37:51:ef:35:c4:d4:f4:a2:b1:e9:1a:5e:95:
                    6b:a0:fc:e4:5b:a9:44:f3:78:32:42:6a:0a:25:82:
                    f7:48:3a:d7:59:89:dd:9d:ee:a4:4e:7c:ee:28:dd:
                    c5:33:64:8f:f2:1b:c9:18:45:67:f2:f3:c5:dc:1e:
                    e2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:93:5F:36:D5:F3:D1:24:35:59:26:59:53:D2:9C:CB:84:C4:F9:6A
            X509v3 Authority Key Identifier:
                keyid:21:F4:1A:1D:E6:B0:61:FF:19:19:07:2A:F5:4D:AF:54:38:0B:0F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/21F41A1DE6B061FF1919072AF54DAF54380B0F27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F41A1DE6B061FF1919072AF54DAF54380B0F27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/weNNNAH2Qe3138uBdVeGM1vzYLDfeXj3Q1i3EAt5uWm/0/3133312e37322e3137322e302f32322d3234203d3e20323632393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:33:f1:1f:78:ef:4a:03:55:4a:e0:85:d6:94:ac:ce:18:fa:
         fb:5d:36:ff:73:eb:21:08:82:60:43:15:c0:73:96:dd:56:64:
         53:7f:f4:c1:2b:69:79:19:82:fa:35:5c:9f:c8:fc:41:67:3d:
         07:94:3d:80:7a:03:1f:23:e6:e6:30:4b:f3:e9:c9:40:40:17:
         e7:ce:05:50:de:37:2d:5d:68:c8:3b:f2:0f:24:c4:ed:21:71:
         c8:dc:79:45:28:9e:57:6b:84:90:21:0b:8b:36:8b:14:39:a3:
         c2:d4:ea:0a:6d:3a:a2:8b:fa:98:37:13:b4:2c:0a:03:69:54:
         af:7a:10:09:42:ac:d3:46:33:7c:b0:8b:82:bf:e8:5c:66:20:
         80:96:13:2f:5b:a8:09:8a:7f:f2:25:af:d8:49:bd:00:e2:b1:
         ef:c5:6f:44:77:80:ca:82:e4:38:96:e6:07:19:83:b3:a1:4f:
         45:af:37:c4:4b:71:44:35:8a:1a:1f:b8:cd:cb:31:92:bd:98:
         bd:a8:83:d8:4c:d8:8b:27:1d:b4:e6:82:dc:c0:86:54:4e:9a:
         a8:af:fb:c6:2a:e4:03:1f:9a:23:be:08:72:27:31:fa:1e:18:
         09:67:a9:d2:ef:0c:e7:34:a1:b3:c4:35:33:6f:d1:86:76:39:
         29:6b:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:47 2024 by rpki-client on console-ams.rpki-client.org