Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130302e302f32332d3233203d3e203631363732.roa
File:                     3133312e3130382e3130302e302f32332d3233203d3e203631363732.roa (raw, json)
Hash identifier:          0hTU9VFw5MMQPJFxYfj8wZm9wUoAYCg4aQi7KjsydPQ=
Subject key identifier:   97:39:7E:2D:06:D3:B2:B6:6C:72:17:B4:61:07:4C:44:EB:44:20:0E
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       7A3849BE72371FC1BA45F056CAC7DB608A1BF4EA
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130302e302f32332d3233203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:41 +0000
ROA not before:           Thu 04 Apr 2024 18:17:41 +0000
ROA not after:            Thu 03 Apr 2025 18:22:41 +0000
asID:                     61672
IP address blocks:        131.108.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:38:49:be:72:37:1f:c1:ba:45:f0:56:ca:c7:db:60:8a:1b:f4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:41 2024 GMT
            Not After : Apr  3 18:22:41 2025 GMT
        Subject: CN=97397E2D06D3B2B66C7217B461074C44EB44200E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:88:c7:1b:4e:8b:75:41:8a:8f:70:d5:22:
                    7b:a9:70:40:35:67:e8:89:a3:bb:70:36:00:93:c1:
                    8a:c0:18:60:e0:2c:a6:62:65:07:c6:d1:c9:42:0a:
                    84:e7:09:77:93:b3:e3:c3:e3:12:5c:c9:7e:8f:87:
                    26:13:2e:37:97:f4:ca:83:4a:0a:37:6a:77:8e:b7:
                    d5:93:4a:bf:87:ea:e7:86:06:b1:c4:21:5b:46:5a:
                    16:e3:6c:31:df:b8:54:04:ec:f4:af:82:32:5d:7c:
                    2f:bf:ab:ac:70:fd:75:55:1e:80:02:c6:29:8f:5e:
                    c4:a1:95:3e:1c:fb:46:52:7e:e5:2a:63:d9:47:7c:
                    02:78:28:d0:95:e5:3b:8c:aa:86:10:59:9b:8e:09:
                    e6:1c:2c:2c:63:80:64:13:b1:9d:40:73:03:d7:74:
                    10:e1:d9:98:27:15:ee:c2:a7:fb:c4:e1:f3:91:b9:
                    0c:93:57:f3:2c:05:f4:b9:ee:13:cb:da:c1:0a:2d:
                    33:82:4d:9e:87:c4:8d:ae:da:ef:ba:ea:ca:25:73:
                    21:31:f7:e1:8d:86:47:73:c9:c2:24:d9:07:ae:8e:
                    3e:97:dc:40:c7:e4:29:81:13:fd:b3:bd:ed:52:ec:
                    27:28:07:2e:72:39:c7:d1:d2:29:dd:78:18:bd:94:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:39:7E:2D:06:D3:B2:B6:6C:72:17:B4:61:07:4C:44:EB:44:20:0E
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130302e302f32332d3233203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:51:db:d4:50:95:51:e5:e9:0f:30:80:44:23:40:01:81:1d:
         2e:ae:2e:14:41:e9:b0:0d:9a:3e:b2:78:49:b4:34:6a:79:e8:
         93:9b:59:09:86:09:9b:11:5e:54:9d:8b:f8:03:97:96:53:bf:
         78:55:a9:2f:29:2d:30:59:32:ab:ea:36:6b:fc:1e:6b:ab:12:
         e2:bf:db:88:c1:84:f2:b2:dd:49:1d:1a:c1:2c:1e:10:42:7a:
         18:16:72:3f:2d:f2:0a:f4:2b:dd:af:b0:4c:43:af:2e:a2:0d:
         58:e7:95:72:98:72:24:37:af:6d:0d:1c:b9:64:23:57:2a:66:
         8b:0f:5e:16:b8:1b:4d:20:88:5a:27:3a:cc:c0:6f:11:4d:1c:
         c8:b7:60:e0:d3:60:4e:1b:53:f2:6d:bc:b8:c2:62:ea:85:8d:
         48:63:60:e4:05:ca:37:c7:bd:47:13:81:2a:20:c7:c7:60:39:
         18:95:d8:43:7f:33:d2:f2:33:be:c6:c1:4e:d3:5a:a0:b1:e6:
         4d:4e:7e:c9:3b:c9:ea:e3:0c:30:00:d9:7d:c5:dc:14:1e:ed:
         84:36:c3:05:72:b9:71:d6:e0:94:db:21:f1:0c:33:a8:a9:6d:
         8a:2e:08:d3:d5:5c:a0:fc:2a:fc:09:21:27:ce:b4:d2:ac:82:
         08:7b:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org