Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130302e302f32342d3234203d3e203631363732.roa
File:                     3133312e3130382e3130302e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          P57OWj0gFeMKnmUG7N+MvOY2gmjgPffenG9dKGB/BiI=
Subject key identifier:   02:0E:3D:64:EF:26:9A:5E:C9:7B:DD:33:AC:38:C6:91:CB:E8:8D:A6
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       7A7C016A468C175A012EAED9FDB9C4FD2925C7B1
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130302e302f32342d3234203d3e203631363732.roa
Signing time:             Fri 05 Apr 2024 11:26:59 +0000
ROA not before:           Fri 05 Apr 2024 11:21:59 +0000
ROA not after:            Fri 04 Apr 2025 11:26:59 +0000
asID:                     61672
IP address blocks:        131.108.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7c:01:6a:46:8c:17:5a:01:2e:ae:d9:fd:b9:c4:fd:29:25:c7:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  5 11:21:59 2024 GMT
            Not After : Apr  4 11:26:59 2025 GMT
        Subject: CN=020E3D64EF269A5EC97BDD33AC38C691CBE88DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:8e:c9:36:5a:c4:ad:9e:f4:db:a9:84:f4:
                    99:8a:6b:19:19:2a:b3:a2:c8:ee:0f:22:58:52:dc:
                    d1:9e:ba:a2:e8:70:77:dd:7a:fc:c6:92:c7:10:f0:
                    44:5e:f0:7e:a2:a4:67:c2:3e:b2:9f:46:2a:f2:ca:
                    af:34:24:96:88:7c:53:45:61:60:6c:8f:88:83:c1:
                    18:d4:94:d1:21:02:cf:1d:43:cd:13:5d:e9:5f:04:
                    cd:4f:ef:c6:4f:60:69:cd:10:91:fa:b0:5f:a9:47:
                    e4:72:96:b2:df:7c:a5:c2:29:b7:9d:34:48:d8:b8:
                    f6:8d:17:ac:ca:c5:e1:94:35:3d:39:0b:03:34:08:
                    ff:fc:40:0e:92:3e:d0:a7:ce:e3:6e:b2:92:72:8c:
                    03:9c:ad:21:15:77:48:c1:4d:11:d2:ac:e4:37:e0:
                    73:aa:9d:5c:34:38:64:7e:3a:80:08:b1:60:69:4e:
                    d8:ac:42:73:7a:87:d3:4d:79:5f:56:2a:97:b1:ef:
                    6c:6d:12:9d:de:f5:ee:01:25:6b:45:2a:0b:b1:20:
                    6f:33:98:0d:82:db:bd:48:7a:03:eb:7d:7c:d0:e2:
                    f6:82:79:7e:94:ab:03:a5:a0:06:d1:62:c9:a6:a0:
                    de:93:ec:ad:cc:3a:83:ea:0a:a4:66:0d:7b:82:7d:
                    fe:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0E:3D:64:EF:26:9A:5E:C9:7B:DD:33:AC:38:C6:91:CB:E8:8D:A6
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130302e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ba:a4:7a:5a:46:1a:5d:2c:76:c4:76:a6:04:40:c8:eb:35:
         fa:ca:7f:da:f5:ac:46:e2:c0:d6:30:42:1d:d8:a3:6b:49:ce:
         64:e6:43:16:f1:90:ac:d3:b7:83:1a:3c:f7:87:c1:f4:c9:c6:
         ef:9a:67:a6:f7:f8:6e:09:f8:c3:3d:ea:fa:e5:ac:0e:03:d7:
         82:9e:d7:4f:54:44:3f:4a:63:e2:6f:72:8a:2f:05:e9:bf:d1:
         27:80:79:c1:37:99:bd:d5:19:0d:32:02:a0:7b:7b:7c:a9:c7:
         55:9c:ed:73:de:a7:23:98:4a:c8:2b:aa:bf:1a:0c:60:a8:27:
         03:5c:84:bb:b7:01:b3:e9:26:b2:9e:72:99:f3:c5:51:a0:e1:
         99:1e:06:f2:6c:54:58:db:fa:4d:51:4b:37:7d:1f:4e:78:8e:
         52:28:71:e3:40:5d:1c:0f:7d:f9:80:e3:0e:0c:1c:c9:87:a8:
         4e:76:7c:f0:08:44:d8:55:22:00:9f:68:3d:62:fb:94:b0:ab:
         93:a4:d5:06:0b:d8:93:a5:06:b5:0a:c7:eb:d8:a1:71:eb:42:
         66:64:cb:2a:e1:2c:be:fa:51:30:7c:5e:ee:6d:d5:3f:b6:55:
         4c:80:59:8d:a1:40:68:5a:6b:59:9b:91:5e:ed:db:9e:62:13:
         e0:ba:03:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org