Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa
File:                     3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          mLDhkusXRt/qMZsQEhYZ9wdgl7KY+nbtmAT59nViuLw=
Subject key identifier:   1E:CA:F9:99:21:09:FE:39:FF:A0:4A:9E:DA:FC:DF:00:57:57:0B:5A
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       2496975127D51C244FC5D236E887645B44C1A0BB
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:41 +0000
ROA not before:           Thu 04 Apr 2024 18:17:41 +0000
ROA not after:            Thu 03 Apr 2025 18:22:41 +0000
asID:                     61672
IP address blocks:        131.108.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:96:97:51:27:d5:1c:24:4f:c5:d2:36:e8:87:64:5b:44:c1:a0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:41 2024 GMT
            Not After : Apr  3 18:22:41 2025 GMT
        Subject: CN=1ECAF9992109FE39FFA04A9EDAFCDF0057570B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:b6:15:13:3d:99:b2:d9:d3:cf:d1:4f:4e:
                    cc:a9:cd:75:96:6f:62:58:4a:e0:e0:86:4b:66:76:
                    b2:b9:f6:e0:c6:78:a3:73:aa:bc:96:d6:aa:f8:58:
                    b1:95:0b:d3:0d:c4:ee:6e:3b:c2:92:b7:72:c8:f0:
                    8b:cb:6f:4d:9e:1f:b6:42:18:a4:b4:93:9b:1d:c7:
                    00:9e:b2:3c:9d:8a:90:02:9f:bd:9c:b8:56:98:62:
                    0a:82:60:fb:d6:5d:d6:8b:bb:0d:a6:1c:da:40:12:
                    96:b5:24:34:ca:36:d5:00:ae:b8:67:ad:68:a8:c7:
                    a3:5a:e3:17:c5:98:0e:1d:1d:7b:10:22:76:7a:52:
                    11:93:7b:4e:fa:c8:3d:6d:55:ff:e4:ce:fc:35:ab:
                    79:df:f2:52:d5:13:8f:23:29:9e:e9:17:e8:e5:20:
                    ce:ba:93:29:d4:fa:d7:b2:39:2b:6e:26:dc:a6:38:
                    70:b3:cf:d2:68:fe:0e:69:ce:bc:56:bb:42:02:71:
                    f9:39:7f:73:cb:f3:3d:d4:a6:2f:95:71:bd:58:ad:
                    5d:52:a7:a6:aa:b3:5a:1b:05:c3:a8:1c:c2:93:6b:
                    c3:1f:eb:82:06:93:11:73:be:1a:01:20:d6:24:83:
                    fb:75:27:f6:6a:03:0d:b4:33:73:3c:09:80:b0:5a:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CA:F9:99:21:09:FE:39:FF:A0:4A:9E:DA:FC:DF:00:57:57:0B:5A
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130322e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:77:a6:90:92:96:24:65:24:5b:26:bf:89:05:84:19:7a:
         95:dc:7c:a8:b1:dc:e2:39:b0:14:24:3a:65:82:71:62:95:1e:
         15:b1:22:5b:d6:04:76:58:c4:78:df:8b:24:2e:c4:a4:b7:f6:
         83:2f:a7:79:25:0a:30:17:85:21:2f:3a:fa:40:18:f0:e8:27:
         a4:5c:fa:e7:08:31:cc:d8:57:b7:b8:73:31:0d:92:02:4b:39:
         84:d5:9b:4c:c9:0f:c4:e9:1b:ec:92:e3:21:a3:5d:01:18:d2:
         49:29:37:00:ae:a2:5e:be:7b:80:f5:53:91:8f:28:f5:45:c3:
         69:d3:76:e9:08:7d:ed:28:4b:8e:fd:e7:ed:8e:a8:c1:74:24:
         5d:52:60:cc:9c:f8:f4:55:87:bd:53:ed:87:83:15:77:c6:7c:
         04:0a:fd:a8:a1:cb:67:8e:bc:18:a1:b9:be:4b:34:90:a0:71:
         35:06:64:43:83:db:0d:4f:13:79:c6:1c:17:13:bd:24:90:db:
         8f:d9:dd:3e:42:6f:ac:18:7f:50:0e:46:74:dc:0c:07:c4:1d:
         91:dc:9d:4a:c7:3f:8d:00:51:55:30:8b:17:bf:86:20:c3:60:
         43:8e:b7:9c:a8:0f:d4:e3:07:2a:bd:a7:d6:77:ce:fa:cf:cd:
         ae:78:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:01 2024 by rpki-client on console-fra.rpki-client.org