Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa
File:                     3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          nF57abSB1HVFkceHP9443tKAlNq8EqQG2J2ezmSJ74c=
Subject key identifier:   18:EB:7F:96:A9:C4:EE:83:5E:D8:F6:D2:9F:52:61:7C:04:24:4D:AA
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       1D01EB91374DA000CAE60F4F9640DAAECC47E8D5
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:40 +0000
ROA not before:           Thu 04 Apr 2024 18:17:40 +0000
ROA not after:            Thu 03 Apr 2025 18:22:40 +0000
asID:                     61672
IP address blocks:        131.108.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:01:eb:91:37:4d:a0:00:ca:e6:0f:4f:96:40:da:ae:cc:47:e8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:40 2024 GMT
            Not After : Apr  3 18:22:40 2025 GMT
        Subject: CN=18EB7F96A9C4EE835ED8F6D29F52617C04244DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:8f:ca:2e:77:7c:00:a1:7f:33:c7:9f:fc:
                    aa:3a:4b:56:bf:50:28:52:86:65:01:35:55:8f:e4:
                    75:00:29:d7:d4:a4:c9:77:6f:85:a8:60:f6:72:2e:
                    6f:b3:f5:33:d9:37:30:5c:5e:cd:80:28:40:e0:7e:
                    8a:56:b3:59:59:45:5f:ab:85:23:7b:7f:fd:c9:5b:
                    f6:c7:c8:d0:67:9d:bd:8e:18:70:aa:a0:4c:2f:ca:
                    68:3f:5e:0d:78:30:f5:c9:d3:32:7e:94:26:5f:67:
                    27:b1:e0:7a:74:8c:9d:d0:12:45:5a:3b:7c:e5:ed:
                    5a:07:b9:2f:1d:4c:5a:2a:0f:d5:37:b4:1f:b0:b1:
                    a1:48:e9:0a:08:4b:30:be:9c:90:73:74:8d:93:de:
                    38:be:21:88:6e:2c:9d:00:5d:14:a2:3b:91:b6:b9:
                    4f:6f:03:87:56:21:66:32:95:a9:81:78:19:9b:c8:
                    04:1f:4d:18:7e:82:6f:f4:33:27:fe:f6:bb:36:46:
                    8f:39:f7:27:1a:d6:bc:c4:c8:5e:c8:38:6c:c1:5f:
                    0b:0e:3e:85:b1:16:1b:77:ff:7f:09:7c:8c:c6:c8:
                    7c:4f:73:c4:34:db:09:28:e2:bf:ef:45:a3:2e:8e:
                    c0:81:de:44:c1:de:bb:08:24:25:51:75:ad:d2:88:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EB:7F:96:A9:C4:EE:83:5E:D8:F6:D2:9F:52:61:7C:04:24:4D:AA
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3133312e3130382e3130332e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:f9:ac:c9:09:4c:36:9e:06:eb:37:32:9c:52:2a:01:4c:29:
         d4:db:0f:78:9c:3c:ba:f8:2b:19:4e:94:0c:91:7b:3c:68:26:
         95:b0:97:de:3b:a1:95:19:82:48:55:a7:6f:cf:9c:f4:2b:46:
         70:89:dd:be:a4:b8:62:96:c3:cc:2f:52:b8:0e:22:3a:72:4b:
         30:8e:4f:f4:3e:54:5d:00:f7:10:64:da:e4:01:d5:40:ac:d2:
         00:09:8d:42:bc:3f:b8:fb:2f:6c:ee:34:59:2c:1c:61:97:42:
         4c:dd:66:c4:c9:22:66:d1:ff:12:6b:41:5c:5d:5e:c5:ae:51:
         cd:9d:15:4a:aa:38:2a:43:69:c7:80:ae:ad:72:55:82:ad:bd:
         c5:99:0e:de:31:c6:66:17:5a:0a:39:a2:30:af:6e:40:5d:e2:
         bc:2f:05:87:37:2d:61:bd:67:c6:aa:10:ec:c1:75:76:d4:71:
         58:69:c6:cd:76:ae:10:d3:b8:78:39:42:9b:b8:9a:b0:5f:42:
         06:1b:75:4c:88:69:1d:83:bb:28:55:3c:8c:ec:d4:47:87:4c:
         31:83:3d:1d:17:76:37:3f:ee:a6:65:71:5f:1b:1e:3e:9f:46:
         ed:bf:47:8e:69:3f:6e:80:ca:13:c0:3e:3b:bd:eb:47:7f:e7:
         60:72:03:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:55 2024 by rpki-client on console-ams.rpki-client.org