Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32322d3232203d3e203631363732.roa
File:                     3137372e31312e3130302e302f32322d3232203d3e203631363732.roa (raw, json)
Hash identifier:          8A1N3zhvrpvjZKV+H/imQ8VdRbQDxQ3/YnozHHKuEVA=
Subject key identifier:   61:A3:8C:57:67:4B:63:BC:E2:1D:0A:E5:BA:07:96:3A:13:EC:E1:BA
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       1E1D5D90DB3EE263D4BF1C6B7BB8598A69F2A81F
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32322d3232203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:42 +0000
ROA not before:           Thu 04 Apr 2024 18:17:42 +0000
ROA not after:            Thu 03 Apr 2025 18:22:42 +0000
asID:                     61672
IP address blocks:        177.11.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1d:5d:90:db:3e:e2:63:d4:bf:1c:6b:7b:b8:59:8a:69:f2:a8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:42 2024 GMT
            Not After : Apr  3 18:22:42 2025 GMT
        Subject: CN=61A38C57674B63BCE21D0AE5BA07963A13ECE1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:fc:44:0c:10:ec:f7:82:55:a0:b8:55:c1:
                    c2:c3:21:66:5b:8b:89:53:20:18:f5:60:20:c9:5a:
                    a1:ff:fc:da:2a:27:3a:32:20:e0:20:d1:b2:89:41:
                    f3:96:89:68:41:a5:ab:28:03:42:5b:dd:d2:16:06:
                    be:3d:6a:3e:8d:cf:90:dd:9a:bd:f1:a3:76:61:d0:
                    1f:1c:87:c8:09:30:9f:0d:17:11:28:16:38:56:93:
                    20:f7:31:3c:52:a1:27:98:e0:1f:ea:52:6a:ea:b2:
                    cc:f1:c0:ed:48:ef:5e:ac:79:ce:8f:4a:20:58:a2:
                    9a:7b:10:13:77:ae:be:72:40:0a:95:71:c9:38:8d:
                    03:2d:a1:d3:f5:a3:31:92:b8:f4:6a:aa:08:5c:46:
                    ee:7e:95:6b:b2:0f:be:7f:47:16:11:9c:95:04:9a:
                    75:79:0a:ab:ad:8e:ab:e2:40:f2:0b:fe:38:8b:c3:
                    37:f3:64:6b:f7:4d:11:e6:c9:1a:72:08:5a:80:8a:
                    44:de:fa:8a:97:5f:30:8c:58:bb:6a:ee:a9:95:73:
                    0d:d0:ae:70:5e:13:8e:6b:31:06:3f:a9:c1:10:af:
                    01:8c:0c:85:cc:19:41:cb:d3:3f:26:db:fb:35:82:
                    f8:e9:a0:7f:80:67:e7:fc:84:98:04:4d:87:06:30:
                    4c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A3:8C:57:67:4B:63:BC:E2:1D:0A:E5:BA:07:96:3A:13:EC:E1:BA
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32322d3232203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:d3:c1:f0:cf:7d:f4:92:45:34:63:1d:d6:4d:d2:c0:f1:64:
         a0:d5:82:d8:08:d1:cc:bc:85:3e:7f:74:1c:ac:25:bb:dd:2e:
         3b:15:37:9e:af:85:27:f3:a2:1c:2f:23:90:fc:39:e0:93:ac:
         b5:19:ca:d0:d4:bd:43:e4:fb:8f:30:4b:44:40:0b:65:c1:de:
         4f:12:a8:94:98:5a:f8:ed:3c:5e:54:78:3f:db:90:a0:e1:22:
         d2:cb:8e:e2:35:f9:0b:7b:ae:54:2b:75:57:86:0d:e0:bd:16:
         a6:bb:8f:ac:5c:08:3a:16:cb:55:97:19:37:f7:09:be:7f:a1:
         a1:f7:3c:35:64:b9:25:35:71:9b:d5:83:3e:c7:eb:ac:16:08:
         a3:c2:5c:f3:22:6e:13:c5:89:01:b8:de:4a:c5:22:6b:0d:b3:
         28:75:22:e3:5a:1c:01:fe:8d:2e:18:1d:d1:ce:e0:30:c5:b4:
         56:68:07:77:ef:08:e5:d6:b5:ea:bd:2a:2e:33:a2:13:7e:fa:
         55:84:3a:d2:55:e5:3c:fa:a5:0a:d4:99:56:06:d7:03:f0:24:
         71:3e:b6:06:38:dc:62:88:d7:59:d7:c9:d3:b5:fa:dd:44:78:
         61:6e:6a:0d:e2:b5:4e:36:bb:df:ae:b5:5f:2e:cb:d7:73:05:
         7d:97:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:36 2024 by rpki-client on console-fra.rpki-client.org