Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138382e302f32332d3233203d3e203631363834.roa
File:                     3133312e3130382e3138382e302f32332d3233203d3e203631363834.roa (raw, json)
Hash identifier:          K7DaBV+amXm2dQopfUkZqIZt4vKH0zUkFA0RCoaSrm8=
Subject key identifier:   E8:6C:95:F5:45:5F:8F:E6:6D:F5:4C:A0:4E:EF:0C:C6:85:01:F6:1A
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       08A6A7C561EA0F7951A4F71F6B574ADFE347472E
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138382e302f32332d3233203d3e203631363834.roa
Signing time:             Wed 24 Apr 2024 14:40:34 +0000
ROA not before:           Wed 24 Apr 2024 14:35:34 +0000
ROA not after:            Wed 23 Apr 2025 14:40:34 +0000
asID:                     61684
IP address blocks:        131.108.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a6:a7:c5:61:ea:0f:79:51:a4:f7:1f:6b:57:4a:df:e3:47:47:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Apr 24 14:35:34 2024 GMT
            Not After : Apr 23 14:40:34 2025 GMT
        Subject: CN=E86C95F5455F8FE66DF54CA04EEF0CC68501F61A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:63:b7:30:9e:13:16:59:ff:e1:48:83:36:
                    83:1c:1d:73:17:63:f8:bd:cc:db:e3:58:6a:4d:2e:
                    d0:cd:3e:a3:51:46:ac:6f:ce:95:36:98:a7:61:3e:
                    bf:29:f2:78:66:ef:ff:ba:3f:28:e1:bc:95:8d:8b:
                    55:28:1f:81:7c:a5:7c:dd:15:24:3c:a6:34:23:95:
                    5f:83:5f:31:b4:51:71:b2:b8:ed:c8:84:74:38:82:
                    57:ed:b3:18:fc:51:15:fa:c9:a2:e0:23:ce:bf:69:
                    a4:a3:da:28:65:a6:3e:b9:2b:4c:a0:23:6f:5f:ae:
                    8e:8a:52:81:c1:0e:dd:d4:57:59:3d:3f:80:c8:4e:
                    14:50:24:87:cd:de:a8:fd:74:dc:45:4f:ca:33:38:
                    02:5f:7c:2a:e8:3f:e7:a0:f0:98:bb:3a:1a:4c:5a:
                    cb:5f:2d:78:2f:93:19:51:73:45:72:8a:9d:df:13:
                    da:39:42:09:a4:ef:e4:0a:b8:76:70:8c:6d:54:1e:
                    87:4e:dd:6f:44:7b:4b:53:15:0b:f0:fb:43:ed:0f:
                    a2:98:35:ff:2d:43:92:cb:e4:d8:2b:94:64:f0:98:
                    9e:f9:00:bc:08:44:72:71:9f:5c:f8:9d:f0:e4:29:
                    0d:f3:a7:e4:e4:ff:6f:60:6d:ae:74:71:08:ee:2e:
                    36:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6C:95:F5:45:5F:8F:E6:6D:F5:4C:A0:4E:EF:0C:C6:85:01:F6:1A
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138382e302f32332d3233203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:87:19:ae:96:f7:49:6b:7a:6f:c3:c4:9d:92:6b:0e:47:51:
         16:45:4a:3f:cb:49:2d:2b:34:58:96:7d:7b:ea:ce:45:c1:e2:
         2d:ab:da:65:e5:59:81:db:7c:78:d2:16:f2:4f:f3:d9:04:6c:
         d5:5f:79:dc:8e:a5:50:e4:c2:bc:4b:27:aa:75:9a:68:56:b9:
         99:f5:84:3c:39:ae:27:49:7c:cd:9a:ed:f3:bb:c1:05:4e:28:
         72:6d:7b:e6:97:69:4c:9e:09:7f:ed:4c:59:f0:27:3b:04:c7:
         43:7e:4c:f8:34:b0:bf:77:37:c8:00:b7:52:31:60:41:eb:39:
         4e:48:2c:2a:de:ff:73:fb:23:43:ba:5b:78:0d:ad:df:6c:1c:
         22:24:34:bc:a9:a8:ba:b8:b0:e3:e9:3d:d5:7d:05:0c:26:e6:
         b9:2f:88:5e:36:a4:1f:b4:ca:85:27:14:15:52:0f:00:c2:d1:
         d6:04:10:0f:21:8d:f8:e3:97:f1:ed:16:22:34:93:19:1d:ab:
         28:cd:0d:15:bb:10:cd:dc:47:70:f5:33:5c:c9:fa:9c:9e:9c:
         8a:0f:1c:fd:ee:bd:87:4c:7e:b6:71:5d:da:1c:8d:e3:63:06:
         10:05:4e:6c:92:3a:9a:d1:94:ae:d9:a1:92:71:6d:b9:49:3f:
         6c:be:9c:2b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCKanxWHqD3lRpPcfa1dK3+NHRy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5RjZGMDFCODc1MDA4QUYyQzEzMjAwOUQwNTA5RTY4
MUUyRkE5OTAeFw0yNDA0MjQxNDM1MzRaFw0yNTA0MjMxNDQwMzRaMDMxMTAvBgNV
BAMTKEU4NkM5NUY1NDU1RjhGRTY2REY1NENBMDRFRUYwQ0M2ODUwMUY2MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm0WO3MJ4TFln/4UiDNoMcHXMX
Y/i9zNvjWGpNLtDNPqNRRqxvzpU2mKdhPr8p8nhm7/+6PyjhvJWNi1UoH4F8pXzd
FSQ8pjQjlV+DXzG0UXGyuO3IhHQ4glftsxj8URX6yaLgI86/aaSj2ihlpj65K0yg
I29fro6KUoHBDt3UV1k9P4DIThRQJIfN3qj9dNxFT8ozOAJffCroP+eg8Ji7OhpM
WstfLXgvkxlRc0Vyip3fE9o5Qgmk7+QKuHZwjG1UHodO3W9Ee0tTFQvw+0PtD6KY
Nf8tQ5LL5NgrlGTwmJ75ALwIRHJxn1z4nfDkKQ3zp+Tk/29gba50cQjuLjazAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6GyV9UVfj+Zt9UygTu8MxoUB9howHwYDVR0j
BBgwFoAU+59vAbh1AIrywTIAnQUJ5oHi+pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEpUTGlyYnlqeWhnQmVVak4xZE5VaXZGUU55Q0RkR0hqaTdjYU1pZWF0
UUIvMC9GQjlGNkYwMUI4NzUwMDhBRjJDMTMyMDA5RDA1MDlFNjgxRTJGQTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCOUY2RjAxQjg3NTAwOEFG
MkMxMzIwMDlEMDUwOUU2ODFFMkZBOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRKVExpcmJ5anloZ0JlVWpOMWROVWl2RlFOeUNEZEdIamk3Y2FNaWVhdFFCLzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzgzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNjM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDbLwwDQYJKoZIhvcNAQELBQADggEBAB6HGa6W
90lrem/DxJ2Saw5HURZFSj/LSS0rNFiWfXvqzkXB4i2r2mXlWYHbfHjSFvJP89kE
bNVfedyOpVDkwrxLJ6p1mmhWuZn1hDw5ridJfM2a7fO7wQVOKHJte+aXaUyeCX/t
TFnwJzsEx0N+TPg0sL93N8gAt1IxYEHrOU5ILCre/3P7I0O6W3gNrd9sHCIkNLyp
qLq4sOPpPdV9BQwm5rkviF42pB+0yoUnFBVSDwDC0dYEEA8hjfjjl/HtFiI0kxkd
qyjNDRW7EM3cR3D1M1zJ+pyenIoPHP3uvYdMfrZxXdocjeNjBhAFTmySOprRlK7Z
oZJxbblJP2y+nCs=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org