Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138392e302f32342d3234203d3e203631363834.roa
File:                     3133312e3130382e3138392e302f32342d3234203d3e203631363834.roa (raw, json)
Hash identifier:          abidSiXd7i4D0sZn8Juj2It/541Xb7FfksK/IyOnS4Y=
Subject key identifier:   B3:B0:26:92:07:D0:4F:FA:DF:0B:80:35:0D:D7:02:8E:6D:71:F6:25
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       12FD9EC6F9443B3DAEF2FE625D5C9D9108AC9A00
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138392e302f32342d3234203d3e203631363834.roa
Signing time:             Wed 24 Apr 2024 14:40:31 +0000
ROA not before:           Wed 24 Apr 2024 14:35:31 +0000
ROA not after:            Wed 23 Apr 2025 14:40:31 +0000
asID:                     61684
IP address blocks:        131.108.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fd:9e:c6:f9:44:3b:3d:ae:f2:fe:62:5d:5c:9d:91:08:ac:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Apr 24 14:35:31 2024 GMT
            Not After : Apr 23 14:40:31 2025 GMT
        Subject: CN=B3B0269207D04FFADF0B80350DD7028E6D71F625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:06:cf:10:14:cf:32:04:0c:74:23:cd:de:69:
                    22:ff:87:a5:e6:b7:82:dc:b4:2a:60:e5:d1:e2:10:
                    df:42:d3:54:27:f6:44:72:a0:03:67:c4:82:20:25:
                    ff:a4:e2:2e:17:59:c0:86:4d:31:9f:ad:2d:b7:ae:
                    2d:4f:89:3c:be:96:dc:5d:a0:19:3a:14:4b:54:1a:
                    d9:74:87:22:80:f3:e3:07:35:a8:27:3a:97:ec:16:
                    f3:cc:a8:c1:74:c6:b5:cd:57:20:c3:0d:05:a6:3f:
                    3f:a8:9d:c1:df:77:a1:6e:b7:b9:42:f8:21:67:ee:
                    e8:9e:3b:bc:97:66:c9:2d:ca:23:31:23:aa:d0:09:
                    83:08:36:d3:8b:16:9b:75:2e:85:95:f8:6c:26:a6:
                    5f:7d:15:cd:ee:f7:eb:6a:d9:78:f2:43:78:6f:d5:
                    7b:6a:5c:fc:01:03:83:30:46:81:43:57:81:85:b4:
                    b5:94:41:50:1d:f0:5b:e4:58:bb:f1:56:54:22:3b:
                    30:d3:25:41:d1:06:88:8f:1e:4c:3e:1d:b4:07:30:
                    f2:1e:ec:97:8b:d8:90:4f:20:2b:38:21:a1:71:ff:
                    cf:b0:d2:88:91:eb:26:83:6d:41:09:90:19:70:48:
                    38:a8:6d:8e:5f:e4:05:06:a5:94:86:27:df:18:61:
                    13:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B0:26:92:07:D0:4F:FA:DF:0B:80:35:0D:D7:02:8E:6D:71:F6:25
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3138392e302f32342d3234203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:46:84:b9:10:33:00:81:8d:5f:66:47:79:cb:d4:ec:01:f3:
         e9:bb:99:dc:12:75:95:95:9a:ba:17:57:be:1c:bf:b1:57:a0:
         e9:ab:22:db:1b:b8:44:27:54:bd:02:f8:a9:05:7b:17:9e:a9:
         ee:7b:ae:9b:c9:e7:cc:04:4d:b9:d3:c2:cf:1f:51:df:9d:f5:
         92:43:02:7f:3b:84:e2:fe:7c:87:38:98:69:53:c1:d1:da:b9:
         b1:e4:4a:4a:e6:4b:15:c4:6c:f1:ce:8e:e8:09:f5:24:24:c8:
         4b:5f:4f:a9:34:90:d7:c2:44:cb:7a:7d:b8:be:4e:d1:e2:38:
         dc:74:66:fa:2c:2e:36:f8:03:80:48:fa:f7:9c:f5:39:40:d0:
         58:ce:65:14:93:38:b5:90:10:bf:dd:b3:45:27:01:16:b7:60:
         ae:cb:20:b2:17:87:b5:71:86:31:f1:1c:4a:d5:09:10:ba:7c:
         0b:73:6e:a0:e9:38:61:cf:74:7c:cb:84:bf:3d:7c:a7:71:f3:
         62:64:f1:a0:40:27:eb:b6:26:6d:85:b3:8a:91:e9:6d:4e:69:
         b0:ed:87:24:e3:49:19:be:d4:e8:f7:4e:17:d2:e0:0f:66:e0:
         6e:5f:7a:6d:9e:86:3a:dc:13:95:04:c4:d6:91:89:39:02:55:
         17:db:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org