Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139302e302f32332d3233203d3e203631363834.roa
File:                     3133312e3130382e3139302e302f32332d3233203d3e203631363834.roa (raw, json)
Hash identifier:          U6jGpZ55wKWDb4z1Ov5uU05LtWLVfB7ozqsOXtoGjZA=
Subject key identifier:   23:5B:FE:6B:18:6C:E4:54:D5:3A:42:F5:16:FC:98:DE:0C:B7:F8:BA
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       12AF81ED7575FAD1249FF60AEEBBA738AEAC546C
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139302e302f32332d3233203d3e203631363834.roa
Signing time:             Wed 24 Apr 2024 14:40:32 +0000
ROA not before:           Wed 24 Apr 2024 14:35:32 +0000
ROA not after:            Wed 23 Apr 2025 14:40:32 +0000
asID:                     61684
IP address blocks:        131.108.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:af:81:ed:75:75:fa:d1:24:9f:f6:0a:ee:bb:a7:38:ae:ac:54:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Apr 24 14:35:32 2024 GMT
            Not After : Apr 23 14:40:32 2025 GMT
        Subject: CN=235BFE6B186CE454D53A42F516FC98DE0CB7F8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:66:fb:c7:7a:4a:7a:ee:3d:d7:b3:4a:bc:22:
                    ad:5d:4e:40:15:6a:69:e3:22:12:59:80:f9:35:e5:
                    60:66:b8:60:f1:d8:bb:d3:c3:29:a3:c0:61:27:4f:
                    47:81:71:1f:59:6f:2f:2f:d4:df:8b:cd:23:bd:ff:
                    b7:af:5c:f2:65:0b:5f:4d:b5:f8:ba:75:1b:0e:10:
                    fb:6e:ef:55:5b:f1:cb:8e:dd:31:de:45:91:85:3b:
                    af:d2:23:a4:35:62:05:8e:e4:19:2f:c0:0f:b2:ea:
                    85:ea:a5:b7:fa:59:b3:b5:87:ef:8c:52:da:ba:57:
                    7d:25:98:1c:0d:7b:a4:b1:a2:9e:cd:47:ee:a1:39:
                    22:bd:78:6e:c0:05:aa:09:f3:78:26:d5:04:09:d0:
                    55:6c:40:64:b3:f6:76:bf:e8:95:ca:70:0f:2b:65:
                    6c:18:ea:d5:0f:87:b1:d5:f8:7a:cf:f4:8d:86:d8:
                    58:89:53:06:5c:a0:d4:b5:b7:f2:75:5e:25:97:1e:
                    77:7d:00:07:53:76:15:dc:0c:07:11:b0:8f:21:1a:
                    d7:3e:89:7f:9b:3e:01:95:81:24:17:dd:d9:1f:65:
                    dd:ec:da:fd:56:0f:c5:e3:43:75:40:61:27:24:d9:
                    ab:04:74:da:63:a9:df:03:d5:02:bf:3a:4b:c7:42:
                    e5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5B:FE:6B:18:6C:E4:54:D5:3A:42:F5:16:FC:98:DE:0C:B7:F8:BA
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139302e302f32332d3233203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:31:98:33:9c:c4:8e:06:92:45:2b:c6:76:d0:59:43:c0:2f:
         53:07:a7:f6:12:a7:22:c9:2e:4e:af:e5:5a:39:7c:fd:ae:f0:
         2b:23:b8:a0:dc:c7:ea:ec:08:d0:c7:ca:ca:0e:fe:ba:07:27:
         0f:e3:52:17:5f:66:9e:93:0f:1f:a9:b5:18:d3:11:9a:8a:3b:
         3a:00:dd:7b:d9:b3:43:03:64:45:00:68:76:21:de:a4:eb:f8:
         90:63:1d:8f:2f:fa:40:74:5c:6d:f5:0b:72:73:51:c7:55:b7:
         f3:16:fd:80:0a:c9:2c:39:a1:02:d3:88:3d:b3:8c:9a:3d:70:
         ad:8a:e0:fa:f3:26:36:2a:63:c0:78:ea:90:6a:2d:3f:cc:ed:
         cc:2c:65:74:89:d6:17:66:86:fb:94:d9:de:3e:0c:90:88:6b:
         30:f0:70:86:3e:59:07:1c:d5:e2:0f:a0:c3:01:57:6f:2e:31:
         7e:bc:1f:f9:6e:9f:1c:37:fb:d5:a1:22:21:02:b9:75:93:f3:
         6f:7f:e3:9c:11:f7:82:ee:78:b1:3b:1b:74:cc:00:55:78:c4:
         64:e4:fc:37:53:97:24:f8:63:61:6e:64:43:8d:d3:ce:82:e2:
         c6:e8:00:d4:d4:98:f9:05:0a:64:54:73:56:35:bf:c7:46:4d:
         eb:64:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org