Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa
File:                     3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa (raw, json)
Hash identifier:          zrkp7+PqFOKMzpuSaX67T+fDRlJfnv0cVLeej5fH+WM=
Subject key identifier:   89:8B:C0:CA:80:44:07:97:85:20:7C:88:20:1B:9C:78:7F:64:96:0E
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       73B93C3BA02CF874F25243D89BBA0CDB2EF995C4
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa
Signing time:             Wed 24 Apr 2024 14:40:30 +0000
ROA not before:           Wed 24 Apr 2024 14:35:30 +0000
ROA not after:            Wed 23 Apr 2025 14:40:30 +0000
asID:                     61684
IP address blocks:        131.108.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b9:3c:3b:a0:2c:f8:74:f2:52:43:d8:9b:ba:0c:db:2e:f9:95:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Apr 24 14:35:30 2024 GMT
            Not After : Apr 23 14:40:30 2025 GMT
        Subject: CN=898BC0CA8044079785207C88201B9C787F64960E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:37:60:1c:9d:12:7b:07:31:82:5a:df:b7:
                    e6:ab:c0:ad:16:f0:20:36:52:10:b1:cf:d4:08:c0:
                    f6:1b:b0:ca:cc:52:24:72:37:e3:63:bf:8e:82:14:
                    03:12:7c:c1:eb:80:02:a1:31:ac:87:e5:a4:33:c2:
                    fe:e6:68:fb:33:73:96:ea:36:32:6e:9e:e4:0b:3e:
                    0c:aa:bb:6b:96:31:54:85:8d:93:fd:aa:85:71:bd:
                    77:e1:c8:56:c2:78:bf:6a:dc:41:1d:47:8d:6a:68:
                    39:43:ea:00:44:7a:72:b8:6e:af:be:b4:55:1b:2b:
                    5a:18:aa:7f:47:7c:50:dc:10:53:b2:79:f3:87:4d:
                    20:8a:49:f4:ab:3b:0d:e7:67:ab:a8:47:3d:69:b0:
                    29:9f:28:14:57:32:b9:d6:b2:c2:31:bf:fa:c7:47:
                    7a:8f:e2:29:1a:95:10:5b:89:f5:17:18:aa:71:2a:
                    96:fe:6c:fd:94:0e:cd:b1:48:13:eb:23:97:61:12:
                    db:98:f5:48:03:c7:fc:b5:ea:16:2a:e5:3e:e8:57:
                    5a:b3:14:d3:ec:c4:0e:04:7b:13:b2:10:c6:f4:8c:
                    4f:d4:16:d7:c6:ed:2f:9c:94:b7:c7:ec:06:83:ba:
                    cb:ba:ac:80:7f:01:f2:f4:25:59:a9:19:ef:2d:0e:
                    4d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8B:C0:CA:80:44:07:97:85:20:7C:88:20:1B:9C:78:7F:64:96:0E
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3133312e3130382e3139312e302f32342d3234203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:7e:e1:25:87:a7:cd:0a:07:1e:1c:5f:3b:4c:38:c9:c1:af:
         f0:bf:7d:c1:03:0b:41:3b:71:16:92:26:39:1d:6c:8d:c1:ea:
         17:3a:88:bb:0e:e4:25:8f:dc:11:fd:71:39:a2:64:ee:cc:45:
         40:92:cd:2e:16:0f:90:1e:b8:b3:8f:5f:c5:a9:5d:02:d6:fc:
         a1:8b:00:e3:97:8e:ae:1c:7c:aa:6b:f9:39:cd:9d:f5:83:59:
         2f:65:2e:74:cf:70:a4:4d:72:a2:ee:29:46:ff:40:24:af:ed:
         98:34:dc:e7:c5:60:a4:17:ac:47:60:5a:a6:3f:a6:12:22:f6:
         46:d7:94:a3:45:76:e4:de:1e:00:48:7e:b9:ef:e6:46:f9:d6:
         2c:ac:a2:78:85:38:d4:ad:ab:cb:87:3e:a2:76:cc:c6:92:8d:
         31:ee:d1:fd:a4:78:4a:ac:00:3c:86:05:08:ca:a7:49:9a:13:
         6a:78:e2:df:b3:34:9d:72:47:34:e1:18:ef:40:ec:cd:77:5d:
         c0:1e:33:53:c8:71:72:4c:be:14:05:5e:54:83:b5:90:e5:8f:
         6f:c4:a5:2c:57:96:5d:ed:e1:20:4e:57:6b:1a:39:ab:41:33:
         a9:14:b1:07:51:62:51:af:e2:b7:b7:95:c3:05:81:ef:6a:1f:
         a3:06:56:8b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc7k8O6As+HTyUkPYm7oM2y75lcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5RjZGMDFCODc1MDA4QUYyQzEzMjAwOUQwNTA5RTY4
MUUyRkE5OTAeFw0yNDA0MjQxNDM1MzBaFw0yNTA0MjMxNDQwMzBaMDMxMTAvBgNV
BAMTKDg5OEJDMENBODA0NDA3OTc4NTIwN0M4ODIwMUI5Qzc4N0Y2NDk2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXzzdgHJ0Sewcxglrft+arwK0W
8CA2UhCxz9QIwPYbsMrMUiRyN+Njv46CFAMSfMHrgAKhMayH5aQzwv7maPszc5bq
NjJunuQLPgyqu2uWMVSFjZP9qoVxvXfhyFbCeL9q3EEdR41qaDlD6gBEenK4bq++
tFUbK1oYqn9HfFDcEFOyefOHTSCKSfSrOw3nZ6uoRz1psCmfKBRXMrnWssIxv/rH
R3qP4ikalRBbifUXGKpxKpb+bP2UDs2xSBPrI5dhEtuY9UgDx/y16hYq5T7oV1qz
FNPsxA4EexOyEMb0jE/UFtfG7S+clLfH7AaDusu6rIB/AfL0JVmpGe8tDk1ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiYvAyoBEB5eFIHyIIBuceH9klg4wHwYDVR0j
BBgwFoAU+59vAbh1AIrywTIAnQUJ5oHi+pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEpUTGlyYnlqeWhnQmVVak4xZE5VaXZGUU55Q0RkR0hqaTdjYU1pZWF0
UUIvMC9GQjlGNkYwMUI4NzUwMDhBRjJDMTMyMDA5RDA1MDlFNjgxRTJGQTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCOUY2RjAxQjg3NTAwOEFG
MkMxMzIwMDlEMDUwOUU2ODFFMkZBOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRKVExpcmJ5anloZ0JlVWpOMWROVWl2RlFOeUNEZEdIamk3Y2FNaWVhdFFCLzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDbL8wDQYJKoZIhvcNAQELBQADggEBAA9+4SWH
p80KBx4cXztMOMnBr/C/fcEDC0E7cRaSJjkdbI3B6hc6iLsO5CWP3BH9cTmiZO7M
RUCSzS4WD5AeuLOPX8WpXQLW/KGLAOOXjq4cfKpr+TnNnfWDWS9lLnTPcKRNcqLu
KUb/QCSv7Zg03OfFYKQXrEdgWqY/phIi9kbXlKNFduTeHgBIfrnv5kb51iysoniF
ONStq8uHPqJ2zMaSjTHu0f2keEqsADyGBQjKp0maE2p44t+zNJ1yRzThGO9A7M13
XcAeM1PIcXJMvhQFXlSDtZDlj2/EpSxXll3t4SBOV2saOatBM6kUsQdRYlGv4re3
lcMFge9qH6MGVos=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org