Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa
File:                     3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa (raw, json)
Hash identifier:          b1RuoYEk3sJ1OjNblTOxTdsbnD5FkWON7RyLieYNfoA=
Subject key identifier:   63:6C:FE:A5:3D:BA:FD:F1:25:CA:DE:3C:51:08:98:07:77:AF:2E:34
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       48DBB4A8B03C96AB629B16D5EEC29E8180C520D6
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa
Signing time:             Thu 04 Apr 2024 07:48:35 +0000
ROA not before:           Thu 04 Apr 2024 07:43:35 +0000
ROA not after:            Thu 03 Apr 2025 07:48:35 +0000
asID:                     262354
IP address blocks:        131.100.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 12:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:db:b4:a8:b0:3c:96:ab:62:9b:16:d5:ee:c2:9e:81:80:c5:20:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Apr  4 07:43:35 2024 GMT
            Not After : Apr  3 07:48:35 2025 GMT
        Subject: CN=636CFEA53DBAFDF125CADE3C5108980777AF2E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:e7:e0:ad:30:61:bd:a5:df:09:c1:6e:a0:
                    c9:9b:f0:19:af:8a:0d:1b:53:a4:28:38:a9:b6:33:
                    8d:d5:d0:3a:b3:36:b3:41:fc:79:f4:4a:cf:e3:1a:
                    fb:b2:25:a4:9b:19:7a:42:a8:75:b1:97:7a:56:94:
                    b7:ab:68:28:3f:13:51:13:45:7d:fe:01:86:e2:db:
                    2f:67:3c:ea:3c:fd:d7:9e:24:30:fa:e1:82:0d:b9:
                    96:15:9d:cd:06:3d:bc:e4:29:be:65:fc:2f:d0:29:
                    60:ce:6f:8f:41:2b:64:fc:de:3b:9a:4d:86:34:83:
                    66:f4:de:9c:9d:59:34:a5:3f:67:a2:7a:0f:35:2f:
                    8d:1d:3e:a3:fc:c4:47:6c:c7:5f:b0:62:83:c1:1b:
                    f7:2f:97:0b:d9:cc:20:e7:c1:94:d5:a6:36:a2:94:
                    82:7e:2a:be:1d:75:dc:c3:07:a3:0a:34:9f:62:41:
                    d3:83:7b:2a:0b:e9:3e:4d:9e:fd:1f:be:8f:26:a3:
                    3f:00:a9:a5:f5:f4:92:32:60:81:80:9c:6b:51:90:
                    19:f3:6f:f1:85:47:65:d6:99:57:0c:d6:c6:e0:4e:
                    a6:e0:2f:68:3c:ac:0d:80:ef:0d:94:d5:dc:8d:07:
                    2a:b3:b5:12:76:54:d3:45:f8:cd:6f:01:58:c0:76:
                    a5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6C:FE:A5:3D:BA:FD:F1:25:CA:DE:3C:51:08:98:07:77:AF:2E:34
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3133312e3130302e36302e302f32322d3234203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:ed:fe:ab:18:0b:7f:1d:a2:74:68:2f:ab:ce:c9:cc:59:b1:
         19:06:07:ac:b7:45:5c:ac:f6:c0:f3:dc:55:81:c5:ea:27:ec:
         61:88:ed:6f:7e:ab:0a:18:d5:06:ed:bd:06:c2:8f:a9:d3:7d:
         49:ee:a7:c1:0f:4a:1c:d9:33:13:bc:6b:89:b7:12:01:2b:f4:
         1e:4c:58:5c:a3:54:77:f0:03:fd:e1:ef:e7:6a:4a:72:f4:0b:
         03:c9:ed:7a:ae:f1:d2:bd:1c:6a:d7:82:11:08:01:21:bb:59:
         b0:00:39:c2:c9:80:9d:ee:df:0b:b3:b2:95:de:9f:3c:90:9e:
         44:81:cd:03:cb:8c:b9:0e:d6:e3:8a:d2:7b:ca:b3:82:ea:a6:
         ba:2d:85:a4:0c:a6:f6:cd:98:87:ed:3a:af:96:7a:9a:95:65:
         53:ce:cf:5d:e1:d0:32:1b:f5:8b:52:b3:b9:08:ca:f1:20:a9:
         7c:83:0b:f6:39:57:45:dc:56:98:f3:ca:7c:4b:64:28:4c:44:
         0d:e5:50:a0:5e:61:3a:53:3e:be:e6:5d:2c:76:c0:4e:eb:08:
         4f:76:1b:86:b0:3b:f1:9b:be:9f:56:a9:14:31:fd:24:fb:59:
         11:0b:87:90:a7:15:f0:5a:35:7b:1e:47:5d:d5:de:1d:82:6b:
         5a:36:47:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSNu0qLA8lqtimxbV7sKegYDFINYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE3QUFDMUUwRDdCNkQ5MjY2MkYxMDMzMTZENUQ0RTY3
MDMzQjlGNzAeFw0yNDA0MDQwNzQzMzVaFw0yNTA0MDMwNzQ4MzVaMDMxMTAvBgNV
BAMTKDYzNkNGRUE1M0RCQUZERjEyNUNBREUzQzUxMDg5ODA3NzdBRjJFMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCde+fgrTBhvaXfCcFuoMmb8Bmv
ig0bU6QoOKm2M43V0DqzNrNB/Hn0Ss/jGvuyJaSbGXpCqHWxl3pWlLeraCg/E1ET
RX3+AYbi2y9nPOo8/deeJDD64YINuZYVnc0GPbzkKb5l/C/QKWDOb49BK2T83jua
TYY0g2b03pydWTSlP2eieg81L40dPqP8xEdsx1+wYoPBG/cvlwvZzCDnwZTVpjai
lIJ+Kr4dddzDB6MKNJ9iQdODeyoL6T5Nnv0fvo8moz8AqaX19JIyYIGAnGtRkBnz
b/GFR2XWmVcM1sbgTqbgL2g8rA2A7w2U1dyNByqztRJ2VNNF+M1vAVjAdqWnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUY2z+pT26/fElyt48UQiYB3evLjQwHwYDVR0j
BBgwFoAUIXqsHg17bZJmLxAzFtXU5nAzufcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNLRzRtUDFRbjRjV1pYU3d1QTJtM1dFYThKWFVWTkZZQkczSHpLY0ZI
bVkvMS8yMTdBQUMxRTBEN0I2RDkyNjYyRjEwMzMxNkQ1RDRFNjcwMzNCOUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxN0FBQzFFMEQ3QjZEOTI2
NjJGMTAzMzE2RDVENEU2NzAzM0I5RjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzS0c0bVAxUW40Y1daWFN3dUEybTNXRWE4SlhVVk5GWUJHM0h6S2NGSG1ZLzEv
MzEzMzMxMmUzMTMwMzAyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDZDwwDQYJKoZIhvcNAQELBQADggEBAG/t/qsY
C38donRoL6vOycxZsRkGB6y3RVys9sDz3FWBxeon7GGI7W9+qwoY1QbtvQbCj6nT
fUnup8EPShzZMxO8a4m3EgEr9B5MWFyjVHfwA/3h7+dqSnL0CwPJ7Xqu8dK9HGrX
ghEIASG7WbAAOcLJgJ3u3wuzspXenzyQnkSBzQPLjLkO1uOK0nvKs4LqprothaQM
pvbNmIftOq+WepqVZVPOz13h0DIb9YtSs7kIyvEgqXyDC/Y5V0XcVpjzynxLZChM
RA3lUKBeYTpTPr7mXSx2wE7rCE92G4awO/Gbvp9WqRQx/ST7WRELh5CnFfBaNXse
R13V3h2Ca1o2R5A=
-----END CERTIFICATE-----
Generated at Thu Jun 27 14:46:24 2024 by rpki-client on console-fra.rpki-client.org