Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa
File:                     3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa (raw, json)
Hash identifier:          9RhmlfqaVxtKFekJbFMjk3nw6CXJDh2NNvWkyObT9/k=
Subject key identifier:   FB:69:2A:0F:FA:2B:69:3A:07:63:48:1C:48:46:E7:05:84:03:3B:F4
Certificate issuer:       /CN=39E00671823C7AB3E8086F0B9E90A44A52E8699C
Certificate serial:       09B1DA00D00ED13B94B2E7F26E614A859E51FC9A
Authority key identifier: 39:E0:06:71:82:3C:7A:B3:E8:08:6F:0B:9E:90:A4:4A:52:E8:69:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     61649
IP address blocks:        131.100.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.crl
                          rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b1:da:00:d0:0e:d1:3b:94:b2:e7:f2:6e:61:4a:85:9e:51:fc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E00671823C7AB3E8086F0B9E90A44A52E8699C
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=FB692A0FFA2B693A0763481C4846E70584033BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:19:fc:e1:95:f1:ec:e7:64:50:d2:01:4c:
                    fe:4a:43:89:15:23:87:f5:15:33:d4:88:c2:03:a0:
                    ce:32:e5:67:34:04:99:1e:be:77:c4:f5:ab:55:bc:
                    99:85:1a:c8:71:f0:ab:91:4a:f0:34:98:04:4e:3a:
                    db:6f:ce:96:53:4b:64:8a:b6:70:27:32:16:ab:e6:
                    81:94:fb:f5:00:dd:06:44:1c:c9:20:13:42:a6:f5:
                    f9:61:12:db:b1:b6:d8:b8:8a:7c:ab:8f:bb:56:68:
                    e8:6a:1c:c3:cb:eb:eb:bf:8c:d8:40:fc:74:26:3e:
                    ab:e5:f4:8c:d5:8a:3f:16:7b:45:b6:b5:33:cd:0b:
                    bd:99:3e:f8:64:97:ab:e1:f7:ac:7c:98:82:d5:bb:
                    a2:44:b8:35:0b:3b:2b:7c:1d:90:ab:57:e5:4e:94:
                    aa:62:77:66:2e:c8:b3:e2:26:eb:6b:39:7d:91:97:
                    bc:b8:e8:27:63:9e:c4:0a:54:9c:6c:fd:b0:3e:ea:
                    85:04:b8:ed:11:6c:45:aa:8d:1f:e2:0e:38:42:86:
                    ed:68:27:85:1c:11:7f:78:da:f3:04:ed:d0:a0:6e:
                    f4:1c:f9:13:47:4b:1d:a8:0b:99:06:f3:0e:8f:4e:
                    1c:dc:79:93:6a:72:58:55:26:7c:1f:c2:a4:2c:5d:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:69:2A:0F:FA:2B:69:3A:07:63:48:1C:48:46:E7:05:84:03:3B:F4
            X509v3 Authority Key Identifier:
                keyid:39:E0:06:71:82:3C:7A:B3:E8:08:6F:0B:9E:90:A4:4A:52:E8:69:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/3133312e3130302e3138382e302f32322d3234203d3e203631363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:61:84:28:26:fb:cf:d1:33:b4:28:4b:07:7f:28:76:18:84:
         e3:39:ec:ef:4a:9e:df:c7:3c:9f:7d:5f:fa:9f:5a:5d:a4:6d:
         0a:03:3d:d2:db:0d:b5:66:fe:74:d8:e6:60:0a:7c:e4:3a:a4:
         98:ce:d1:0f:c3:a2:1f:75:75:f9:73:82:f7:cc:c8:6a:09:c9:
         6e:a1:f1:10:69:88:ce:5e:74:73:b3:23:ab:ad:14:ca:e5:82:
         7e:22:a9:c5:ae:2d:17:18:5b:ae:8e:63:e8:69:db:65:3a:d6:
         9f:38:13:16:54:e8:41:36:34:13:b1:d6:8b:71:1e:5b:78:ce:
         57:05:a6:bc:da:6a:73:15:61:0e:75:cc:9a:25:49:e3:04:1c:
         9d:e3:01:04:22:74:63:30:34:89:5b:32:2a:ae:4d:c3:6b:da:
         ab:66:45:f2:ef:53:5f:76:91:33:e4:10:a4:16:e1:7c:70:9b:
         3d:43:39:30:cb:8b:08:b9:08:17:3d:48:ec:ef:0c:a0:70:d2:
         c6:36:bc:9c:3e:c1:1d:64:03:2f:de:36:7a:4a:40:8b:0f:7f:
         98:20:61:7e:b6:2b:88:69:a9:23:68:ce:27:58:73:7e:41:70:
         ae:ad:d0:e9:95:13:73:f3:af:44:30:71:8c:3d:62:98:46:84:
         e0:7c:45:85
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCbHaANAO0TuUsufybmFKhZ5R/JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlFMDA2NzE4MjNDN0FCM0U4MDg2RjBCOUU5MEE0NEE1
MkU4Njk5QzAeFw0yNDA0MDMxODI1NDhaFw0yNTA0MDIxODMwNDhaMDMxMTAvBgNV
BAMTKEZCNjkyQTBGRkEyQjY5M0EwNzYzNDgxQzQ4NDZFNzA1ODQwMzNCRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86xn84ZXx7OdkUNIBTP5KQ4kV
I4f1FTPUiMIDoM4y5Wc0BJkevnfE9atVvJmFGshx8KuRSvA0mAROOttvzpZTS2SK
tnAnMhar5oGU+/UA3QZEHMkgE0Km9flhEtuxtti4inyrj7tWaOhqHMPL6+u/jNhA
/HQmPqvl9IzVij8We0W2tTPNC72ZPvhkl6vh96x8mILVu6JEuDULOyt8HZCrV+VO
lKpid2YuyLPiJutrOX2Rl7y46CdjnsQKVJxs/bA+6oUEuO0RbEWqjR/iDjhChu1o
J4UcEX942vME7dCgbvQc+RNHSx2oC5kG8w6PThzceZNqclhVJnwfwqQsXVU1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+2kqD/oraToHY0gcSEbnBYQDO/QwHwYDVR0j
BBgwFoAUOeAGcYI8erPoCG8LnpCkSlLoaZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlZKZWZod0NuREJhaUVEYnVuN3JnUjJ6V3dYaTFxb2J6SGtaR2lKcTFK
SHcvMS8zOUUwMDY3MTgyM0M3QUIzRTgwODZGMEI5RTkwQTQ0QTUyRTg2OTlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5RTAwNjcxODIzQzdBQjNF
ODA4NkYwQjlFOTBBNDRBNTJFODY5OUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZWSmVmaHdDbkRCYWlFRGJ1bjdyZ1Iyeld3WGkxcW9iekhrWkdpSnExSkh3LzEv
MzEzMzMxMmUzMTMwMzAyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzNjM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDZLwwDQYJKoZIhvcNAQELBQADggEBAHBhhCgm
+8/RM7QoSwd/KHYYhOM57O9Knt/HPJ99X/qfWl2kbQoDPdLbDbVm/nTY5mAKfOQ6
pJjO0Q/Doh91dflzgvfMyGoJyW6h8RBpiM5edHOzI6utFMrlgn4iqcWuLRcYW66O
Y+hp22U61p84ExZU6EE2NBOx1otxHlt4zlcFprzaanMVYQ51zJolSeMEHJ3jAQQi
dGMwNIlbMiquTcNr2qtmRfLvU192kTPkEKQW4Xxwmz1DOTDLiwi5CBc9SOzvDKBw
0sY2vJw+wR1kAy/eNnpKQIsPf5ggYX62K4hpqSNozidYc35BcK6t0OmVE3Pzr0Qw
cYw9YphGhOB8RYU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:36 2024 by rpki-client on console-ams.rpki-client.org