Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35382e302f32342d3234203d3e203631383734.roa
File:                     3133312e302e35382e302f32342d3234203d3e203631383734.roa (raw, json)
Hash identifier:          Wg0zfv+nrTDjPp4RMRZ/N2XSsaDTXGI4S2McScBy+4o=
Subject key identifier:   1C:4F:06:D7:4F:B9:74:C9:68:52:32:68:8D:C2:54:8E:99:77:15:D3
Certificate issuer:       /CN=9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B
Certificate serial:       096516788A885B55253566EDEE752B8338E44678
Authority key identifier: 9C:BB:D5:9D:EB:A5:7B:3E:80:B6:46:6E:5D:9A:AC:BD:3B:19:A7:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35382e302f32342d3234203d3e203631383734.roa
Signing time:             Thu 04 Apr 2024 16:16:48 +0000
ROA not before:           Thu 04 Apr 2024 16:11:48 +0000
ROA not after:            Thu 03 Apr 2025 16:16:48 +0000
asID:                     61874
IP address blocks:        131.0.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.crl
                          rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:65:16:78:8a:88:5b:55:25:35:66:ed:ee:75:2b:83:38:e4:46:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B
        Validity
            Not Before: Apr  4 16:11:48 2024 GMT
            Not After : Apr  3 16:16:48 2025 GMT
        Subject: CN=1C4F06D74FB974C9685232688DC2548E997715D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:fa:6f:88:13:e7:87:9a:ba:5f:59:f7:85:
                    da:1f:05:c3:d5:e5:c6:78:7b:51:de:ac:81:5b:e6:
                    3b:80:b9:e3:38:0a:e4:f6:cf:d6:06:ca:98:c0:39:
                    ac:b1:0e:21:1b:24:c7:ac:53:c6:ec:ab:76:9d:4b:
                    0c:21:d7:46:4f:27:87:9a:bd:e1:29:5f:5c:61:02:
                    c2:63:b5:0d:50:b1:ed:1b:59:28:b9:30:3a:9b:6f:
                    33:05:c0:83:81:97:f4:d3:02:a1:51:cf:da:6e:e6:
                    2b:2b:5a:f9:ac:92:f3:70:04:9b:e0:86:fa:a2:09:
                    30:96:3b:b9:81:62:11:43:99:84:2f:75:14:95:23:
                    24:9b:35:7a:6a:07:5f:81:26:9f:bc:cd:30:6f:94:
                    a5:ac:55:2a:2b:5c:2b:f7:64:0e:d2:9b:95:d3:34:
                    72:4b:af:d7:1a:95:24:a0:29:5d:08:3a:67:60:62:
                    86:d6:64:d5:a0:a8:7a:79:fd:d3:5f:e5:88:49:d2:
                    26:4a:23:ad:11:5e:bd:28:46:43:c9:16:46:21:10:
                    65:5f:63:d9:9f:76:34:48:ab:e2:33:e2:d6:6a:b6:
                    e3:b9:61:8f:f8:8d:ef:24:50:27:7a:c9:d1:20:ca:
                    0a:41:77:19:9b:2c:a6:6e:c7:c1:3d:79:cd:73:1d:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4F:06:D7:4F:B9:74:C9:68:52:32:68:8D:C2:54:8E:99:77:15:D3
            X509v3 Authority Key Identifier:
                keyid:9C:BB:D5:9D:EB:A5:7B:3E:80:B6:46:6E:5D:9A:AC:BD:3B:19:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBBD59DEBA57B3E80B6466E5D9AACBD3B19A73B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6qh5QhSPLfZwGdBtSf5MHKA2gxKcQCQCNiv8oi2b2GkK/1/3133312e302e35382e302f32342d3234203d3e203631383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:8c:02:fc:8d:2a:2c:ba:d3:fc:e3:54:98:8c:4a:75:1d:31:
         9f:c4:c7:7d:27:80:c8:d8:de:4e:49:00:46:0e:ff:15:a5:d5:
         91:91:10:4d:86:cb:b3:f9:dc:df:62:cd:9a:57:8d:33:44:b3:
         f4:4c:5d:34:86:4c:d7:6f:39:1b:27:63:45:40:a2:45:68:d0:
         9b:8a:26:dd:33:da:ef:6e:b5:b5:65:d3:5f:a9:18:3e:1c:cb:
         e2:fc:b1:d2:49:9d:86:cc:f4:66:b0:d0:9e:3f:9f:1c:a1:46:
         0f:9a:92:ae:60:01:b7:62:f5:f3:8f:e9:74:25:a8:2c:83:7f:
         a5:c9:9a:ad:6c:b7:b6:69:80:3a:3c:c5:23:83:58:bd:7f:c7:
         df:54:ec:89:25:7d:28:9a:7e:56:ff:07:b2:5c:cb:18:0d:9e:
         ae:6a:71:12:ff:c7:0c:83:a3:68:73:63:4a:c2:71:0a:54:1b:
         d4:69:9c:83:c5:24:48:20:08:be:f5:e5:dd:35:fc:f4:d7:5b:
         ce:ea:d7:09:c2:68:1e:7c:b1:53:75:63:ce:df:63:21:ca:56:
         8c:27:d6:cf:29:55:86:33:53:f2:ea:a4:dd:5b:b1:06:3e:81:
         6a:02:53:52:fc:ca:d1:af:ee:aa:0a:ba:75:a2:61:65:d2:cc:
         33:88:80:2e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUCWUWeIqIW1UlNWbt7nUrgzjkRngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQkQ1OURFQkE1N0IzRTgwQjY0NjZFNUQ5QUFDQkQz
QjE5QTczQjAeFw0yNDA0MDQxNjExNDhaFw0yNTA0MDMxNjE2NDhaMDMxMTAvBgNV
BAMTKDFDNEYwNkQ3NEZCOTc0Qzk2ODUyMzI2ODhEQzI1NDhFOTk3NzE1RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9vpviBPnh5q6X1n3hdofBcPV
5cZ4e1HerIFb5juAueM4CuT2z9YGypjAOayxDiEbJMesU8bsq3adSwwh10ZPJ4ea
veEpX1xhAsJjtQ1Qse0bWSi5MDqbbzMFwIOBl/TTAqFRz9pu5isrWvmskvNwBJvg
hvqiCTCWO7mBYhFDmYQvdRSVIySbNXpqB1+BJp+8zTBvlKWsVSorXCv3ZA7Sm5XT
NHJLr9calSSgKV0IOmdgYobWZNWgqHp5/dNf5YhJ0iZKI60RXr0oRkPJFkYhEGVf
Y9mfdjRIq+Iz4tZqtuO5YY/4je8kUCd6ydEgygpBdxmbLKZux8E9ec1zHYyfAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUHE8G10+5dMloUjJojcJUjpl3FdMwHwYDVR0j
BBgwFoAUnLvVneulez6AtkZuXZqsvTsZpzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnFoNVFoU1BMZlp3R2RCdFNmNU1IS0EyZ3hLY1FDUUNOaXY4b2kyYjJH
a0svMS85Q0JCRDU5REVCQTU3QjNFODBCNjQ2NkU1RDlBQUNCRDNCMTlBNzNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkJENTlERUJBNTdCM0U4
MEI2NDY2RTVEOUFBQ0JEM0IxOUE3M0IuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZxaDVRaFNQTGZad0dkQnRTZjVNSEtBMmd4S2NRQ1FDTml2OG9pMmIyR2tLLzEv
MzEzMzMxMmUzMDJlMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzODM3
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACDADowDQYJKoZIhvcNAQELBQADggEBAKGMAvyNKiy60/zj
VJiMSnUdMZ/Ex30ngMjY3k5JAEYO/xWl1ZGREE2Gy7P53N9izZpXjTNEs/RMXTSG
TNdvORsnY0VAokVo0JuKJt0z2u9utbVl01+pGD4cy+L8sdJJnYbM9Gaw0J4/nxyh
Rg+akq5gAbdi9fOP6XQlqCyDf6XJmq1st7ZpgDo8xSODWL1/x99U7IklfSiaflb/
B7JcyxgNnq5qcRL/xwyDo2hzY0rCcQpUG9RpnIPFJEggCL715d01/PTXW87q1wnC
aB58sVN1Y87fYyHKVown1s8pVYYzU/LqpN1bsQY+gWoCU1L8ytGv7qoKunWiYWXS
zDOIgC4=
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:27:59 2024 by rpki-client on console-ams.rpki-client.org