Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa
File:                     3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa (raw, json)
Hash identifier:          Xt7pMBZtKk8F7vbdge9ZWWfGAml8bOGZhWQL4jMocpA=
Subject key identifier:   3E:BF:78:DD:EB:48:6D:8D:FA:3A:33:E5:5F:46:79:D9:F7:E2:15:E9
Certificate issuer:       /CN=39E9C8F360117C7F207DEE7951C1AD935707A727
Certificate serial:       09DFDA96CC5160D8461D36C2FFBE613863D37365
Authority key identifier: 39:E9:C8:F3:60:11:7C:7F:20:7D:EE:79:51:C1:AD:93:57:07:A7:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa
Signing time:             Wed 03 Apr 2024 18:30:52 +0000
ROA not before:           Wed 03 Apr 2024 18:25:52 +0000
ROA not after:            Wed 02 Apr 2025 18:30:52 +0000
asID:                     262630
IP address blocks:        131.100.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl
                          rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:df:da:96:cc:51:60:d8:46:1d:36:c2:ff:be:61:38:63:d3:73:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E9C8F360117C7F207DEE7951C1AD935707A727
        Validity
            Not Before: Apr  3 18:25:52 2024 GMT
            Not After : Apr  2 18:30:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:11:3f:89:01:a0:40:b4:f0:48:a3:b9:7d:
                    ce:48:02:9b:07:65:6f:d8:5a:a2:be:f3:f3:b8:38:
                    3e:09:ca:fb:16:48:b0:eb:be:3f:c1:a6:5f:74:aa:
                    6b:b0:b9:0e:40:a0:53:45:15:01:9c:59:b1:36:2d:
                    07:35:f8:85:a3:04:5e:98:e4:0e:59:0b:a0:62:98:
                    7d:2c:ad:71:99:60:67:20:fe:fa:e2:d7:61:e4:ab:
                    88:4e:57:00:52:b2:7f:b6:dc:a5:13:07:5a:a0:fa:
                    30:e2:2c:1e:5b:9c:c1:25:6d:10:6d:f6:0e:c8:7f:
                    9f:d0:42:2f:36:71:57:94:88:05:d0:be:80:d8:21:
                    0f:a3:b7:cc:db:e5:e9:0f:42:3a:f5:e4:a6:5b:f8:
                    10:d5:b2:da:f6:92:cb:10:5e:dd:8a:f1:55:45:e3:
                    15:9e:fb:41:a0:4b:2a:c5:e4:6a:45:6d:b3:de:d6:
                    d9:84:da:be:04:15:69:0c:ab:6f:ea:de:39:89:f1:
                    2c:22:cd:c5:36:8e:06:2c:4b:10:bc:49:c9:b3:e9:
                    84:54:90:90:3b:cd:1d:21:8b:77:0d:20:0c:94:16:
                    83:06:f8:3c:3e:c1:96:d4:55:97:2b:3a:06:ec:b0:
                    b1:e3:30:6b:36:d5:a5:7d:36:39:64:07:46:bc:6c:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BF:78:DD:EB:48:6D:8D:FA:3A:33:E5:5F:46:79:D9:F7:E2:15:E9
            X509v3 Authority Key Identifier:
                keyid:39:E9:C8:F3:60:11:7C:7F:20:7D:EE:79:51:C1:AD:93:57:07:A7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/39E9C8F360117C7F207DEE7951C1AD935707A727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E9C8F360117C7F207DEE7951C1AD935707A727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gwvm2MJy1Pv1RFUe7dMsoPGJRETcxEUxf1QcdLrN2wA/1/3133312e3130302e3139322e302f32322d3234203d3e20323632363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:e5:c0:7f:91:98:fb:db:ad:dd:99:c6:d4:8c:52:01:1f:5c:
         ba:dd:8e:3d:55:60:f2:51:ca:44:1c:88:96:0e:31:d3:b1:c5:
         3f:f8:0f:43:2b:90:c8:c1:38:c1:76:30:62:2e:87:83:42:b6:
         49:24:b0:11:69:60:cd:d4:6b:80:8e:a5:83:05:a0:11:ee:64:
         46:2c:90:4d:80:91:f2:c1:db:61:2a:5c:8e:d2:7d:fe:c6:31:
         2e:b3:ef:d9:de:78:60:69:d2:ea:a8:79:a6:96:67:26:e2:63:
         5d:6c:c4:6b:43:d9:2e:b4:c2:48:2f:a4:cd:3a:b9:14:3f:00:
         b4:0d:bb:14:81:9c:90:b3:33:77:97:0e:3a:0e:ee:42:07:fa:
         2b:c6:56:8f:63:a2:48:f2:76:88:88:4e:8a:1a:94:85:e0:55:
         45:02:01:d4:4f:28:ca:5f:d1:af:e3:6a:60:9e:a0:24:c4:ad:
         b7:dd:4e:0a:5e:32:11:15:75:34:f6:f0:9a:38:5d:5a:ff:c9:
         05:fe:b7:ce:a1:56:8b:ab:53:30:00:ed:94:69:bd:27:f4:d1:
         4f:38:8b:5f:56:7c:40:bf:75:3a:1c:0b:1f:89:30:52:10:72:
         57:b8:e7:1a:86:79:e2:9b:d4:94:fa:c6:a5:51:69:48:5f:92:
         d4:f8:73:63
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUCd/alsxRYNhGHTbC/75hOGPTc2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlFOUM4RjM2MDExN0M3RjIwN0RFRTc5NTFDMUFEOTM1
NzA3QTcyNzAeFw0yNDA0MDMxODI1NTJaFw0yNTA0MDIxODMwNTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjJBQTExM0Y4OTAxQTA0MEI0
RjA0OEEzQjk3RENFNDgwMjlCMDc2NTZGRDg1QUEyQkVGM0YzQjgzODNFMDlDQUZC
MTY0OEIwRUJCRTNGQzFBNjVGNzRBQTZCQjBCOTBFNDBBMDUzNDUxNTAxOUM1OUIx
MzYyRDA3MzVGODg1QTMwNDVFOThFNDBFNTkwQkEwNjI5ODdEMkNBRDcxOTk2MDY3
MjBGRUZBRTJENzYxRTRBQjg4NEU1NzAwNTJCMjdGQjZEQ0E1MTMwNzVBQTBGQTMw
RTIyQzFFNUI5Q0MxMjU2RDEwNkRGNjBFQzg3RjlGRDA0MjJGMzY3MTU3OTQ4ODA1
RDBCRTgwRDgyMTBGQTNCN0NDREJFNUU5MEY0MjNBRjVFNEE2NUJGODEwRDVCMkRB
RjY5MkNCMTA1RUREOEFGMTU1NDVFMzE1OUVGQjQxQTA0QjJBQzVFNDZBNDU2REIz
REVENkQ5ODREQUJFMDQxNTY5MENBQjZGRUFERTM5ODlGMTJDMjJDREM1MzY4RTA2
MkM0QjEwQkM0OUM5QjNFOTg0NTQ5MDkwM0JDRDFEMjE4Qjc3MEQyMDBDOTQxNjgz
MDZGODNDM0VDMTk2RDQ1NTk3MkIzQTA2RUNCMEIxRTMzMDZCMzZENUE1N0QzNjM5
NjQwNzQ2QkM2Q0U4NDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsqoRP4kBoEC08EijuX3OSAKbB2Vv2FqivvPzuDg+Ccr7Fkiw674/
waZfdKprsLkOQKBTRRUBnFmxNi0HNfiFowRemOQOWQugYph9LK1xmWBnIP764tdh
5KuITlcAUrJ/ttylEwdaoPow4iweW5zBJW0QbfYOyH+f0EIvNnFXlIgF0L6A2CEP
o7fM2+XpD0I69eSmW/gQ1bLa9pLLEF7divFVReMVnvtBoEsqxeRqRW2z3tbZhNq+
BBVpDKtv6t45ifEsIs3FNo4GLEsQvEnJs+mEVJCQO80dIYt3DSAMlBaDBvg8PsGW
1FWXKzoG7LCx4zBrNtWlfTY5ZAdGvGzoRQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FD6/eN3rSG2N+joz5V9Gedn34hXpMB8GA1UdIwQYMBaAFDnpyPNgEXx/IH3ueVHB
rZNXB6cnMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhnd3ZtMk1KeTFQdjFS
RlVlN2RNc29QR0pSRVRjeEVVeGYxUWNkTHJOMndBLzEvMzlFOUM4RjM2MDExN0M3
RjIwN0RFRTc5NTFDMUFEOTM1NzA3QTcyNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zOUU5QzhGMzYwMTE3QzdGMjA3REVFNzk1MUMxQUQ5MzU3MDdB
NzI3LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84Z3d2bTJNSnkxUHYxUkZVZTdk
TXNvUEdKUkVUY3hFVXhmMVFjZExyTjJ3QS8xLzMxMzMzMTJlMzEzMDMwMmUzMTM5
MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzNjMzMzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKDZMAwDQYJKoZIhvcNAQELBQADggEBAJHlwH+RmPvbrd2ZxtSMUgEfXLrdjj1V
YPJRykQciJYOMdOxxT/4D0MrkMjBOMF2MGIuh4NCtkkksBFpYM3Ua4COpYMFoBHu
ZEYskE2AkfLB22EqXI7Sff7GMS6z79neeGBp0uqoeaaWZybiY11sxGtD2S60wkgv
pM06uRQ/ALQNuxSBnJCzM3eXDjoO7kIH+ivGVo9jokjydoiITooalIXgVUUCAdRP
KMpf0a/jamCeoCTErbfdTgpeMhEVdTT28Jo4XVr/yQX+t86hVourUzAA7ZRpvSf0
0U84i19WfEC/dTocCx+JMFIQcle45xqGeeKb1JT6xqVRaUhfktT4c2M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org