Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa
File:                     3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa (raw, json)
Hash identifier:          DiF+BIQ2fYYxsCi/WVWXKLiNkJHDOLfa4c5HszAjPfs=
Subject key identifier:   FD:80:72:E6:4E:BA:75:01:92:83:59:0E:A4:C7:17:D8:FE:39:19:21
Certificate issuer:       /CN=A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50
Certificate serial:       3821B4178DC90C5F7702094544984181CF1789B7
Authority key identifier: A5:DF:D1:94:11:A6:33:92:94:4A:2E:9C:A0:5F:DE:B1:D0:E3:FF:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa
Signing time:             Thu 04 Apr 2024 00:44:50 +0000
ROA not before:           Thu 04 Apr 2024 00:39:50 +0000
ROA not after:            Thu 03 Apr 2025 00:44:50 +0000
asID:                     61632
IP address blocks:        131.100.124.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.crl
                          rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:21:b4:17:8d:c9:0c:5f:77:02:09:45:44:98:41:81:cf:17:89:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50
        Validity
            Not Before: Apr  4 00:39:50 2024 GMT
            Not After : Apr  3 00:44:50 2025 GMT
        Subject: CN=FD8072E64EBA75019283590EA4C717D8FE391921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:02:7c:3e:f8:ab:f2:eb:6a:af:14:47:24:
                    69:54:d4:71:88:35:0d:3e:0a:f6:d4:42:48:19:4c:
                    86:2b:cc:76:cd:65:b1:cb:07:dc:e6:ae:f4:cf:a8:
                    e3:e7:21:71:0f:c5:ef:1d:97:33:bd:d7:4f:94:1c:
                    68:48:03:f9:18:83:50:6c:29:05:cf:67:22:f2:41:
                    e8:da:56:df:ba:1f:f0:51:49:51:13:42:4e:2f:cc:
                    2e:7a:18:e5:00:2b:66:12:73:dc:d5:00:65:92:96:
                    f3:ff:0a:a6:44:c2:a0:da:67:cf:39:a0:06:a4:41:
                    94:fa:00:a1:e2:f8:df:c6:af:cd:84:e4:8d:cd:98:
                    65:85:ad:eb:a0:7d:b5:29:14:e0:f1:2d:72:d9:c2:
                    c9:fd:38:c1:5b:e9:89:52:1b:8f:d0:f2:25:80:22:
                    91:f4:cd:58:93:db:f2:09:39:2d:80:76:96:20:e4:
                    aa:26:89:1f:57:90:38:59:8a:b3:a7:18:86:1c:1e:
                    70:9a:a4:64:f6:2e:97:d8:2d:4f:3d:f4:4d:0b:6e:
                    84:f5:fd:c1:36:4b:78:33:98:16:93:18:a2:e5:4b:
                    b3:76:21:c8:91:d1:a3:e3:10:62:1d:82:ed:23:21:
                    ea:ba:1c:b0:4f:e0:66:d9:e9:42:e3:ee:08:de:73:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:80:72:E6:4E:BA:75:01:92:83:59:0E:A4:C7:17:D8:FE:39:19:21
            X509v3 Authority Key Identifier:
                keyid:A5:DF:D1:94:11:A6:33:92:94:4A:2E:9C:A0:5F:DE:B1:D0:E3:FF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5DFD19411A63392944A2E9CA05FDEB1D0E3FF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ndLvsX2RkRWJYpfH3uZCMHP4C5tyVTWtNEeyp2WVwyc/1/3133312e3130302e3132342e302f32322d3332203d3e203631363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:be:24:ef:d3:c2:84:29:e7:7d:1a:25:75:a9:4d:12:f6:b0:
         08:9e:4a:24:42:39:ba:cd:2f:a8:eb:9a:68:3b:6b:2e:cc:e3:
         6d:30:13:28:62:b5:2b:5d:c7:d3:ad:ec:c6:a3:d5:4d:18:04:
         65:6c:85:b9:a9:07:fc:0b:e9:53:77:65:37:b6:f4:df:97:e9:
         b4:a4:ce:3d:cd:ee:06:eb:70:aa:db:d6:37:e8:45:f9:59:4d:
         93:5d:86:53:4c:6f:c5:cc:30:7f:96:7a:a2:cc:10:81:ca:e4:
         f8:e4:e8:b8:00:e1:de:f0:22:78:2e:64:64:e1:ad:ef:8f:c5:
         8d:e4:95:88:ff:dc:57:06:80:c8:94:77:13:ae:db:17:95:a2:
         43:0c:04:1b:d9:31:ea:dd:44:dc:0e:dc:ed:41:4b:35:70:44:
         d5:86:a3:24:ad:da:32:4a:21:60:f4:ff:09:e3:33:e1:8b:32:
         ea:4c:59:5b:05:8d:fb:63:34:3f:95:ed:6d:22:ff:be:82:cc:
         8f:55:24:4f:5f:6a:a0:e9:f5:f0:68:96:73:47:cd:95:80:54:
         2f:e3:0e:ef:07:7b:c5:e6:b5:fc:b8:11:9b:dc:df:c9:9a:66:
         c1:59:0e:8b:bf:1d:b9:1a:a2:8c:24:4d:69:65:0f:63:b3:78:
         e3:e7:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:08 2024 by rpki-client on console-fra.rpki-client.org