Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa
File:                     3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier:          Ch6icnINCCrFgmQIrOiCsVGi9cJQa6i99Hn2CHFl4Eo=
Subject key identifier:   3D:CD:20:B1:9C:FC:FE:B1:1E:22:72:B9:79:C3:1F:C0:31:6E:58:2E
Certificate issuer:       /CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
Certificate serial:       1FEF4D2E1CFBA95ED635B60D1A491391AAC8A71D
Authority key identifier: 8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa
Signing time:             Mon 09 Sep 2024 15:04:37 +0000
ROA not before:           Mon 09 Sep 2024 14:59:37 +0000
ROA not after:            Mon 08 Sep 2025 15:04:37 +0000
asID:                     263665
IP address blocks:        131.161.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 01:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ef:4d:2e:1c:fb:a9:5e:d6:35:b6:0d:1a:49:13:91:aa:c8:a7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF1AA8783ADB33CABDBF9713F95F290C225B7FD
        Validity
            Not Before: Sep  9 14:59:37 2024 GMT
            Not After : Sep  8 15:04:37 2025 GMT
        Subject: CN=3DCD20B19CFCFEB11E2272B979C31FC0316E582E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:e0:31:21:ea:66:7d:e9:85:7e:87:58:5d:
                    c7:eb:c1:01:7a:81:75:27:3c:ae:11:6e:7a:23:fa:
                    2b:af:03:3a:ab:5b:97:a8:33:b1:9f:6e:00:b0:25:
                    46:2d:0c:1a:e9:1e:6e:f9:fb:1a:61:81:a5:31:7d:
                    6b:69:74:d0:72:40:af:5f:7d:0b:31:07:90:f8:7c:
                    f5:83:ee:ad:49:7b:cf:41:9f:f3:c7:7d:c2:13:c5:
                    ce:2a:16:ab:f3:f8:41:20:01:2b:25:d8:73:c8:c3:
                    e7:7d:e3:fd:9b:f4:89:03:8f:f6:3d:c0:ce:06:6a:
                    06:64:92:dc:67:9d:bc:3b:07:ff:91:8c:5b:11:6d:
                    ed:6d:fc:cc:ea:bc:7a:a1:e2:64:0f:9f:70:cb:82:
                    54:8a:d5:ab:13:3a:4d:11:14:f5:0a:20:5b:dc:0c:
                    c9:23:20:bf:b3:a6:65:da:80:12:b9:bb:dd:50:c8:
                    2a:b3:e2:c0:df:92:69:30:0f:86:3d:81:e9:b8:fb:
                    10:da:23:7a:4a:b6:a4:e1:3e:88:03:84:2e:50:d6:
                    d5:44:91:18:36:81:d1:01:a4:15:88:c2:12:21:a3:
                    51:4e:9f:50:9e:cd:71:06:36:17:80:23:9b:ff:68:
                    e8:e9:cd:09:b5:ce:cf:00:4c:fe:9b:78:82:74:61:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CD:20:B1:9C:FC:FE:B1:1E:22:72:B9:79:C3:1F:C0:31:6E:58:2E
            X509v3 Authority Key Identifier:
                keyid:8E:F1:AA:87:83:AD:B3:3C:AB:DB:F9:71:3F:95:F2:90:C2:25:B7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF1AA8783ADB33CABDBF9713F95F290C225B7FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/3133312e3136312e3130382e302f32322d3232203d3e20323633363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:25:49:bb:48:bf:8c:7a:ae:c6:05:7e:42:f2:da:ff:d4:
         40:9e:9a:95:57:b9:1f:f1:a8:96:1e:ca:61:b1:f9:14:31:63:
         37:cb:50:d2:e1:11:c6:dd:54:1e:4a:94:dc:30:a5:fb:b9:46:
         e1:22:86:cc:be:d3:f9:b6:f2:7d:ed:51:af:d7:7a:1b:6f:d3:
         aa:55:59:eb:63:a0:2e:d6:c5:2f:d7:7d:80:a6:87:32:ef:b7:
         8f:0f:4f:52:36:ee:bc:14:78:87:5c:14:d3:94:26:1d:19:35:
         3b:0d:93:01:24:70:de:b2:26:ae:ea:bc:a2:45:04:5b:c1:17:
         7a:94:cd:12:3e:23:d2:3a:b9:75:4e:cb:e2:1c:a3:5a:5e:f4:
         46:cb:27:fb:3c:5c:4b:ca:d9:43:18:f8:3b:e2:9a:d0:26:4b:
         76:6a:04:73:f3:17:9d:c2:30:6a:75:fa:95:77:58:02:9d:16:
         15:19:8c:cf:41:0d:bc:15:4b:0e:05:a3:e1:5e:8a:f0:95:94:
         7c:70:45:2d:bc:de:f1:7f:67:5e:91:dc:5e:98:2a:c2:05:26:
         e1:57:b7:95:99:6a:27:2e:26:26:24:5c:01:27:a6:4a:3d:e0:
         3c:b7:94:80:7d:22:71:1a:97:b4:37:c5:45:e1:2b:51:83:dc:
         32:f8:2c:a2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUH+9NLhz7qV7WNbYNGkkTkarIpx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVGMUFBODc4M0FEQjMzQ0FCREJGOTcxM0Y5NUYyOTBD
MjI1QjdGRDAeFw0yNDA5MDkxNDU5MzdaFw0yNTA5MDgxNTA0MzdaMDMxMTAvBgNV
BAMTKDNEQ0QyMEIxOUNGQ0ZFQjExRTIyNzJCOTc5QzMxRkMwMzE2RTU4MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13uAxIepmfemFfodYXcfrwQF6
gXUnPK4Rbnoj+iuvAzqrW5eoM7GfbgCwJUYtDBrpHm75+xphgaUxfWtpdNByQK9f
fQsxB5D4fPWD7q1Je89Bn/PHfcITxc4qFqvz+EEgASsl2HPIw+d94/2b9IkDj/Y9
wM4GagZkktxnnbw7B/+RjFsRbe1t/MzqvHqh4mQPn3DLglSK1asTOk0RFPUKIFvc
DMkjIL+zpmXagBK5u91QyCqz4sDfkmkwD4Y9gem4+xDaI3pKtqThPogDhC5Q1tVE
kRg2gdEBpBWIwhIho1FOn1CezXEGNheAI5v/aOjpzQm1zs8ATP6beIJ0YWX9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPc0gsZz8/rEeInK5ecMfwDFuWC4wHwYDVR0j
BBgwFoAUjvGqh4Otszyr2/lxP5XykMIlt/0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU03WlFMVXp5Tkt2M3lTRTNGQ05KQ0t1bXdLTkN0Y3pTVFlwRjdIOE1n
cmYvMC84RUYxQUE4NzgzQURCMzNDQUJEQkY5NzEzRjk1RjI5MEMyMjVCN0ZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFRjFBQTg3ODNBREIzM0NB
QkRCRjk3MTNGOTVGMjkwQzIyNUI3RkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNN1pRTFV6eU5LdjN5U0UzRkNOSkNLdW13S05DdGN6U1RZcEY3SDhNZ3JmLzAv
MzEzMzMxMmUzMTM2MzEyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM2MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoOhbDANBgkqhkiG9w0BAQsFAAOCAQEAXoEl
SbtIv4x6rsYFfkLy2v/UQJ6alVe5H/Golh7KYbH5FDFjN8tQ0uERxt1UHkqU3DCl
+7lG4SKGzL7T+bbyfe1Rr9d6G2/TqlVZ62OgLtbFL9d9gKaHMu+3jw9PUjbuvBR4
h1wU05QmHRk1Ow2TASRw3rImruq8okUEW8EXepTNEj4j0jq5dU7L4hyjWl70Rssn
+zxcS8rZQxj4O+Ka0CZLdmoEc/MXncIwanX6lXdYAp0WFRmMz0ENvBVLDgWj4V6K
8JWUfHBFLbze8X9nXpHcXpgqwgUm4Ve3lZlqJy4mJiRcASemSj3gPLeUgH0icRqX
tDfFReErUYPcMvgsog==
-----END CERTIFICATE-----
Generated at Sat Sep 28 01:14:46 2024 by rpki-client on console-ams.rpki-client.org