Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa
File:                     3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa (raw, json)
Hash identifier:          IRDdSht0lhvNQyr9QFo55isPX9Q2xJxHu0OgdYfc844=
Subject key identifier:   A0:24:BE:52:C3:5D:38:D5:38:37:9B:9D:AC:C2:70:9E:69:A4:F0:C3
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       4ADCFACCD1E9FBFA8A33CCA07DE5E00BD2622156
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:44 +0000
ROA not before:           Thu 04 Apr 2024 00:45:44 +0000
ROA not after:            Thu 03 Apr 2025 00:50:44 +0000
asID:                     61637
IP address blocks:        131.100.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:dc:fa:cc:d1:e9:fb:fa:8a:33:cc:a0:7d:e5:e0:0b:d2:62:21:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:44 2024 GMT
            Not After : Apr  3 00:50:44 2025 GMT
        Subject: CN=A024BE52C35D38D538379B9DACC2709E69A4F0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:d1:4c:61:a5:f4:09:96:1e:35:62:7e:25:
                    f7:3f:c6:fa:79:0b:8f:e0:cd:7e:a4:2f:37:b1:ca:
                    78:c5:d4:ca:47:6d:94:89:ad:f6:eb:15:ec:db:0c:
                    2e:3c:16:4e:53:00:53:f5:a6:41:80:69:62:46:f7:
                    1c:53:7b:05:36:2f:55:56:38:e9:93:59:18:e1:76:
                    11:e3:d9:a2:17:b2:ed:9c:0a:ce:b3:53:aa:2b:58:
                    91:92:a6:17:b7:0f:8b:b8:65:82:49:ac:45:bb:3b:
                    a6:f8:fd:41:f6:f0:20:3a:fa:b7:ee:99:5f:1f:23:
                    d8:a4:62:74:e9:ae:ca:2b:7b:c8:b3:ba:c4:c3:0f:
                    61:bd:b4:35:c2:89:47:5b:0a:5c:e7:7e:ea:86:3a:
                    18:a5:4a:c2:6f:d2:5b:68:5a:78:12:3d:e2:80:93:
                    27:c4:8e:d5:4f:99:d0:93:1d:1a:06:d3:60:d8:a0:
                    47:e2:97:5c:b8:4e:36:0b:83:5b:26:be:0c:1d:28:
                    01:52:37:ac:e0:02:9f:57:de:c1:fc:98:6a:3d:32:
                    51:2e:df:f4:45:e8:df:5f:29:d4:b5:55:9d:cd:53:
                    9e:e2:28:b2:58:68:9b:11:c4:ab:32:20:d5:5a:13:
                    11:35:90:56:65:e5:5b:df:a2:a5:03:57:95:58:d9:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:24:BE:52:C3:5D:38:D5:38:37:9B:9D:AC:C2:70:9E:69:A4:F0:C3
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133322e302f32332d3233203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:01:df:03:e4:6b:58:a6:6e:3b:6b:00:4c:79:41:4d:05:f8:
         b7:cd:83:2c:11:f7:61:c1:f3:be:ed:ca:8e:4a:05:93:bd:d5:
         d3:a8:9f:01:13:c0:eb:a0:84:b7:07:e3:5b:c9:23:01:bb:f2:
         e1:8c:8b:12:6d:54:f0:88:e9:f5:93:98:a9:48:45:85:00:b2:
         53:9f:41:61:db:19:e0:fd:3f:a0:62:ab:68:9a:34:04:70:4b:
         13:b3:73:b1:c8:05:34:55:91:19:76:50:4c:0d:bb:29:f8:2d:
         c9:35:c6:82:5c:1f:02:5f:15:8a:b9:90:8c:11:f0:b9:20:09:
         12:99:df:d0:a7:05:e3:bf:9e:a4:f2:e8:cc:1b:21:40:de:af:
         74:64:21:eb:d8:87:56:dc:0e:b9:d8:9d:9e:df:90:16:51:75:
         09:0e:79:63:0b:d1:68:98:c1:ad:ae:18:09:f3:24:8b:de:b9:
         e1:4f:86:fd:06:97:4e:e4:83:a0:30:aa:a7:49:b2:00:1c:19:
         bf:7b:d8:90:1e:61:73:ac:be:c9:28:fb:23:7c:31:be:d2:0e:
         1f:96:ee:2c:39:cd:19:1a:69:94:05:ee:82:67:f1:c4:95:84:
         a5:b3:d0:33:8f:52:f6:0a:68:fc:d6:1c:85:8c:4c:8b:a3:b8:
         e5:d1:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org