Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133342e302f32332d3233203d3e203631363337.roa
File:                     3133312e3130302e3133342e302f32332d3233203d3e203631363337.roa (raw, json)
Hash identifier:          lFWWPRs2cpuHGGelAaIJUetPk9Vwwm2+O0Q5Bcqd9qk=
Subject key identifier:   2B:EF:00:28:C5:0C:61:04:E9:E2:08:36:BD:80:EF:4B:B5:86:29:4C
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       4F70269756371ACAA302F343ECDB2E3EAF966F97
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133342e302f32332d3233203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:42 +0000
ROA not before:           Thu 04 Apr 2024 00:45:42 +0000
ROA not after:            Thu 03 Apr 2025 00:50:42 +0000
asID:                     61637
IP address blocks:        131.100.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:70:26:97:56:37:1a:ca:a3:02:f3:43:ec:db:2e:3e:af:96:6f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:42 2024 GMT
            Not After : Apr  3 00:50:42 2025 GMT
        Subject: CN=2BEF0028C50C6104E9E20836BD80EF4BB586294C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:4e:0e:4e:41:76:ff:42:db:60:05:58:f0:
                    7d:73:ed:b3:07:2d:aa:d1:1f:fd:f5:d4:3b:3a:1e:
                    f6:3c:a7:06:b8:b9:0c:63:d8:dc:f4:11:4f:37:8a:
                    7d:d8:96:ee:ba:48:5e:91:db:98:4d:6d:aa:02:d4:
                    f6:de:df:86:e3:d2:03:fc:4c:d9:ad:d1:5d:ca:b4:
                    d7:f6:0c:70:b2:28:ff:e2:91:9e:b3:e8:8d:f0:17:
                    8f:40:32:2f:18:42:ca:11:fa:5e:5d:12:9e:f3:25:
                    2d:f0:d3:e6:e9:39:ff:7d:46:dd:b4:96:6f:a8:ae:
                    a3:13:74:b1:76:2b:df:23:71:aa:70:75:fd:55:07:
                    09:02:ac:97:1f:ee:4d:38:ad:90:7f:65:ab:4c:25:
                    e7:b0:d8:8f:6b:49:43:c1:ce:5a:1b:13:80:63:30:
                    5f:d5:6d:ce:36:60:97:d0:38:72:a1:b7:ca:5e:32:
                    39:89:6d:c3:9c:30:4d:30:e7:a2:37:b3:e8:23:a6:
                    33:aa:6c:85:c1:a1:a1:f0:d9:19:05:b9:59:13:1e:
                    e1:2d:65:d4:a3:74:a1:cd:3f:b7:1f:cc:ca:96:1a:
                    95:2b:22:a3:a1:5a:f4:c5:af:c2:5d:ed:4e:ee:7e:
                    65:9b:39:a2:d8:9b:60:2f:d8:de:8a:6a:49:10:1a:
                    42:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EF:00:28:C5:0C:61:04:E9:E2:08:36:BD:80:EF:4B:B5:86:29:4C
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133342e302f32332d3233203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:c0:14:fd:ef:f8:74:0f:ba:aa:a9:09:13:c6:01:2e:30:77:
         24:29:bd:6e:eb:b1:85:10:a2:39:72:db:22:f3:ef:74:42:b8:
         7e:91:98:1c:be:fd:5d:56:35:e2:0d:cc:dd:06:a5:8b:22:1c:
         96:fa:7c:d6:90:64:69:00:3b:f6:07:be:d6:8b:30:c5:31:96:
         10:c4:8f:c2:73:85:47:8d:27:34:3a:0d:21:5a:5c:e0:0e:18:
         ea:2d:fa:f6:cf:c1:34:2c:0d:52:d6:8e:8c:40:e4:d9:05:04:
         94:ed:33:77:cc:9b:1a:7d:d6:1e:59:da:25:7f:84:5b:29:4e:
         17:2e:54:f1:b6:36:45:75:fe:c1:90:bd:89:be:91:9c:4b:b1:
         0f:1c:e3:f8:c0:e3:6a:05:b7:76:45:20:d0:b6:b5:ee:4e:5b:
         83:b7:09:93:49:54:85:f2:36:19:36:84:17:0f:d2:33:e8:ba:
         60:6b:28:10:54:60:9c:c9:b9:1a:fa:d3:97:d8:45:35:4c:69:
         bb:89:2b:0e:ac:36:33:78:e2:15:bf:33:5f:16:d7:85:82:db:
         24:f1:e1:e5:96:2e:75:07:ab:76:ed:a6:91:5d:e2:9f:79:6f:
         c9:ba:2c:fc:8a:62:b0:53:23:c6:3b:d0:b2:54:12:9d:f7:5f:
         88:8e:db:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT3Aml1Y3GsqjAvND7NsuPq+Wb5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5RkJBRTVCRjYyMDBGNjBFRjA5Q0RCQzFCOTAwNTBB
N0MwNUUwQTAeFw0yNDA0MDQwMDQ1NDJaFw0yNTA0MDMwMDUwNDJaMDMxMTAvBgNV
BAMTKDJCRUYwMDI4QzUwQzYxMDRFOUUyMDgzNkJEODBFRjRCQjU4NjI5NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifU4OTkF2/0LbYAVY8H1z7bMH
LarRH/311Ds6HvY8pwa4uQxj2Nz0EU83in3Ylu66SF6R25hNbaoC1Pbe34bj0gP8
TNmt0V3KtNf2DHCyKP/ikZ6z6I3wF49AMi8YQsoR+l5dEp7zJS3w0+bpOf99Rt20
lm+orqMTdLF2K98jcapwdf1VBwkCrJcf7k04rZB/ZatMJeew2I9rSUPBzlobE4Bj
MF/Vbc42YJfQOHKht8peMjmJbcOcME0w56I3s+gjpjOqbIXBoaHw2RkFuVkTHuEt
ZdSjdKHNP7cfzMqWGpUrIqOhWvTFr8Jd7U7ufmWbOaLYm2Av2N6KakkQGkJtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUK+8AKMUMYQTp4gg2vYDvS7WGKUwwHwYDVR0j
BBgwFoAUMZ+65b9iAPYO8JzbwbkAUKfAXgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMS8zMTlGQkFFNUJGNjIwMEY2MEVGMDlDREJDMUI5MDA1MEE3QzA1RTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOUZCQUU1QkY2MjAwRjYw
RUYwOUNEQkMxQjkwMDUwQTdDMDVFMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzEv
MzEzMzMxMmUzMTMwMzAyZTMxMzMzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDZIYwDQYJKoZIhvcNAQELBQADggEBAKvAFP3v
+HQPuqqpCRPGAS4wdyQpvW7rsYUQojly2yLz73RCuH6RmBy+/V1WNeINzN0GpYsi
HJb6fNaQZGkAO/YHvtaLMMUxlhDEj8JzhUeNJzQ6DSFaXOAOGOot+vbPwTQsDVLW
joxA5NkFBJTtM3fMmxp91h5Z2iV/hFspThcuVPG2NkV1/sGQvYm+kZxLsQ8c4/jA
42oFt3ZFINC2te5OW4O3CZNJVIXyNhk2hBcP0jPoumBrKBBUYJzJuRr605fYRTVM
abuJKw6sNjN44hW/M18W14WC2yTx4eWWLnUHq3btppFd4p95b8m6LPyKYrBTI8Y7
0LJUEp33X4iO23Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org