Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133342e302f32342d3234203d3e203631363337.roa
File:                     3133312e3130302e3133342e302f32342d3234203d3e203631363337.roa (raw, json)
Hash identifier:          JdeCIDqhqbBEm5ATKYpBThO4BQZ9F0FwUun9SnI808I=
Subject key identifier:   CF:D8:77:0E:2B:BE:DC:FC:35:02:13:8E:86:D6:AC:C8:6A:07:83:22
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       18D7973291133DF3A796A3D891403A3F9F7AE571
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133342e302f32342d3234203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:46 +0000
ROA not before:           Thu 04 Apr 2024 00:45:46 +0000
ROA not after:            Thu 03 Apr 2025 00:50:46 +0000
asID:                     61637
IP address blocks:        131.100.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d7:97:32:91:13:3d:f3:a7:96:a3:d8:91:40:3a:3f:9f:7a:e5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:46 2024 GMT
            Not After : Apr  3 00:50:46 2025 GMT
        Subject: CN=CFD8770E2BBEDCFC3502138E86D6ACC86A078322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:74:ab:ba:15:c2:56:f1:1a:14:26:67:78:
                    72:b6:a6:da:db:2b:36:5c:6b:da:69:05:3f:ea:e8:
                    28:a4:8c:8f:69:f9:57:2b:e1:64:95:9d:9e:a2:91:
                    4e:1f:2a:73:0f:ba:70:69:68:78:0e:77:71:d0:05:
                    4d:d4:07:8b:0d:96:ce:bb:82:cd:b1:f2:08:99:cc:
                    b4:ab:10:c3:0d:35:1c:d6:f0:f6:14:71:16:68:da:
                    a3:4b:d2:1c:1a:7e:fc:6e:ce:46:5d:77:99:8e:01:
                    0e:ac:bc:46:67:6a:c6:e1:de:95:86:44:d6:98:61:
                    f0:27:bc:c1:35:ed:f9:7f:3a:25:dc:40:67:57:8e:
                    94:57:0a:37:49:82:54:69:60:1c:6a:40:22:da:09:
                    f9:7d:a6:e2:16:e1:f8:b7:6a:23:cd:9c:9e:d4:a6:
                    0b:87:39:27:9c:b7:12:6e:e4:ed:4b:22:e4:d8:cd:
                    1c:c0:87:42:e5:c6:73:51:68:e5:1e:e4:fa:40:0e:
                    47:d2:7f:e7:be:00:ca:8f:3a:92:ad:fb:7c:48:bd:
                    9d:07:1c:4a:1d:f9:81:0c:a9:ce:77:2d:43:d2:3d:
                    70:4d:fb:13:0a:d0:cc:ae:ff:58:d9:4f:40:fb:d1:
                    4b:32:f9:bb:21:59:4f:6a:64:f0:f9:21:62:d8:c0:
                    f3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D8:77:0E:2B:BE:DC:FC:35:02:13:8E:86:D6:AC:C8:6A:07:83:22
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/3133312e3130302e3133342e302f32342d3234203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b1:3f:f1:f1:9d:5c:59:de:45:51:0b:e1:8a:82:bc:31:a8:
         3b:16:59:fc:25:2f:0c:09:10:50:47:aa:4f:8e:13:1d:06:b7:
         24:ee:77:ad:73:d8:8c:c1:51:5b:28:a1:cf:de:6d:bd:40:89:
         63:c1:6e:5f:43:40:36:7f:a8:ef:03:70:55:87:44:58:5c:fb:
         33:50:78:59:ad:64:58:68:e4:ff:d3:d4:70:70:06:4c:83:5a:
         c3:ed:68:51:d8:f2:fc:c5:98:45:3b:87:8e:89:ca:a7:19:e4:
         70:51:1a:82:fe:d3:a6:3c:11:38:ee:12:8d:6e:32:8a:02:c7:
         a5:6c:13:fb:b8:ad:5f:21:0b:69:d1:a8:b2:f5:9b:81:06:3e:
         6c:46:11:81:d3:17:30:5e:be:c2:c0:73:30:5a:78:80:31:51:
         bc:bf:29:9a:82:79:dd:78:54:0c:fb:9f:0e:fd:ec:23:3c:99:
         17:7a:bd:16:80:88:49:ba:e6:4a:60:16:d4:1c:52:02:22:54:
         22:68:68:ff:07:09:f5:cc:40:2b:7e:aa:c7:42:fe:5a:9e:20:
         6c:0c:05:cb:15:cd:c6:50:e2:10:c3:2d:f2:d6:f9:97:b0:76:
         16:33:6b:2b:b2:cc:f5:2f:9f:a6:27:e7:6e:09:8b:5c:e2:5c:
         7d:c1:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org