Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa
File:                     3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa (raw, json)
Hash identifier:          W/HO/dWzXm5278YdKz0EVtCHPVg8JkrYbDWti0VhJmw=
Subject key identifier:   B3:1F:F0:1B:28:93:C8:1A:C6:F6:E5:BA:01:3B:77:C4:C5:78:00:83
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       27C3F811E8AF086F3D16B056BE9995A04740C196
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa
Signing time:             Tue 05 Nov 2024 05:08:30 +0000
ROA not before:           Tue 05 Nov 2024 05:03:30 +0000
ROA not after:            Tue 04 Nov 2025 05:08:30 +0000
asID:                     270946
IP address blocks:        131.108.152.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl
                          rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c3:f8:11:e8:af:08:6f:3d:16:b0:56:be:99:95:a0:47:40:c1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Nov  5 05:03:30 2024 GMT
            Not After : Nov  4 05:08:30 2025 GMT
        Subject: CN=B31FF01B2893C81AC6F6E5BA013B77C4C5780083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:c4:8e:e9:f2:dd:7b:58:bf:43:3b:be:37:
                    8f:1c:4c:16:9e:2f:30:f5:11:55:c3:35:66:ce:2b:
                    f2:88:63:69:70:b3:c5:d7:9d:79:54:44:ca:0f:9f:
                    43:c6:e8:d0:4a:b0:3e:c9:f2:4e:67:fe:e0:14:3a:
                    8b:02:e1:02:4f:87:fb:d1:ea:e1:3b:bf:7d:62:dc:
                    48:95:2e:71:51:4e:7c:9d:f7:86:74:78:1f:78:9b:
                    63:11:2d:29:d8:9e:37:33:f2:6a:a5:68:bd:59:f6:
                    5b:8c:15:b9:b2:74:e1:56:73:c3:79:4d:12:89:21:
                    f1:51:af:d6:2c:91:7f:68:ea:77:37:db:d6:4a:bc:
                    17:96:3b:cd:58:ae:91:13:5e:f3:15:da:ab:ae:b0:
                    95:8a:37:e2:e9:4e:49:d1:08:34:aa:59:2e:97:d0:
                    27:a9:1c:ef:46:98:70:f0:e7:16:11:f9:34:b1:d2:
                    c7:ad:2f:df:e4:7a:a7:b2:8c:a9:af:34:68:b9:b6:
                    09:63:9c:b3:4b:f6:48:07:f9:6d:c5:c9:2f:63:fc:
                    67:18:1b:95:7f:8b:f6:cb:9f:2f:b5:55:3d:fe:9e:
                    bd:12:59:ef:65:93:43:a8:df:04:ac:e8:0f:f4:5c:
                    72:42:bf:b8:a5:08:89:95:ae:5a:cb:57:a0:ad:90:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1F:F0:1B:28:93:C8:1A:C6:F6:E5:BA:01:3B:77:C4:C5:78:00:83
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:54:cb:d2:b4:06:8f:ff:cf:9f:84:58:4c:d9:34:44:09:29:
         6e:09:01:9e:11:d9:2c:d6:c7:45:c6:19:5e:fa:44:6b:a7:68:
         58:cf:a8:6e:2b:3a:e3:63:04:71:91:29:ed:fa:1b:33:7e:4a:
         8a:24:6d:2b:1f:29:91:12:c2:9b:ee:22:1c:b4:67:9e:36:01:
         9d:68:b1:36:69:1b:91:82:8a:d7:90:84:8e:aa:2a:59:a1:26:
         0f:42:d7:5c:2b:40:54:78:ce:6a:c7:73:73:0b:43:02:23:e5:
         ed:7f:7a:a2:ff:80:3b:28:30:0a:b9:84:fb:52:21:c3:84:3c:
         62:f3:8a:e4:58:c2:bf:64:c7:c5:d1:96:46:ac:a9:32:26:c2:
         93:5f:86:20:4f:0a:58:30:e7:d2:13:53:ba:d0:49:44:20:8d:
         e2:f3:d7:c0:12:d6:c4:e7:70:38:5f:9a:7c:46:6e:27:27:16:
         79:d3:c7:15:6a:a9:ad:2b:fb:cc:ce:58:fd:29:bd:e3:7c:9e:
         1f:6e:7d:c8:8c:63:68:5b:c5:45:99:ca:8e:a9:00:b4:73:30:
         bf:dc:c9:17:73:d0:98:db:f2:4c:d1:4e:10:3c:b1:aa:db:bd:
         f9:10:6b:4a:0f:7d:e4:00:df:d4:d7:0e:c7:31:a1:3f:ac:2e:
         41:06:19:9c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJ8P4EeivCG89FrBWvpmVoEdAwZYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI2OTk2NTg3ODBFOUY3NjM3ODA5OTE2NjhCMzM3NzRB
Q0VEQ0FFOTAeFw0yNDExMDUwNTAzMzBaFw0yNTExMDQwNTA4MzBaMDMxMTAvBgNV
BAMTKEIzMUZGMDFCMjg5M0M4MUFDNkY2RTVCQTAxM0I3N0M0QzU3ODAwODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0MSO6fLde1i/Qzu+N48cTBae
LzD1EVXDNWbOK/KIY2lws8XXnXlURMoPn0PG6NBKsD7J8k5n/uAUOosC4QJPh/vR
6uE7v31i3EiVLnFRTnyd94Z0eB94m2MRLSnYnjcz8mqlaL1Z9luMFbmydOFWc8N5
TRKJIfFRr9YskX9o6nc329ZKvBeWO81YrpETXvMV2quusJWKN+LpTknRCDSqWS6X
0CepHO9GmHDw5xYR+TSx0setL9/keqeyjKmvNGi5tgljnLNL9kgH+W3FyS9j/GcY
G5V/i/bLny+1VT3+nr0SWe9lk0Oo3wSs6A/0XHJCv7ilCImVrlrLV6CtkJghAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsx/wGyiTyBrG9uW6ATt3xMV4AIMwHwYDVR0j
BBgwFoAUUmmWWHgOn3Y3gJkWaLM3dKztyukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm8zOFYxeHQ2WFlhYXR1SmdTd0pCZkVnZ2ljOGZkdHhIWXBGUDJHVkR6
eHIvMS81MjY5OTY1ODc4MEU5Rjc2Mzc4MDk5MTY2OEIzMzc3NEFDRURDQUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNjk5NjU4NzgwRTlGNzYz
NzgwOTkxNjY4QjMzNzc0QUNFRENBRTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvMzhWMXh0NlhZYWF0dUpnU3dKQmZFZ2dpYzhmZHR4SFlwRlAyR1ZEenhyLzEv
MzEzMzMxMmUzMTMwMzgyZTMxMzUzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMDM5MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNsmDANBgkqhkiG9w0BAQsFAAOCAQEAOVTL
0rQGj//Pn4RYTNk0RAkpbgkBnhHZLNbHRcYZXvpEa6doWM+obis642MEcZEp7fob
M35KiiRtKx8pkRLCm+4iHLRnnjYBnWixNmkbkYKK15CEjqoqWaEmD0LXXCtAVHjO
asdzcwtDAiPl7X96ov+AOygwCrmE+1Ihw4Q8YvOK5FjCv2THxdGWRqypMibCk1+G
IE8KWDDn0hNTutBJRCCN4vPXwBLWxOdwOF+afEZuJycWedPHFWqprSv7zM5Y/Sm9
43yeH259yIxjaFvFRZnKjqkAtHMwv9zJF3PQmNvyTNFOEDyxqtu9+RBrSg995ADf
1NcOxzGhP6wuQQYZnA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org