Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e35312e302f32342d3234203d3e203631383832.roa
File:                     3133312e302e35312e302f32342d3234203d3e203631383832.roa (raw, json)
Hash identifier:          9e+a08hfq2Rn41CwMYXsz0J07UMlgbeRiCtE+NThoVc=
Subject key identifier:   48:60:4C:FC:42:ED:75:EC:69:43:CC:5D:9C:F2:2A:9A:6E:A5:CF:C3
Certificate issuer:       /CN=93ADC0DF3E981D44679DB689D28221F6ABE89422
Certificate serial:       671305D4155BB0AFF04B2CCA0D8A9A0910487490
Authority key identifier: 93:AD:C0:DF:3E:98:1D:44:67:9D:B6:89:D2:82:21:F6:AB:E8:94:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93ADC0DF3E981D44679DB689D28221F6ABE89422.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e35312e302f32342d3234203d3e203631383832.roa
Signing time:             Mon 12 Aug 2024 18:53:06 +0000
ROA not before:           Mon 12 Aug 2024 18:48:06 +0000
ROA not after:            Mon 11 Aug 2025 18:53:06 +0000
asID:                     61882
IP address blocks:        131.0.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/93ADC0DF3E981D44679DB689D28221F6ABE89422.crl
                          rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/93ADC0DF3E981D44679DB689D28221F6ABE89422.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93ADC0DF3E981D44679DB689D28221F6ABE89422.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:13:05:d4:15:5b:b0:af:f0:4b:2c:ca:0d:8a:9a:09:10:48:74:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ADC0DF3E981D44679DB689D28221F6ABE89422
        Validity
            Not Before: Aug 12 18:48:06 2024 GMT
            Not After : Aug 11 18:53:06 2025 GMT
        Subject: CN=48604CFC42ED75EC6943CC5D9CF22A9A6EA5CFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:88:1f:bd:08:d5:55:16:23:d5:91:00:3a:f6:
                    5f:09:2b:b3:5b:f0:a8:22:1c:53:b1:59:ff:82:38:
                    52:09:17:f1:e3:2a:3b:43:88:45:78:f2:e7:dc:39:
                    06:8c:4a:1f:cf:93:f7:a0:f7:63:3a:76:18:b1:6b:
                    88:a0:6f:59:17:e6:1d:ab:32:2e:5a:12:b2:4e:27:
                    46:47:20:fb:8c:8b:7d:e8:cc:ae:3a:54:45:ba:26:
                    fc:8b:a0:c9:79:a6:ae:0d:ca:82:db:36:ba:12:e9:
                    fb:0f:a5:e2:25:07:dc:5f:f1:fc:21:63:bc:ef:d2:
                    5c:c1:6a:7d:e3:c1:de:11:7d:4f:20:14:b0:12:89:
                    91:1f:39:ee:3a:54:71:2b:10:f2:ec:83:bd:e2:e9:
                    af:c2:e7:b2:e0:de:37:91:6e:04:bc:3c:c0:f0:98:
                    72:41:8b:7c:77:8b:20:87:9c:86:75:ad:b6:cc:5e:
                    2a:1f:ee:55:05:ee:98:8e:c7:c3:98:9e:65:8a:fb:
                    e1:0d:a0:4e:8c:9a:16:8b:4d:a4:86:7e:49:5c:89:
                    19:3b:80:85:fb:1b:3f:24:e1:2d:d2:a1:10:75:41:
                    7c:7f:08:d0:ae:bf:90:cb:62:13:ee:d0:e9:a5:f9:
                    ee:3a:50:fd:38:8d:60:9a:22:8d:97:04:3f:e4:ee:
                    4e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:60:4C:FC:42:ED:75:EC:69:43:CC:5D:9C:F2:2A:9A:6E:A5:CF:C3
            X509v3 Authority Key Identifier:
                keyid:93:AD:C0:DF:3E:98:1D:44:67:9D:B6:89:D2:82:21:F6:AB:E8:94:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/93ADC0DF3E981D44679DB689D28221F6ABE89422.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93ADC0DF3E981D44679DB689D28221F6ABE89422.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/3133312e302e35312e302f32342d3234203d3e203631383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:84:52:d8:5c:6d:37:98:64:ab:75:64:8d:76:e9:6a:d4:25:
         fd:5e:12:e5:3b:d2:3f:fb:62:48:51:02:1e:79:e8:82:03:eb:
         6f:77:9b:61:33:ba:e6:1f:08:c8:09:b0:38:a7:ee:93:a2:cb:
         0b:ef:d4:17:58:7c:36:64:83:88:76:d8:15:a2:21:fe:0a:fe:
         97:86:ac:03:f2:46:0b:62:e4:08:03:76:e0:d4:23:a1:7f:58:
         a4:1b:97:98:69:3c:19:ba:62:57:06:5d:07:43:b4:06:f3:8f:
         45:23:3f:ac:4d:3e:24:a8:dd:f9:1b:e5:d7:17:78:fc:fb:25:
         32:03:86:ac:bc:21:73:27:f5:5e:11:46:b9:3f:b1:94:0f:9b:
         4c:1d:17:d9:f2:aa:dd:71:64:2f:ba:30:63:41:48:7c:69:ff:
         0d:68:42:27:4c:f2:96:bc:0d:5f:26:dc:cc:8a:50:f0:2c:80:
         f8:70:5e:68:b6:dc:2f:0b:e0:7a:ae:eb:8b:ed:e7:a6:e9:69:
         05:aa:90:6a:48:06:9b:d1:19:03:ba:86:ba:a9:34:c9:09:06:
         48:a4:f2:ee:26:35:87:d4:a3:d7:1c:e2:fc:c3:1c:ea:e0:fd:
         43:26:66:8d:c4:c8:0b:c1:c2:50:54:bd:9b:07:2b:48:4a:5b:
         b7:bd:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:56 2024 by rpki-client on console-fra.rpki-client.org