Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/3230312e3133312e39382e302f32332d3234203d3e203631363034.roa
File:                     3230312e3133312e39382e302f32332d3234203d3e203631363034.roa (raw, json)
Hash identifier:          kVSIZITYaJy+8cmL0LjwVmpLlZLvFnqQRB+p4YaLE7g=
Subject key identifier:   CB:0A:45:8F:60:7A:71:15:3A:EF:4D:45:18:6E:B9:59:A6:33:3F:1A
Certificate issuer:       /CN=37102E7E58DDCF3C0E6378A94CADA481B1887D8E
Certificate serial:       490A8B11D26F02E5EB1498043F92C7E839DA438E
Authority key identifier: 37:10:2E:7E:58:DD:CF:3C:0E:63:78:A9:4C:AD:A4:81:B1:88:7D:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/3230312e3133312e39382e302f32332d3234203d3e203631363034.roa
Signing time:             Thu 04 Apr 2024 05:52:18 +0000
ROA not before:           Thu 04 Apr 2024 05:47:18 +0000
ROA not after:            Thu 03 Apr 2025 05:52:18 +0000
asID:                     61604
IP address blocks:        201.131.98.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.crl
                          rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 16:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0a:8b:11:d2:6f:02:e5:eb:14:98:04:3f:92:c7:e8:39:da:43:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37102E7E58DDCF3C0E6378A94CADA481B1887D8E
        Validity
            Not Before: Apr  4 05:47:18 2024 GMT
            Not After : Apr  3 05:52:18 2025 GMT
        Subject: CN=CB0A458F607A71153AEF4D45186EB959A6333F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:b8:d9:d1:ff:e1:30:63:4d:67:00:44:79:
                    62:7b:4a:3c:05:8c:5f:02:f1:dc:e3:cd:07:1f:0d:
                    4d:8d:84:74:0b:23:5d:df:94:e2:f5:51:61:01:36:
                    13:76:c3:6e:82:6d:a6:86:f0:cf:5c:56:eb:b6:e5:
                    5c:8a:a0:12:7d:7c:d4:24:f8:c4:26:f3:56:f4:a3:
                    1d:d7:1c:85:66:2d:6d:52:fe:ea:4d:b6:49:d6:9e:
                    06:ce:b6:4a:0d:73:92:b6:29:1d:cf:af:f9:ef:13:
                    ff:ff:29:2a:8e:74:63:92:0c:d6:65:13:77:3a:5f:
                    01:cd:27:1a:34:08:b4:df:6e:af:fa:16:ce:04:c8:
                    6e:f1:6c:98:36:87:ca:74:98:1d:89:62:fb:0b:45:
                    d3:a3:34:c2:a5:9b:0d:67:38:82:c2:fc:a7:9f:d6:
                    c3:4b:80:3c:66:18:b2:20:52:48:d3:4a:6f:52:f6:
                    79:2a:8e:36:68:94:ec:a6:a7:50:15:06:3a:b1:8b:
                    77:9a:35:60:24:f8:44:f6:e3:42:b8:01:f7:c8:ab:
                    e8:13:d3:4b:5c:85:aa:bc:a0:01:2e:7a:01:68:1e:
                    52:e0:f1:24:41:16:cc:7e:cb:4c:73:9e:ed:aa:c9:
                    13:a4:b0:a0:30:ae:5e:8d:da:d2:41:68:2f:d5:58:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0A:45:8F:60:7A:71:15:3A:EF:4D:45:18:6E:B9:59:A6:33:3F:1A
            X509v3 Authority Key Identifier:
                keyid:37:10:2E:7E:58:DD:CF:3C:0E:63:78:A9:4C:AD:A4:81:B1:88:7D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37102E7E58DDCF3C0E6378A94CADA481B1887D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/2/3230312e3133312e39382e302f32332d3234203d3e203631363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:41:bc:34:17:c9:95:22:a2:46:96:b5:46:1d:3b:be:7b:dd:
         7d:49:16:78:71:35:82:d8:33:c7:4b:e9:35:4a:2d:cc:d4:3f:
         ec:ae:74:f3:ad:c5:2b:cb:43:11:3f:4c:72:90:81:61:8d:ce:
         ac:af:e6:6c:ff:f8:4e:c5:7d:0d:a4:f1:f0:3f:d0:5b:b1:d5:
         4a:16:7b:90:9d:bd:75:ac:61:ba:b1:05:b1:f6:ad:3b:a3:68:
         de:b6:b3:4b:00:ee:5b:93:75:0e:8b:fd:e6:b1:46:0e:7a:1c:
         f9:e4:91:d9:9f:5f:77:2f:92:50:05:3b:51:36:51:27:49:8d:
         fc:e4:ed:e6:c4:1f:df:b0:cc:8b:2a:7e:10:53:32:f7:12:59:
         2b:21:d9:db:7f:02:1f:97:e2:4b:00:3a:a7:13:c7:d6:a9:2e:
         f8:0a:d7:af:92:67:b5:5a:f9:dc:96:e0:80:52:9d:7a:c4:d8:
         f0:db:13:14:d4:59:c1:32:76:44:47:d9:8b:d4:4c:05:6e:03:
         f4:8d:2a:87:39:82:08:7a:ba:9f:95:92:5c:72:f4:9f:84:75:
         29:1e:c9:2d:53:d4:ea:d2:df:92:2f:fd:37:93:c3:1e:33:f0:
         6d:a4:5e:74:2f:3d:a3:fc:5c:3d:70:0a:c9:0a:03:8f:95:dd:
         46:65:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:56:42 2024 by rpki-client on console-ams.rpki-client.org