Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/3133312e3130302e34342e302f32322d3234203d3e203631373535.roa
File:                     3133312e3130302e34342e302f32322d3234203d3e203631373535.roa (raw, json)
Hash identifier:          FejSPq3yQgGnBrCVwhiFS3gJIPr/waouI09vpGd9ol4=
Subject key identifier:   C0:74:23:CF:39:C3:0D:52:34:B3:FF:6E:08:8E:3B:38:AB:A5:CB:61
Certificate issuer:       /CN=36B2926E723BECEF46FC5A02BE2413B1F7EF2179
Certificate serial:       4418022FD732E2AD29FBB9C77F1728E12B0F8635
Authority key identifier: 36:B2:92:6E:72:3B:EC:EF:46:FC:5A:02:BE:24:13:B1:F7:EF:21:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/3133312e3130302e34342e302f32322d3234203d3e203631373535.roa
Signing time:             Mon 13 May 2024 15:50:08 +0000
ROA not before:           Mon 13 May 2024 15:45:08 +0000
ROA not after:            Mon 12 May 2025 15:50:08 +0000
asID:                     61755
IP address blocks:        131.100.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.crl
                          rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:18:02:2f:d7:32:e2:ad:29:fb:b9:c7:7f:17:28:e1:2b:0f:86:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36B2926E723BECEF46FC5A02BE2413B1F7EF2179
        Validity
            Not Before: May 13 15:45:08 2024 GMT
            Not After : May 12 15:50:08 2025 GMT
        Subject: CN=C07423CF39C30D5234B3FF6E088E3B38ABA5CB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:d0:4d:9a:82:46:fc:25:64:a0:77:3c:bb:
                    08:51:71:ba:6d:f4:6d:71:6a:58:5e:4a:b8:b7:9b:
                    18:9c:f7:89:c3:d6:05:24:f6:e8:52:6f:10:b4:64:
                    53:69:3f:a5:8a:18:8b:e8:c6:22:6d:32:3b:45:3e:
                    13:f7:03:a4:2e:65:04:2f:2b:22:5e:40:12:0f:b5:
                    54:bb:f3:8c:5e:64:2b:24:25:ad:ca:3c:5c:c4:f2:
                    0b:5d:ed:e0:04:25:a3:6e:4f:42:7d:e2:9b:83:eb:
                    b4:c7:1e:d8:dc:89:7e:71:a3:60:b4:70:09:e3:d7:
                    3b:09:3b:dd:4d:a0:3a:b2:b2:68:e2:dc:3e:06:79:
                    2a:cc:35:8a:fd:10:95:97:ea:53:b4:c7:26:79:d0:
                    8d:8f:8c:45:3e:9c:bb:1a:f7:5c:d8:fa:4f:30:67:
                    11:80:5f:94:46:09:2a:44:35:ff:bc:3f:e3:bd:3a:
                    60:f9:dc:5b:e6:3a:3d:28:87:db:90:3f:e1:96:0d:
                    9c:b0:27:21:7f:9b:8f:25:3b:2c:31:6b:3f:3d:6d:
                    72:3b:65:42:ec:e5:60:f0:7a:20:12:19:94:96:0d:
                    f8:4d:da:60:c6:4b:12:ab:b5:16:41:53:73:8e:85:
                    40:11:4f:4d:ef:22:48:d2:1c:b1:f0:46:2b:67:92:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:74:23:CF:39:C3:0D:52:34:B3:FF:6E:08:8E:3B:38:AB:A5:CB:61
            X509v3 Authority Key Identifier:
                keyid:36:B2:92:6E:72:3B:EC:EF:46:FC:5A:02:BE:24:13:B1:F7:EF:21:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36B2926E723BECEF46FC5A02BE2413B1F7EF2179.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FCo1i8HXrNk73fYuaSpqNaSpm1RBNxLuPgaaFt67ZTfc/0/3133312e3130302e34342e302f32322d3234203d3e203631373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:2f:75:31:64:ae:30:bf:29:65:72:19:df:61:2e:94:33:57:
         0d:b5:b3:92:df:d0:8b:39:d4:37:a4:bc:26:ff:f5:ad:f3:ce:
         2d:e8:7f:d8:da:35:a9:c6:84:2e:b9:41:80:a5:c9:e5:34:16:
         39:ef:63:62:c2:7c:82:ba:44:94:f1:2a:c7:39:75:bb:8d:20:
         a9:17:90:ef:4a:34:5b:39:4f:69:fe:c8:9a:f3:75:45:97:95:
         bd:27:f4:e0:63:f9:bc:fb:e5:23:55:6b:fb:33:9b:a5:10:38:
         ac:33:5f:d8:26:a2:79:22:06:fb:70:70:f7:17:38:af:71:7b:
         96:16:c1:a1:3f:87:f4:93:7a:22:d7:cc:9b:12:bb:06:cf:e5:
         76:01:0e:dd:c1:e2:90:7c:54:1d:c0:be:a9:36:e7:de:26:30:
         77:b6:32:e8:50:f6:c2:4f:be:21:4f:d2:c6:be:39:d6:80:d4:
         b1:40:1b:05:2c:79:69:db:04:90:99:04:6e:53:dc:c9:51:c2:
         70:27:61:4e:01:7e:0c:66:fb:28:1f:80:33:cf:2a:e5:0f:fd:
         59:18:a1:e3:a8:63:2a:82:c4:0a:10:ee:3c:bb:2a:58:d5:b3:
         89:a9:e6:43:62:9b:51:80:9a:e1:a4:d9:1d:69:ce:f9:8b:9c:
         95:e9:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:44 2024 by rpki-client on console-fra.rpki-client.org