Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3133312e3130302e3230342e302f32322d3332203d3e203631363530.roa
File:                     3133312e3130302e3230342e302f32322d3332203d3e203631363530.roa (raw, json)
Hash identifier:          8lCDbEJ1OULx7A9Hp9R2NvS2/815DrR5BHZGhP8xfjo=
Subject key identifier:   F5:F4:E8:1F:14:4A:D8:87:F8:69:26:FF:60:37:A7:FD:38:0A:01:CA
Certificate issuer:       /CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Certificate serial:       66F4571D27FE470B3728FA4A101FD5B93954A6CB
Authority key identifier: 3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3133312e3130302e3230342e302f32322d3332203d3e203631363530.roa
Signing time:             Mon 15 Apr 2024 14:27:28 +0000
ROA not before:           Mon 15 Apr 2024 14:22:28 +0000
ROA not after:            Mon 14 Apr 2025 14:27:28 +0000
asID:                     61650
IP address blocks:        131.100.204.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl
                          rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f4:57:1d:27:fe:47:0b:37:28:fa:4a:10:1f:d5:b9:39:54:a6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
        Validity
            Not Before: Apr 15 14:22:28 2024 GMT
            Not After : Apr 14 14:27:28 2025 GMT
        Subject: CN=F5F4E81F144AD887F86926FF6037A7FD380A01CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:04:53:c0:2e:ce:37:51:72:2f:04:b0:33:
                    af:b1:e5:ce:b6:ae:dd:62:6a:ba:7b:2e:ca:95:30:
                    5b:a5:d2:7e:03:be:ba:01:a8:52:17:18:68:52:78:
                    6f:8c:57:13:1b:3b:63:0e:ef:84:79:58:70:2e:ef:
                    c7:ed:ff:d8:17:25:b4:ef:6b:d1:8b:8e:e7:1a:4d:
                    99:c9:8e:33:84:f4:90:fc:9a:35:5e:8b:ae:15:9a:
                    d1:38:aa:bb:e5:a0:8a:bd:9d:f3:9c:5f:36:9d:89:
                    b7:0c:c7:6a:78:6e:f5:c5:a1:b2:01:32:64:68:ca:
                    3a:35:3f:cf:42:7b:81:25:bd:1a:9b:90:41:64:12:
                    6a:f5:ac:3f:9c:72:0d:79:6e:b0:ac:08:3b:62:f8:
                    a6:60:0c:06:37:14:30:16:e3:24:e8:d8:c2:c5:c6:
                    b9:46:99:6d:88:ce:17:d4:73:ee:13:39:4c:f7:09:
                    25:6d:f4:40:4f:01:f7:e7:8a:03:c1:7b:69:3c:4c:
                    07:92:2b:41:d8:36:08:7c:4e:16:aa:7e:5c:00:4a:
                    ad:bf:b9:62:73:97:d4:23:5e:2e:4a:46:d3:07:39:
                    23:49:f8:05:55:b0:62:b8:39:6e:b5:1c:f7:6a:b4:
                    e0:b6:92:5e:4b:c8:b3:c4:89:ce:3a:a7:83:03:1d:
                    5e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F4:E8:1F:14:4A:D8:87:F8:69:26:FF:60:37:A7:FD:38:0A:01:CA
            X509v3 Authority Key Identifier:
                keyid:3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3133312e3130302e3230342e302f32322d3332203d3e203631363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:ff:4d:7e:be:0a:04:f9:a3:bd:83:08:5b:41:10:94:77:8e:
         3b:f9:1d:83:cb:93:c3:db:29:25:a5:e3:15:7f:b8:d5:60:a4:
         9d:d8:8f:1c:8d:af:16:11:34:6d:5a:01:de:26:7a:f9:0a:6a:
         1e:bb:8e:e1:0d:59:af:31:3e:0f:5f:fe:87:b3:d1:89:47:6a:
         55:ff:25:ce:1d:f2:58:c2:bf:e0:0f:cf:9f:c0:84:d5:fd:11:
         ee:0d:e7:fd:a8:28:60:72:3c:df:5f:1e:8e:94:34:ce:c0:41:
         d9:c3:2d:60:95:a4:c8:cb:96:2e:27:25:32:9f:15:8c:32:66:
         0d:28:6e:ca:4f:a7:2d:21:42:92:55:12:b8:22:c0:60:3c:d7:
         5d:ff:c9:22:54:91:e6:6e:8d:d8:18:96:98:0e:ab:79:aa:77:
         93:e6:5e:18:15:51:ad:ec:45:64:c1:51:06:e3:a9:7e:1a:4f:
         8e:3a:77:06:8e:5d:39:80:65:8d:48:ef:70:90:cc:5c:79:92:
         e4:25:39:fd:41:41:3e:51:ac:d6:8a:ef:b7:a4:2f:e9:06:24:
         6f:63:1f:ff:73:3e:89:a7:3f:c0:3e:27:dd:19:96:cd:b7:02:
         d9:10:b2:88:5f:a4:ce:6c:5b:14:d1:4e:d9:cf:cb:fb:3a:2b:
         b4:63:fe:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:45 2024 by rpki-client on console-ams.rpki-client.org