Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32322d3232203d3e203631373438.roa
File:                     3133312e3130302e35322e302f32322d3232203d3e203631373438.roa (raw, json)
Hash identifier:          ohIKyIt0oBCPrtlHpAT5ria970OA55xPpyyj2Uuj2A0=
Subject key identifier:   EE:5D:8C:06:9F:70:37:6F:3C:2B:38:72:4A:C2:0B:80:C5:B2:25:63
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       3BA0891908F93944DFB8E3146642254CC09107D2
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32322d3232203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:18:44 +0000
ROA not before:           Wed 10 Apr 2024 19:13:44 +0000
ROA not after:            Wed 09 Apr 2025 19:18:44 +0000
asID:                     61748
IP address blocks:        131.100.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a0:89:19:08:f9:39:44:df:b8:e3:14:66:42:25:4c:c0:91:07:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:13:44 2024 GMT
            Not After : Apr  9 19:18:44 2025 GMT
        Subject: CN=EE5D8C069F70376F3C2B38724AC20B80C5B22563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:68:fb:13:d4:eb:a9:48:8c:7d:28:26:00:
                    94:75:04:52:be:e3:80:6b:a3:70:02:dd:c2:7f:19:
                    ee:42:f2:3c:b3:5b:fc:0d:f5:d8:16:83:cd:e4:77:
                    6d:a4:4d:68:f9:7f:9d:a4:98:62:89:21:e4:2f:cd:
                    73:da:37:96:fb:e7:96:d4:e5:95:6e:47:ac:8b:48:
                    bf:55:1c:86:b0:b1:82:7d:33:a8:4d:b5:eb:3c:18:
                    bb:69:2c:a0:40:3c:d7:99:15:c5:0d:b7:ed:ff:55:
                    50:cc:51:f7:99:b0:be:19:bf:4e:f2:9f:b7:b9:53:
                    01:70:f5:b8:c4:f7:c7:68:79:c0:96:35:f3:7d:95:
                    e1:cc:88:7b:6e:49:dc:15:81:6a:e6:67:80:da:26:
                    34:cc:f6:16:d8:fc:f0:be:48:78:7b:b6:d0:3a:8a:
                    19:c4:b2:ca:2a:46:2d:3d:5d:2b:14:06:0f:26:21:
                    98:32:b2:f9:23:a9:53:da:5b:ba:f4:b2:68:0c:20:
                    ab:5b:28:15:b8:29:a3:19:73:18:f2:01:c5:88:bc:
                    5f:85:c0:c8:b8:12:c9:cc:6e:b2:36:7b:eb:fc:99:
                    0b:2f:fc:6d:3d:bc:c3:9f:38:b0:d5:87:55:42:6f:
                    a8:bb:91:a1:54:52:65:f9:f9:b3:93:44:21:22:0a:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5D:8C:06:9F:70:37:6F:3C:2B:38:72:4A:C2:0B:80:C5:B2:25:63
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32322d3232203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:fa:e6:69:09:6a:8e:70:cb:4a:89:5a:8e:84:c2:92:2b:c0:
         27:24:b7:c5:ae:bd:47:1f:2a:65:64:0b:1f:dd:e7:77:42:d5:
         d7:29:64:fa:5b:c8:89:f4:e6:13:8f:39:45:4d:d4:08:8a:99:
         e1:ed:d7:e2:a7:68:bf:09:91:62:1d:3c:92:d9:1d:e0:68:13:
         ab:31:a8:3d:db:d3:ee:2f:75:ba:a5:b5:10:63:46:4e:72:5a:
         50:97:a6:03:5a:a9:c8:6b:19:0c:7e:ba:e7:e4:c2:21:d9:cd:
         4a:51:16:3e:84:7e:53:af:9d:4d:d8:48:d5:83:4d:9a:35:13:
         7d:c8:07:d5:93:95:12:d1:27:13:e5:d8:31:ae:94:a6:55:07:
         6f:56:ae:35:d4:dc:f2:44:4d:74:61:72:89:b7:05:a6:eb:eb:
         ab:6c:7f:3f:48:05:5a:cc:11:05:c3:05:c0:8e:fa:e7:25:34:
         e2:ac:31:a8:67:4e:3d:04:06:8f:64:84:a0:90:46:77:6c:d7:
         35:79:68:62:25:3c:d5:bc:fa:ab:99:1b:57:1c:fb:7b:eb:61:
         eb:80:f2:9a:c9:54:f4:d9:66:28:6c:5a:d7:04:cf:0f:a4:46:
         49:15:cb:17:0c:80:6f:05:40:dc:e1:6e:06:dd:06:47:af:b8:
         5d:56:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org