Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32342d3234203d3e203631373438.roa
File:                     3133312e3130302e35322e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier:          x06tOtV3rAdFyz6rAzSBNV5FQtc/fKwxKBQhkw/+nEs=
Subject key identifier:   88:76:F1:32:A6:41:D9:00:5A:EF:19:AB:44:AF:85:59:C5:B2:5E:45
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       12E03C5EC5202F3F0391FCA10033E39A81AB16EA
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32342d3234203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:18:51 +0000
ROA not before:           Wed 10 Apr 2024 19:13:51 +0000
ROA not after:            Wed 09 Apr 2025 19:18:51 +0000
asID:                     61748
IP address blocks:        131.100.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e0:3c:5e:c5:20:2f:3f:03:91:fc:a1:00:33:e3:9a:81:ab:16:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:13:51 2024 GMT
            Not After : Apr  9 19:18:51 2025 GMT
        Subject: CN=8876F132A641D9005AEF19AB44AF8559C5B25E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:20:2b:bf:b9:13:fb:c0:bc:ab:89:1f:9b:
                    b5:85:d3:73:14:4f:23:44:65:34:12:d2:16:5a:8c:
                    b6:d3:da:df:84:ff:e1:d1:45:97:cf:14:bf:30:77:
                    cf:ce:4e:2b:fd:c0:1b:92:48:70:10:b9:a4:c6:17:
                    ab:83:71:1d:6a:14:b6:de:df:0f:ae:4e:7c:03:fd:
                    8f:d0:fe:ec:36:2f:37:88:ab:56:61:d2:4d:e2:65:
                    eb:93:de:64:51:b2:71:ce:fb:b6:f9:98:d5:02:57:
                    0b:a3:97:ac:7a:57:3e:b7:8a:fa:80:cf:da:5a:b3:
                    e7:6c:b6:ef:df:10:08:5a:f9:3a:51:9d:26:57:08:
                    49:87:90:6f:9b:a4:e3:a2:62:30:4e:4f:a2:e9:e2:
                    43:de:d7:3b:e6:f6:51:a8:fe:70:ea:93:e2:0f:42:
                    2e:32:1a:79:0b:64:ee:cd:d7:f0:1c:b1:ae:7c:56:
                    3e:7f:0f:7c:49:d7:20:6f:aa:a7:87:1d:eb:42:f5:
                    b0:61:ac:5f:f5:7e:10:d8:23:27:b3:81:e1:5c:a6:
                    dd:72:66:97:48:c2:cc:04:ca:bd:8e:e3:27:e4:d9:
                    ed:4e:7c:cf:f2:cb:54:d7:e8:5e:22:15:79:28:c3:
                    d8:3f:d3:1d:ad:31:9d:52:d2:2e:5d:9b:13:75:f0:
                    fa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:76:F1:32:A6:41:D9:00:5A:EF:19:AB:44:AF:85:59:C5:B2:5E:45
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35322e302f32342d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ba:97:16:94:8c:a3:f5:47:59:98:21:10:da:3f:99:17:e7:
         c7:db:54:7f:f5:c1:c5:ce:47:dc:26:cb:23:b0:92:b5:a9:c9:
         cc:fc:f5:63:cd:24:bc:eb:7b:3d:8e:a5:d2:38:4b:23:cf:c3:
         bd:2c:a6:18:fb:5a:83:7c:31:51:d5:bc:d5:4b:80:dd:d4:b7:
         68:1e:f9:21:9a:5f:93:8c:07:3c:1a:10:1b:94:fc:e8:82:79:
         91:41:40:17:ab:c9:05:b0:88:d4:40:6b:de:45:31:54:3f:8a:
         5a:d4:b4:47:da:b5:0f:cc:49:dd:dc:ae:e0:37:21:44:dc:c3:
         6f:39:02:0f:7d:2a:bf:fb:27:0a:ac:5b:14:ec:08:35:f1:f5:
         4c:36:d5:73:49:a1:2f:1b:c1:33:c4:4d:bc:3b:89:28:17:e2:
         ce:ff:db:76:47:99:ab:0d:de:17:e5:a9:ce:72:63:ae:48:9b:
         c0:c9:85:cd:33:9f:9c:0e:cb:5d:1d:db:b9:a4:62:51:b8:95:
         8e:3d:fb:b8:82:ac:db:e5:b1:5c:e8:67:21:a8:a7:c8:2d:91:
         23:f3:8e:34:42:1f:c3:43:d3:4d:5d:c4:b2:8d:ae:47:e9:ae:
         8f:d8:76:7c:72:eb:58:7f:3a:71:59:fc:9e:be:9a:ef:98:23:
         c6:50:f7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:25 2024 by rpki-client on console-ams.rpki-client.org