Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35332e302f32342d3234203d3e203631373438.roa
File:                     3133312e3130302e35332e302f32342d3234203d3e203631373438.roa (raw, json)
Hash identifier:          ZtnQ1F41BXlolOG1KSfluqQNOSuuV4ecXPruIOSehgQ=
Subject key identifier:   62:82:6C:7F:C5:D5:1D:D8:C7:76:C7:63:62:3C:D2:53:4B:95:87:59
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       050B6503BCEB9AE45F95CB24C167C32E0E6A4FE4
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35332e302f32342d3234203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:18:56 +0000
ROA not before:           Wed 10 Apr 2024 19:13:56 +0000
ROA not after:            Wed 09 Apr 2025 19:18:56 +0000
asID:                     61748
IP address blocks:        131.100.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0b:65:03:bc:eb:9a:e4:5f:95:cb:24:c1:67:c3:2e:0e:6a:4f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:13:56 2024 GMT
            Not After : Apr  9 19:18:56 2025 GMT
        Subject: CN=62826C7FC5D51DD8C776C763623CD2534B958759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:14:12:ad:b3:ef:2e:2e:2d:54:5c:b4:5b:65:
                    ed:b3:f2:bf:0d:0f:0e:2f:5b:89:75:cd:59:b8:63:
                    e9:f8:1f:dc:ac:e0:1c:57:9e:5d:27:a4:e3:e9:15:
                    68:a4:d6:c6:7e:b0:f4:ee:62:3d:f9:e5:ae:36:75:
                    a3:64:56:b5:e8:fa:b5:62:54:e9:45:20:4a:07:ed:
                    29:d3:2f:5d:73:21:92:7f:ea:a7:02:d1:8e:f3:5a:
                    c9:fc:b6:d7:df:cb:d9:92:c2:2d:bd:80:ba:bc:5c:
                    27:cd:5d:99:de:c3:1a:17:0f:e4:c6:46:8e:24:fd:
                    65:62:fa:e1:a8:60:32:bc:96:1a:3b:61:07:52:0c:
                    82:d1:7d:5d:63:4f:34:05:d1:3c:9b:d3:43:4e:20:
                    63:43:6c:2c:ea:15:6c:fc:d9:94:d6:ef:47:20:73:
                    c8:0f:46:10:4c:93:19:e0:c2:d3:8b:d3:17:95:3e:
                    a4:75:ba:18:40:82:a2:2b:f1:84:ca:26:96:16:2a:
                    0b:c6:85:90:63:35:fa:e7:ca:5b:d7:08:74:37:00:
                    ec:a1:c3:82:9a:c3:3c:5e:0c:43:6d:4c:91:85:c4:
                    98:a8:bc:c5:62:3a:ae:fc:10:0a:79:70:77:e8:76:
                    76:03:43:19:b7:76:09:af:56:c6:b2:de:24:7b:60:
                    f7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:82:6C:7F:C5:D5:1D:D8:C7:76:C7:63:62:3C:D2:53:4B:95:87:59
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35332e302f32342d3234203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:da:64:c6:d3:64:f8:bf:13:93:82:ee:74:63:b9:2c:23:cf:
         93:97:d4:67:d3:7d:a7:b9:6e:84:e9:b6:c7:d4:6f:10:5c:69:
         71:ef:bd:73:fa:4c:76:d8:dd:30:73:c7:83:e0:7c:30:4c:f1:
         bd:2f:61:07:61:67:a3:c2:84:22:7c:63:f6:be:27:65:00:19:
         a7:2c:60:dc:f8:fc:52:bb:86:e4:66:37:d3:d2:b3:af:c6:ba:
         35:01:f8:5e:ca:1f:b2:72:80:91:c3:0c:f3:8f:7f:af:3b:eb:
         87:e6:90:cf:e9:06:70:ed:74:e4:74:10:7b:92:43:61:92:bc:
         c5:28:2d:1d:37:7b:b4:36:63:13:dc:42:1d:ec:4a:f1:93:02:
         d1:60:63:e4:1b:51:e2:cd:39:09:17:d2:d2:70:53:78:eb:89:
         29:36:fb:ea:1d:4c:ab:04:19:b1:5a:e7:e3:0f:43:55:7a:59:
         a5:d4:d6:6f:1d:25:77:de:a3:2e:2e:41:a3:19:1b:ad:3a:6f:
         43:41:88:f6:6b:6c:61:c5:9e:75:b8:48:b0:c3:66:a2:b7:9b:
         dc:b0:3d:3e:59:18:57:be:b6:a5:d4:bc:0a:79:67:73:a0:9f:
         70:98:03:29:5d:33:40:88:23:ec:db:08:0f:08:42:79:3c:1d:
         c0:c3:5b:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBQtlA7zrmuRflcskwWfDLg5qT+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUzQTg3Q0RFMkU5MkFERkQ0NDQyMzI4Q0UyREI3MzQ5
Q0VDRUE0MjAeFw0yNDA0MTAxOTEzNTZaFw0yNTA0MDkxOTE4NTZaMDMxMTAvBgNV
BAMTKDYyODI2QzdGQzVENTFERDhDNzc2Qzc2MzYyM0NEMjUzNEI5NTg3NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoFBKts+8uLi1UXLRbZe2z8r8N
Dw4vW4l1zVm4Y+n4H9ys4BxXnl0npOPpFWik1sZ+sPTuYj355a42daNkVrXo+rVi
VOlFIEoH7SnTL11zIZJ/6qcC0Y7zWsn8ttffy9mSwi29gLq8XCfNXZnewxoXD+TG
Ro4k/WVi+uGoYDK8lho7YQdSDILRfV1jTzQF0Tyb00NOIGNDbCzqFWz82ZTW70cg
c8gPRhBMkxngwtOL0xeVPqR1uhhAgqIr8YTKJpYWKgvGhZBjNfrnylvXCHQ3AOyh
w4KawzxeDENtTJGFxJiovMViOq78EAp5cHfodnYDQxm3dgmvVsay3iR7YPe3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYoJsf8XVHdjHdsdjYjzSU0uVh1kwHwYDVR0j
BBgwFoAUVTqHzeLpKt/URCMozi23NJzs6kIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmoxQ3BCeExlcjJGeHBoSkZBQjk2ZEI0R29hMU15WFF5ZkdhbkdrUXRh
aEMvMC81NTNBODdDREUyRTkyQURGRDQ0NDIzMjhDRTJEQjczNDlDRUNFQTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1M0E4N0NERTJFOTJBREZE
NDQ0MjMyOENFMkRCNzM0OUNFQ0VBNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqMUNwQnhMZXIyRnhwaEpGQUI5NmRCNEdvYTFNeVhReWZHYW5Ha1F0YWhDLzAv
MzEzMzMxMmUzMTMwMzAyZTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg2Q1MA0GCSqGSIb3DQEBCwUAA4IBAQB72mTG02T4
vxOTgu50Y7ksI8+Tl9Rn032nuW6E6bbH1G8QXGlx771z+kx22N0wc8eD4HwwTPG9
L2EHYWejwoQifGP2vidlABmnLGDc+PxSu4bkZjfT0rOvxro1Afheyh+ycoCRwwzz
j3+vO+uH5pDP6QZw7XTkdBB7kkNhkrzFKC0dN3u0NmMT3EId7ErxkwLRYGPkG1Hi
zTkJF9LScFN464kpNvvqHUyrBBmxWufjD0NVelml1NZvHSV33qMuLkGjGRutOm9D
QYj2a2xhxZ51uEiww2ait5vcsD0+WRhXvral1LwKeWdzoJ9wmAMpXTNAiCPs2wgP
CEJ5PB3Aw1u3
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:08 2024 by rpki-client on console-fra.rpki-client.org