Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35342e302f32332d3233203d3e203631373438.roa
File:                     3133312e3130302e35342e302f32332d3233203d3e203631373438.roa (raw, json)
Hash identifier:          s0Vbr47XcjzyFJxOCd8S68pkU7nijH3Lo82sroN8t7c=
Subject key identifier:   70:25:14:36:61:2C:64:87:B6:37:FE:6C:BC:E9:86:48:1F:FB:66:19
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       0D6E8670539174542747CE8C0669AC059F3280F9
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35342e302f32332d3233203d3e203631373438.roa
Signing time:             Wed 10 Apr 2024 19:19:00 +0000
ROA not before:           Wed 10 Apr 2024 19:14:00 +0000
ROA not after:            Wed 09 Apr 2025 19:19:00 +0000
asID:                     61748
IP address blocks:        131.100.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6e:86:70:53:91:74:54:27:47:ce:8c:06:69:ac:05:9f:32:80:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Apr 10 19:14:00 2024 GMT
            Not After : Apr  9 19:19:00 2025 GMT
        Subject: CN=70251436612C6487B637FE6CBCE986481FFB6619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:b6:47:79:22:bc:31:0d:5f:46:40:08:18:
                    3d:17:14:d9:24:16:4e:f9:19:ea:01:5f:d6:10:f0:
                    fe:27:1a:14:1a:d1:a8:f1:05:88:fb:4e:97:1a:0b:
                    23:bb:4c:b5:f1:45:26:69:c1:c4:ea:15:b8:67:60:
                    ed:ed:65:81:ba:e7:fb:98:98:37:e0:14:88:da:65:
                    10:26:e3:56:4b:21:74:bc:ea:58:35:30:cc:bf:20:
                    33:bf:b4:55:2b:a4:b5:a8:66:93:40:34:b7:10:0a:
                    80:7c:03:47:5f:e4:f9:f3:1d:68:b6:c2:2d:5e:dd:
                    3f:f4:39:b6:39:71:6a:75:1d:a3:2d:14:ae:d8:af:
                    f4:ed:17:5c:1d:31:0f:dd:58:fb:da:60:6f:53:2f:
                    aa:90:16:a8:4c:43:a1:c3:48:ea:e6:70:b2:89:c7:
                    3c:33:05:fa:02:48:86:ef:76:f1:eb:f8:b4:75:c4:
                    7c:50:b1:35:45:6f:21:9c:84:29:0d:65:40:7e:01:
                    e8:be:ae:bd:4c:09:7a:de:8b:8b:ed:3f:d2:40:5c:
                    fb:06:1d:16:9f:34:71:be:5d:2c:da:15:88:82:bd:
                    ec:f5:34:8e:9c:0e:fb:76:bb:af:b5:ab:f3:d2:00:
                    9d:78:69:30:d0:1d:15:bc:6d:d1:df:0a:9d:4f:99:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:25:14:36:61:2C:64:87:B6:37:FE:6C:BC:E9:86:48:1F:FB:66:19
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3133312e3130302e35342e302f32332d3233203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:34:36:af:6e:01:de:47:6a:5b:f9:56:74:e7:7a:54:40:ea:
         b2:e2:f8:e7:48:c7:71:9b:b7:79:33:af:7d:65:f0:fa:3d:7b:
         c9:0f:8b:8d:85:ad:2f:78:c6:27:80:ef:8d:c3:dd:11:eb:0d:
         e0:bf:38:d7:df:75:92:c1:9d:bc:da:b7:74:53:ed:c6:59:92:
         2c:9f:2d:06:f5:bf:10:89:0b:ec:95:99:10:06:96:60:b5:56:
         ee:0e:dd:3d:88:93:a6:3c:7b:c6:e5:f8:40:f8:a2:78:b1:e2:
         4f:10:a4:1b:de:2e:ac:77:c1:a6:f0:72:11:ef:91:76:19:17:
         6a:af:6c:ea:e1:77:0d:3c:a9:18:78:2b:d3:27:42:39:8c:74:
         00:70:6d:c2:57:f7:5a:0e:b4:1e:14:fa:3e:8c:eb:da:15:05:
         6b:94:54:f5:5c:89:b1:a4:5e:75:a5:c2:fa:c8:c4:d6:a1:35:
         9e:d4:49:8e:61:85:3e:a7:4d:7c:a4:6f:31:10:10:b8:2a:b5:
         59:ca:7c:0a:25:64:20:42:20:10:a0:77:0e:b3:71:3b:e5:77:
         d0:33:5e:24:f9:1e:62:b1:ac:f3:fc:93:cc:38:b3:18:e2:c3:
         7c:95:5c:4f:64:a4:e1:ec:2c:63:9f:2f:aa:07:fc:89:a5:e2:
         9e:37:42:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:12 2024 by rpki-client on console-fra.rpki-client.org