Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32322d3332203d3e203631363830.roa
File:                     3133312e3130382e36342e302f32322d3332203d3e203631363830.roa (raw, json)
Hash identifier:          +YcXcXShygkFmQvNRXpd1I97RfF0Vxil/eFTmtLL+Gs=
Subject key identifier:   52:A4:76:BD:A8:67:39:EF:09:45:BF:53:0D:20:5C:80:A4:4D:86:75
Certificate issuer:       /CN=9D1976629022211514D82A46F1AF3344D2E667F3
Certificate serial:       60F4B7A521AA83C06B9DF88D1A1C3C066482DD5C
Authority key identifier: 9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32322d3332203d3e203631363830.roa
Signing time:             Sat 23 Nov 2024 21:22:18 +0000
ROA not before:           Sat 23 Nov 2024 21:17:18 +0000
ROA not after:            Sat 22 Nov 2025 21:22:18 +0000
asID:                     61680
IP address blocks:        131.108.64.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f4:b7:a5:21:aa:83:c0:6b:9d:f8:8d:1a:1c:3c:06:64:82:dd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D1976629022211514D82A46F1AF3344D2E667F3
        Validity
            Not Before: Nov 23 21:17:18 2024 GMT
            Not After : Nov 22 21:22:18 2025 GMT
        Subject: CN=52A476BDA86739EF0945BF530D205C80A44D8675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:98:7e:ea:d8:c1:0b:5c:6c:15:b3:fb:a9:
                    8b:03:29:87:97:ec:94:10:de:89:18:3f:33:66:1b:
                    ad:c1:e5:18:94:43:c1:da:73:3b:64:fe:49:c4:d1:
                    bc:db:93:11:67:63:4d:6b:e8:9a:0d:72:6e:30:8e:
                    69:25:ac:ad:ef:7d:1a:d7:ca:a4:e7:5c:8e:0a:32:
                    c9:be:ba:79:0e:8e:ac:18:40:e0:d0:5e:67:0f:14:
                    e5:0e:16:53:07:e6:36:7f:5e:73:a8:ea:46:75:2e:
                    08:a6:e0:c0:91:40:88:5d:86:08:5f:97:1f:b3:ae:
                    4f:f4:3a:93:91:28:1b:11:6c:03:de:99:d6:71:d9:
                    cc:13:54:58:a8:58:af:de:67:f7:be:28:0c:96:36:
                    be:d1:88:2a:bd:4b:56:cf:b8:a7:71:ab:0b:26:c6:
                    fd:b6:3c:5c:a3:ac:cd:40:0f:ac:84:84:61:88:59:
                    41:e3:20:4c:97:94:bb:57:4f:b1:56:b7:8a:1f:c4:
                    2f:36:b4:f5:17:ff:5b:67:b7:2e:97:57:42:ea:40:
                    70:37:fb:01:1e:ca:ba:9e:0f:de:e0:98:ba:23:eb:
                    28:c8:12:fe:c0:e6:6a:2b:bf:92:98:e4:57:76:31:
                    ae:58:a1:04:30:6f:58:96:fa:37:bb:8a:36:62:c7:
                    9d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A4:76:BD:A8:67:39:EF:09:45:BF:53:0D:20:5C:80:A4:4D:86:75
            X509v3 Authority Key Identifier:
                keyid:9D:19:76:62:90:22:21:15:14:D8:2A:46:F1:AF:33:44:D2:E6:67:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/9D1976629022211514D82A46F1AF3344D2E667F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D1976629022211514D82A46F1AF3344D2E667F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/3133312e3130382e36342e302f32322d3332203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:44:9d:ab:e7:84:97:9b:26:23:9c:5a:97:79:de:97:d4:
         70:ca:66:d0:ea:c1:50:4e:d8:b7:0c:c5:82:dd:0b:0c:d8:0d:
         7c:67:a5:f4:0c:ca:78:c1:f1:34:27:95:75:01:e5:b5:3d:8b:
         65:f6:0b:fa:d6:83:85:8c:02:ae:49:66:27:99:a0:52:2d:d0:
         f8:08:ae:02:c9:f0:49:ed:6d:8c:d8:bb:dd:5f:ef:c9:9d:bc:
         f3:3e:57:ec:c4:6f:95:19:66:35:60:9d:80:1a:01:6d:bf:84:
         30:12:2c:82:22:00:de:bb:ca:75:35:a1:23:f0:07:f6:53:78:
         39:08:f2:e9:b7:2c:0f:05:04:03:93:20:34:27:5c:60:3f:5e:
         46:01:65:69:2f:e2:72:a1:fa:ac:58:79:7b:90:74:6e:ff:41:
         9d:93:b1:1b:96:5b:64:d0:c9:5c:23:7a:dd:a0:7d:54:63:71:
         bd:53:f1:46:ef:dd:0b:59:2c:8e:aa:85:65:bf:7c:ae:ef:5f:
         c4:2d:b3:99:89:5a:bb:7c:4c:6e:24:3b:5a:aa:20:88:0c:f7:
         79:11:08:c1:be:42:f5:c0:56:ba:c3:3d:e2:ad:94:52:1b:44:
         ea:6d:71:e8:e1:2f:7d:70:fc:3f:9b:e1:69:c8:fc:ab:77:1b:
         7d:97:90:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYPS3pSGqg8BrnfiNGhw8BmSC3VwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQxOTc2NjI5MDIyMjExNTE0RDgyQTQ2RjFBRjMzNDRE
MkU2NjdGMzAeFw0yNDExMjMyMTE3MThaFw0yNTExMjIyMTIyMThaMDMxMTAvBgNV
BAMTKDUyQTQ3NkJEQTg2NzM5RUYwOTQ1QkY1MzBEMjA1QzgwQTQ0RDg2NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Pph+6tjBC1xsFbP7qYsDKYeX
7JQQ3okYPzNmG63B5RiUQ8Hacztk/knE0bzbkxFnY01r6JoNcm4wjmklrK3vfRrX
yqTnXI4KMsm+unkOjqwYQODQXmcPFOUOFlMH5jZ/XnOo6kZ1Lgim4MCRQIhdhghf
lx+zrk/0OpORKBsRbAPemdZx2cwTVFioWK/eZ/e+KAyWNr7RiCq9S1bPuKdxqwsm
xv22PFyjrM1AD6yEhGGIWUHjIEyXlLtXT7FWt4ofxC82tPUX/1tnty6XV0LqQHA3
+wEeyrqeD97gmLoj6yjIEv7A5morv5KY5Fd2Ma5YoQQwb1iW+je7ijZix52vAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUqR2vahnOe8JRb9TDSBcgKRNhnUwHwYDVR0j
BBgwFoAUnRl2YpAiIRUU2CpG8a8zRNLmZ/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRm9Xc3RDWXZLYlB4UTdtQ3BEaFh4U0RjWTVXWk1wQnVRaVdhUTNvZFZq
eHIvMC85RDE5NzY2MjkwMjIyMTE1MTREODJBNDZGMUFGMzM0NEQyRTY2N0YzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMTk3NjYyOTAyMjIxMTUx
NEQ4MkE0NkYxQUYzMzQ0RDJFNjY3RjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZvV3N0Q1l2S2JQeFE3bUNwRGhYeFNEY1k1V1pNcEJ1UWlXYVEzb2RWanhyLzAv
MzEzMzMxMmUzMTMwMzgyZTM2MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNjMx
MzYzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg2xAMA0GCSqGSIb3DQEBCwUAA4IBAQAW60Sdq+eE
l5smI5xal3nel9RwymbQ6sFQTti3DMWC3QsM2A18Z6X0DMp4wfE0J5V1AeW1PYtl
9gv61oOFjAKuSWYnmaBSLdD4CK4CyfBJ7W2M2LvdX+/JnbzzPlfsxG+VGWY1YJ2A
GgFtv4QwEiyCIgDeu8p1NaEj8Af2U3g5CPLptywPBQQDkyA0J1xgP15GAWVpL+Jy
ofqsWHl7kHRu/0Gdk7Eblltk0MlcI3rdoH1UY3G9U/FG790LWSyOqoVlv3yu71/E
LbOZiVq7fExuJDtaqiCIDPd5EQjBvkL1wFa6wz3irZRSG0TqbXHo4S99cPw/m+Fp
yPyrdxt9l5Ca
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:58 2024 by rpki-client on console-fra.rpki-client.org