Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3332203d3e203631373435.roa
File:                     3133312e37322e3135322e302f32322d3332203d3e203631373435.roa (raw, json)
Hash identifier:          aaX0evGI+LGTHR5P0i5qo8nlo7eCrPGc7oIK0Znz8is=
Subject key identifier:   A1:A0:80:E3:A6:F2:EB:26:49:86:2B:7F:E4:CA:0A:E5:F0:D7:9D:16
Certificate issuer:       /CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
Certificate serial:       7EBEF7BB0CDC25D75A358CD30008B561628D12F5
Authority key identifier: 4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3332203d3e203631373435.roa
Signing time:             Tue 26 Nov 2024 10:18:45 +0000
ROA not before:           Tue 26 Nov 2024 10:13:45 +0000
ROA not after:            Tue 25 Nov 2025 10:18:45 +0000
asID:                     61745
IP address blocks:        131.72.152.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:be:f7:bb:0c:dc:25:d7:5a:35:8c:d3:00:08:b5:61:62:8d:12:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D2990768E393F68FA14BF3F1F2B973208903FBC
        Validity
            Not Before: Nov 26 10:13:45 2024 GMT
            Not After : Nov 25 10:18:45 2025 GMT
        Subject: CN=A1A080E3A6F2EB2649862B7FE4CA0AE5F0D79D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:4d:10:e3:6d:0c:eb:b8:55:05:1d:b7:7f:
                    41:f0:32:9b:3d:c6:f8:64:3d:b7:f1:52:33:03:db:
                    00:a1:3d:0a:ba:4d:c8:a6:cb:bf:fa:32:6e:f0:82:
                    c1:d1:a5:d2:5c:8d:db:fa:aa:6a:f8:b3:90:06:1d:
                    39:7e:e5:af:e4:89:ea:3f:a2:e7:df:e9:ea:5b:ed:
                    50:e4:ec:4b:63:d6:45:79:b8:3a:25:fb:c2:26:22:
                    ba:10:1d:6e:f8:42:ce:85:32:9f:00:b5:0b:bb:1f:
                    73:6b:5f:d5:30:96:d0:df:ba:03:ba:c9:20:73:69:
                    fb:b3:a0:fa:56:03:da:62:bf:08:09:8e:85:34:56:
                    2c:9c:27:08:4b:04:35:0e:23:bd:62:b1:ec:d8:13:
                    cf:d2:13:19:c3:02:84:3c:44:87:58:30:c5:9b:8c:
                    36:b4:80:e9:1d:de:33:08:1b:89:af:66:8b:ae:b3:
                    e3:04:32:50:23:86:60:55:09:63:3f:6e:76:65:0a:
                    ad:31:ac:cc:3a:8d:a0:04:93:b8:38:74:73:54:2e:
                    81:9d:26:72:6b:f5:59:92:3e:9c:64:93:6a:9c:89:
                    e4:c0:37:7f:05:cd:a5:0b:43:1c:4f:de:af:5c:57:
                    2f:32:13:28:56:ab:3f:a5:68:5a:af:69:1e:77:b5:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A0:80:E3:A6:F2:EB:26:49:86:2B:7F:E4:CA:0A:E5:F0:D7:9D:16
            X509v3 Authority Key Identifier:
                keyid:4D:29:90:76:8E:39:3F:68:FA:14:BF:3F:1F:2B:97:32:08:90:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/4D2990768E393F68FA14BF3F1F2B973208903FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D2990768E393F68FA14BF3F1F2B973208903FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3133312e37322e3135322e302f32322d3332203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:3f:27:70:6f:7f:fe:06:f9:0b:33:17:ff:57:a2:fa:18:
         48:60:05:e8:cc:fc:96:7b:ef:5c:10:43:cc:09:c1:66:d6:4d:
         f3:0f:87:d8:d7:6b:d6:2d:cc:c6:59:41:a0:6a:20:a3:91:e7:
         e1:57:0f:7c:7b:b9:e2:2b:12:cc:1e:1e:c3:b8:93:be:7c:61:
         7d:e6:f7:b2:4e:1b:46:cc:77:6d:48:13:ef:88:be:6e:26:bd:
         cc:c8:a9:6c:a0:9b:71:1c:16:b2:0c:6d:1c:4e:0d:55:b2:11:
         3f:fb:26:d1:90:c4:70:78:f8:0d:e5:5e:ba:c4:46:eb:24:d4:
         1b:1e:85:03:a3:84:40:de:ca:52:2d:7e:bd:66:92:10:7e:01:
         e9:c8:71:1d:ef:30:7e:5e:37:97:8a:b9:dd:62:84:d1:cb:75:
         97:af:38:be:45:04:8e:35:4d:a5:f3:0f:30:68:f2:44:44:97:
         6a:70:40:a2:c3:e5:95:f0:0d:cb:fb:16:d6:81:f0:6f:33:fe:
         fa:e4:26:1b:5f:e2:5a:04:e0:0c:9e:26:0c:33:cc:50:a0:b2:
         f6:bf:1e:6b:12:82:fd:2e:2d:d4:e0:10:2d:de:43:d4:24:ed:
         80:67:c0:fc:49:7b:5e:18:23:f3:a5:11:a5:db:15:d5:90:d7:
         e3:98:80:9f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfr73uwzcJddaNYzTAAi1YWKNEvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQyOTkwNzY4RTM5M0Y2OEZBMTRCRjNGMUYyQjk3MzIw
ODkwM0ZCQzAeFw0yNDExMjYxMDEzNDVaFw0yNTExMjUxMDE4NDVaMDMxMTAvBgNV
BAMTKEExQTA4MEUzQTZGMkVCMjY0OTg2MkI3RkU0Q0EwQUU1RjBENzlEMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUE0Q420M67hVBR23f0HwMps9
xvhkPbfxUjMD2wChPQq6Tcimy7/6Mm7wgsHRpdJcjdv6qmr4s5AGHTl+5a/kieo/
ouff6epb7VDk7Etj1kV5uDol+8ImIroQHW74Qs6FMp8AtQu7H3NrX9UwltDfugO6
ySBzafuzoPpWA9pivwgJjoU0ViycJwhLBDUOI71isezYE8/SExnDAoQ8RIdYMMWb
jDa0gOkd3jMIG4mvZouus+MEMlAjhmBVCWM/bnZlCq0xrMw6jaAEk7g4dHNULoGd
JnJr9VmSPpxkk2qcieTAN38FzaULQxxP3q9cVy8yEyhWqz+laFqvaR53tUalAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoaCA46by6yZJhit/5MoK5fDXnRYwHwYDVR0j
BBgwFoAUTSmQdo45P2j6FL8/HyuXMgiQP7wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhDVDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgx
NGcvMC80RDI5OTA3NjhFMzkzRjY4RkExNEJGM0YxRjJCOTczMjA4OTAzRkJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREMjk5MDc2OEUzOTNGNjhG
QTE0QkYzRjFGMkI5NzMyMDg5MDNGQkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4Q1Q4RWtRU25FcndVUjlhdjFoMXVjUFVRSmhxVG53VEY5YTg3NDRoMTRnLzAv
MzEzMzMxMmUzNzMyMmUzMTM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNjMx
MzczNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg0iYMA0GCSqGSIb3DQEBCwUAA4IBAQChtT8ncG9/
/gb5CzMX/1ei+hhIYAXozPyWe+9cEEPMCcFm1k3zD4fY12vWLczGWUGgaiCjkefh
Vw98e7niKxLMHh7DuJO+fGF95veyThtGzHdtSBPviL5uJr3MyKlsoJtxHBayDG0c
Tg1VshE/+ybRkMRwePgN5V66xEbrJNQbHoUDo4RA3spSLX69ZpIQfgHpyHEd7zB+
XjeXirndYoTRy3WXrzi+RQSONU2l8w8waPJERJdqcECiw+WV8A3L+xbWgfBvM/76
5CYbX+JaBOAMniYMM8xQoLL2vx5rEoL9Li3U4BAt3kPUJO2AZ8D8SXteGCPzpRGl
2xXVkNfjmICf
-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:37 2024 by rpki-client on console-fra.rpki-client.org