Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa
File:                     3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa (raw, json)
Hash identifier:          mFq9f6yc3wJBuzoZziisPUjPcbEqFVxVF8fQncxAs88=
Subject key identifier:   39:AD:94:4E:F6:5F:D8:81:95:AC:11:9E:8E:E8:66:24:B3:BF:C7:01
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       4FE0ECC538DA050D0D8CC05F389762F3239D1827
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa
Signing time:             Fri 05 Apr 2024 03:07:34 +0000
ROA not before:           Fri 05 Apr 2024 03:02:34 +0000
ROA not after:            Fri 04 Apr 2025 03:07:34 +0000
asID:                     52758
IP address blocks:        201.131.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e0:ec:c5:38:da:05:0d:0d:8c:c0:5f:38:97:62:f3:23:9d:18:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Apr  5 03:02:34 2024 GMT
            Not After : Apr  4 03:07:34 2025 GMT
        Subject: CN=39AD944EF65FD88195AC119E8EE86624B3BFC701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0f:71:72:89:0f:35:80:68:7c:72:b6:53:46:
                    b3:67:79:cb:6d:37:76:4a:e9:12:4b:a6:fa:83:cc:
                    a4:fa:5a:10:38:55:8b:16:a9:2c:9c:9d:2b:7d:07:
                    13:e3:23:07:38:b5:7c:3a:3a:18:82:0e:3d:38:79:
                    71:75:80:8d:5d:e5:e5:94:f2:32:2c:06:f4:a6:c8:
                    ec:3c:15:a9:66:11:09:0b:38:11:d9:21:a4:9b:b6:
                    28:2a:dc:77:ff:f3:80:ca:fa:23:55:c7:12:35:b4:
                    63:9e:e2:4e:c0:2a:10:e9:eb:24:bf:e3:d2:50:0d:
                    62:6c:80:90:c9:b6:a9:6c:67:f2:6b:bd:aa:f5:e1:
                    8c:97:4f:2f:cc:46:04:6d:a8:78:be:c4:8b:6c:d9:
                    35:92:b6:56:04:a3:73:4a:a5:6c:67:1c:39:dc:09:
                    1c:21:7d:4f:6d:78:9a:3d:e2:03:e3:88:d1:58:a9:
                    6b:a1:fa:86:ef:91:71:d1:1a:7c:0f:81:6f:ef:8f:
                    0a:92:40:28:ba:f2:16:c2:59:2f:c5:64:09:ba:b5:
                    f1:be:99:47:0f:1b:bd:a7:85:14:1d:27:ba:9a:fe:
                    a3:92:ed:df:23:4b:a3:87:9e:1c:61:15:24:d6:49:
                    66:16:00:1a:f0:f2:1e:cb:aa:06:3a:d4:3c:40:f6:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:94:4E:F6:5F:D8:81:95:AC:11:9E:8E:E8:66:24:B3:BF:C7:01
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234302e302f32332d3233203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:91:c9:28:4a:5b:10:bb:2d:88:73:2e:25:01:c0:33:38:7a:
         c7:9e:54:94:e5:36:b5:38:fd:33:c2:df:01:a2:13:d4:c7:bd:
         39:e1:e0:de:8c:53:df:f8:0f:16:98:81:55:ad:7b:11:83:c7:
         fc:ef:4e:48:2c:f5:45:ec:a7:db:16:ac:19:07:ed:79:9d:d5:
         5e:6c:ac:29:44:c5:00:e1:37:05:81:8e:28:af:c8:fe:fd:c0:
         e8:20:ae:a6:42:93:de:16:f2:51:a8:1d:16:cd:eb:6b:76:cb:
         5d:25:64:5e:de:e0:24:cd:4b:d2:05:33:50:20:0d:93:35:7d:
         da:2e:54:0e:a6:39:e8:77:46:9e:8f:fe:8e:b6:aa:cb:13:79:
         cb:7c:6d:e8:2d:51:f5:55:1f:c1:be:27:7a:60:3c:ab:bd:2b:
         35:42:51:1f:7a:fb:d0:71:e3:ae:d9:24:e9:39:8c:d6:87:a7:
         15:e1:ac:4b:f3:71:38:d2:a8:f7:e6:1d:48:f1:b5:cb:76:e2:
         ce:d9:42:de:be:b7:7e:4c:56:7f:93:d0:1c:19:b1:0b:49:2c:
         fa:4c:43:96:bf:d4:6e:6a:d2:3b:59:0b:7d:04:43:ca:7f:05:
         07:ce:75:96:89:94:a2:88:9e:f5:1b:f2:ed:1e:c2:97:c7:a8:
         e8:b2:3b:96
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT+DsxTjaBQ0NjMBfOJdi8yOdGCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFNDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRF
MzcwQzZEQjAeFw0yNDA0MDUwMzAyMzRaFw0yNTA0MDQwMzA3MzRaMDMxMTAvBgNV
BAMTKDM5QUQ5NDRFRjY1RkQ4ODE5NUFDMTE5RThFRTg2NjI0QjNCRkM3MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZD3FyiQ81gGh8crZTRrNnectt
N3ZK6RJLpvqDzKT6WhA4VYsWqSycnSt9BxPjIwc4tXw6OhiCDj04eXF1gI1d5eWU
8jIsBvSmyOw8FalmEQkLOBHZIaSbtigq3Hf/84DK+iNVxxI1tGOe4k7AKhDp6yS/
49JQDWJsgJDJtqlsZ/Jrvar14YyXTy/MRgRtqHi+xIts2TWStlYEo3NKpWxnHDnc
CRwhfU9teJo94gPjiNFYqWuh+obvkXHRGnwPgW/vjwqSQCi68hbCWS/FZAm6tfG+
mUcPG72nhRQdJ7qa/qOS7d8jS6OHnhxhFSTWSWYWABrw8h7LqgY61DxA9gYRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOa2UTvZf2IGVrBGejuhmJLO/xwEwHwYDVR0j
BBgwFoAUs+Rf8/0h+3dfdQMLeyTAJONwxtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMS9CM0U0NUZGM0ZEMjFGQjc3NUY3NTAzMEI3QjI0QzAyNEUzNzBDNkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRTQ1RkYzRkQyMUZCNzc1
Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEv
MzIzMDMxMmUzMTMzMzEyZTMyMzQzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJg/AwDQYJKoZIhvcNAQELBQADggEBABmRyShK
WxC7LYhzLiUBwDM4eseeVJTlNrU4/TPC3wGiE9THvTnh4N6MU9/4DxaYgVWtexGD
x/zvTkgs9UXsp9sWrBkH7Xmd1V5srClExQDhNwWBjiivyP79wOggrqZCk94W8lGo
HRbN62t2y10lZF7e4CTNS9IFM1AgDZM1fdouVA6mOeh3Rp6P/o62qssTect8begt
UfVVH8G+J3pgPKu9KzVCUR96+9Bx467ZJOk5jNaHpxXhrEvzcTjSqPfmHUjxtct2
4s7ZQt6+t35MVn+T0BwZsQtJLPpMQ5a/1G5q0jtZC30EQ8p/BQfOdZaJlKKInvUb
8u0ewpfHqOiyO5Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:19 2024 by rpki-client on console-ams.rpki-client.org