Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa
File:                     3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa (raw, json)
Hash identifier:          9mZL+r/M/kWhMUJqxdRo2qC5FHdm4g9gkXtYV8kG+jY=
Subject key identifier:   9C:5A:8C:0F:E3:6C:1C:75:0D:E0:1B:E3:38:EB:66:3B:10:75:28:C0
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       5D55D55A89C23ED5A97528035A7F9CB87774D37D
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa
Signing time:             Fri 05 Apr 2024 03:07:33 +0000
ROA not before:           Fri 05 Apr 2024 03:02:33 +0000
ROA not after:            Fri 04 Apr 2025 03:07:33 +0000
asID:                     52758
IP address blocks:        201.131.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:55:d5:5a:89:c2:3e:d5:a9:75:28:03:5a:7f:9c:b8:77:74:d3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Apr  5 03:02:33 2024 GMT
            Not After : Apr  4 03:07:33 2025 GMT
        Subject: CN=9C5A8C0FE36C1C750DE01BE338EB663B107528C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:d8:fb:71:61:63:3b:60:7c:06:83:c1:65:
                    b0:bb:44:8b:69:4c:f9:bf:c3:c2:02:53:f2:1a:0c:
                    5d:28:e3:8a:bb:66:3d:97:ed:bf:78:cb:05:1c:6e:
                    aa:2a:66:d0:6d:3e:b0:fd:a0:58:03:ae:97:8d:a6:
                    72:dd:6c:9c:cb:e3:30:d2:a0:ad:7f:aa:c3:47:bd:
                    1c:89:80:61:88:b6:a3:b2:bb:a0:ab:ba:8d:f2:49:
                    47:04:4e:19:7c:ba:94:33:28:fe:a3:cd:01:2a:2b:
                    48:72:f4:63:29:c3:90:b4:23:4a:90:be:45:a2:70:
                    28:d5:1e:1f:07:54:b5:d1:09:de:dd:68:02:f5:4b:
                    ca:fc:71:a2:c5:85:96:5f:bc:2f:8a:dc:a1:d5:01:
                    a3:47:ee:8d:6d:99:2a:85:55:c3:f3:1d:12:0b:01:
                    94:e4:d1:77:5e:52:d8:c6:ae:ad:de:58:eb:2b:eb:
                    9b:0d:fb:a8:a8:8c:40:f4:e9:3f:58:f4:e2:92:5b:
                    76:00:76:c5:29:0d:fc:b5:61:a5:43:6e:61:db:b2:
                    79:82:84:a2:d4:8a:b6:f9:51:ff:54:31:c5:b8:f7:
                    3d:c0:d1:69:4c:5f:9e:99:ba:de:50:a5:73:86:6f:
                    3c:e4:e5:c8:84:61:a2:31:99:ab:e5:1b:48:dc:1d:
                    62:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5A:8C:0F:E3:6C:1C:75:0D:E0:1B:E3:38:EB:66:3B:10:75:28:C0
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/3230312e3133312e3234372e302f32342d3234203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1b:ae:73:e9:eb:12:fc:e2:b0:a8:04:f4:10:62:ee:8c:03:
         76:22:08:cf:8f:07:c9:d2:bb:81:17:ec:9c:d8:0f:37:d7:75:
         75:3b:73:b7:8e:f8:e2:03:8e:b2:73:7a:42:74:3c:33:9b:15:
         6d:a4:a2:cb:e9:6f:86:bf:c8:a7:4c:6b:54:05:a9:86:48:71:
         10:f5:74:52:07:33:cc:b7:a7:13:59:a0:4a:6c:04:34:dc:cc:
         1a:2e:d6:9a:65:6a:8a:0f:1b:29:ed:23:bc:a9:c0:86:77:a2:
         7b:f5:b9:7d:af:e2:57:d6:43:e5:bd:03:30:e3:4c:67:6a:7b:
         3d:a2:63:f2:68:97:4b:6c:e1:61:cb:d1:59:64:5e:cf:da:c9:
         38:bb:60:f2:0d:4d:e3:28:ea:9f:0f:27:9e:da:07:68:29:3e:
         f3:e8:94:e6:14:1f:7f:65:6f:68:80:2e:ce:7c:a5:aa:45:70:
         82:b4:c9:55:0f:01:a8:24:96:4e:a3:d0:8c:90:11:bb:5e:a6:
         4f:53:d2:06:92:13:fc:f6:6b:c0:6d:5e:65:f6:ca:5d:a1:78:
         54:02:c8:70:3b:d7:8c:37:4b:74:91:13:cc:4a:93:00:01:b6:
         61:c0:1e:03:d0:f1:26:63:01:60:29:0f:3a:cd:53:6c:e9:de:
         23:47:0e:d5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXVXVWonCPtWpdSgDWn+cuHd0030wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNFNDVGRjNGRDIxRkI3NzVGNzUwMzBCN0IyNEMwMjRF
MzcwQzZEQjAeFw0yNDA0MDUwMzAyMzNaFw0yNTA0MDQwMzA3MzNaMDMxMTAvBgNV
BAMTKDlDNUE4QzBGRTM2QzFDNzUwREUwMUJFMzM4RUI2NjNCMTA3NTI4QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcn9j7cWFjO2B8BoPBZbC7RItp
TPm/w8ICU/IaDF0o44q7Zj2X7b94ywUcbqoqZtBtPrD9oFgDrpeNpnLdbJzL4zDS
oK1/qsNHvRyJgGGItqOyu6Cruo3ySUcEThl8upQzKP6jzQEqK0hy9GMpw5C0I0qQ
vkWicCjVHh8HVLXRCd7daAL1S8r8caLFhZZfvC+K3KHVAaNH7o1tmSqFVcPzHRIL
AZTk0XdeUtjGrq3eWOsr65sN+6iojED06T9Y9OKSW3YAdsUpDfy1YaVDbmHbsnmC
hKLUirb5Uf9UMcW49z3A0WlMX56Zut5QpXOGbzzk5ciEYaIxmavlG0jcHWI/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnFqMD+NsHHUN4BvjOOtmOxB1KMAwHwYDVR0j
BBgwFoAUs+Rf8/0h+3dfdQMLeyTAJONwxtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25yREU2MTdxa2ppN2o0ODVtdXR1OWRXNkFhd3BvVlN5UzNqYVR4YjR1
c2gvMS9CM0U0NUZGM0ZEMjFGQjc3NUY3NTAzMEI3QjI0QzAyNEUzNzBDNkRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzRTQ1RkYzRkQyMUZCNzc1
Rjc1MDMwQjdCMjRDMDI0RTM3MEM2REIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duckRFNjE3cWtqaTdqNDg1bXV0dTlkVzZBYXdwb1ZTeVMzamFUeGI0dXNoLzEv
MzIzMDMxMmUzMTMzMzEyZTMyMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJg/cwDQYJKoZIhvcNAQELBQADggEBABobrnPp
6xL84rCoBPQQYu6MA3YiCM+PB8nSu4EX7JzYDzfXdXU7c7eO+OIDjrJzekJ0PDOb
FW2kosvpb4a/yKdMa1QFqYZIcRD1dFIHM8y3pxNZoEpsBDTczBou1pplaooPGynt
I7ypwIZ3onv1uX2v4lfWQ+W9AzDjTGdqez2iY/Jol0ts4WHL0VlkXs/ayTi7YPIN
TeMo6p8PJ57aB2gpPvPolOYUH39lb2iALs58papFcIK0yVUPAagklk6j0IyQEbte
pk9T0gaSE/z2a8BtXmX2yl2heFQCyHA714w3S3SRE8xKkwABtmHAHgPQ8SZjAWAp
DzrNU2zp3iNHDtU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:19 2024 by rpki-client on console-ams.rpki-client.org