Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa
File:                     3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          VpUQfVg/emuHz9EyvHYlk1tUtzbz131fA5UjfvbA+Go=
Subject key identifier:   8C:AA:1D:AD:B1:97:D7:D9:FC:F3:C1:06:11:7A:80:4B:55:68:1B:6D
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       3666610E0266CD9D8FA25592C669DFD51649452D
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa
Signing time:             Tue 06 Aug 2024 00:18:55 +0000
ROA not before:           Tue 06 Aug 2024 00:13:55 +0000
ROA not after:            Tue 05 Aug 2025 00:18:55 +0000
asID:                     53107
IP address blocks:        131.100.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:66:61:0e:02:66:cd:9d:8f:a2:55:92:c6:69:df:d5:16:49:45:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Aug  6 00:13:55 2024 GMT
            Not After : Aug  5 00:18:55 2025 GMT
        Subject: CN=8CAA1DADB197D7D9FCF3C106117A804B55681B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:53:dd:a1:0a:84:ef:77:56:01:bd:ef:3d:
                    39:ce:d4:0a:6c:d3:18:14:ad:e1:cc:9d:88:da:7d:
                    8f:36:c7:43:ca:a3:0a:65:09:a8:ff:32:6e:77:7b:
                    5f:76:b8:ad:66:0b:0f:77:8d:ae:99:21:a8:17:91:
                    44:15:41:09:2f:da:d6:14:9c:60:df:e8:c6:13:dc:
                    d4:8d:c9:ce:cd:0f:d7:94:ec:bc:a7:f5:54:54:a9:
                    c1:1d:08:fc:c0:3a:fc:0b:2c:b0:19:8d:27:4b:b2:
                    82:db:75:fe:04:48:e4:0c:aa:a8:ec:72:46:60:c9:
                    ad:ff:9f:53:21:93:ae:09:33:b4:73:36:fc:53:fa:
                    6d:ed:14:bb:02:49:9f:4c:c4:e3:fe:86:94:9a:19:
                    51:71:fa:eb:ad:3c:52:27:a6:f2:d3:af:a7:63:37:
                    3c:f2:b8:fa:47:3d:4a:e4:1c:af:4b:96:81:6d:6a:
                    d1:c8:33:eb:a2:b3:dc:c0:76:e9:ad:34:a5:37:08:
                    6a:0d:68:da:4a:17:75:96:93:ec:6a:76:99:f2:e3:
                    08:d3:ed:9d:c2:12:48:d1:a9:db:8d:2f:97:0f:d9:
                    50:43:61:09:e0:c6:3e:4f:42:db:0f:e6:9e:8b:ab:
                    60:f4:1f:6a:6d:80:67:eb:f3:27:67:2d:c7:3e:73:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AA:1D:AD:B1:97:D7:D9:FC:F3:C1:06:11:7A:80:4B:55:68:1B:6D
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:13:7d:08:ac:f7:2e:43:58:f1:d7:43:38:bc:2d:5f:59:07:
         ad:b7:e3:e5:1a:e9:48:89:90:2e:12:68:7f:b9:83:7f:6b:69:
         9b:72:4e:1f:34:81:b6:07:96:cd:56:40:52:09:31:7d:04:3c:
         5e:fb:50:c2:c0:d6:ca:ee:fa:1e:b0:eb:5e:a3:c1:dd:91:d4:
         ba:a8:3d:00:bb:9e:f0:a1:5e:ad:f8:28:58:12:46:90:f7:16:
         9a:bc:db:07:49:8a:1d:20:2b:30:7a:34:31:5e:62:8f:e1:5f:
         cd:ec:d7:bd:08:09:24:22:a1:a8:58:1f:28:48:e3:bb:40:e3:
         a8:2a:e7:22:10:de:75:7d:f1:2e:e1:cb:84:ee:83:06:f7:9e:
         e4:84:37:fc:0d:94:e0:79:ba:90:56:55:13:0d:d3:e2:8e:b9:
         ac:43:94:93:d2:69:f0:62:e6:91:65:e1:4a:ee:22:1b:bd:09:
         78:53:11:7e:ff:c8:ed:49:b2:92:29:25:aa:48:43:7a:7d:55:
         bb:2f:4d:37:84:ea:b7:4e:4f:1d:23:9c:be:13:bc:b5:28:ae:
         f7:64:13:06:0e:83:33:e5:8f:08:63:bf:64:dc:cc:54:2a:0b:
         e9:cc:a6:24:6e:2e:2f:61:8c:90:65:87:70:54:65:14:7f:f7:
         c4:63:df:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org