Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa
File:                     3133312e3130302e32342e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          8Bh4DEd0Gk0dUpeE0SE5dS2iVF+HUfMPMx0anVW0gG8=
Subject key identifier:   02:2F:2A:70:73:4C:FC:AC:75:A7:22:71:50:CD:E8:10:81:0D:0D:3E
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       4FF434559BB8CD3FE8C0C67693727201B1316FFE
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa
Signing time:             Tue 06 Aug 2024 00:19:45 +0000
ROA not before:           Tue 06 Aug 2024 00:14:45 +0000
ROA not after:            Tue 05 Aug 2025 00:19:45 +0000
asID:                     53107
IP address blocks:        131.100.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 05:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f4:34:55:9b:b8:cd:3f:e8:c0:c6:76:93:72:72:01:b1:31:6f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Aug  6 00:14:45 2024 GMT
            Not After : Aug  5 00:19:45 2025 GMT
        Subject: CN=022F2A70734CFCAC75A7227150CDE810810D0D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:02:c2:40:4b:13:fc:68:70:e2:53:97:70:
                    91:9d:ab:ca:ca:d6:b8:2d:94:2f:b2:6e:19:f5:82:
                    47:03:b8:c1:a0:e9:9b:36:01:91:77:cb:78:86:b2:
                    d3:67:50:be:8d:ea:5a:57:54:66:bc:31:9f:44:1c:
                    72:22:c7:e9:00:fe:6b:f5:0b:49:4b:bf:e5:c8:fb:
                    42:9d:5c:41:21:e2:d7:80:4a:84:d9:c2:88:ae:06:
                    ad:aa:34:b7:6d:aa:2c:ca:0a:a5:5e:11:ee:08:cd:
                    1e:0a:d5:2c:c0:16:76:1e:03:f3:5e:cb:2f:81:e7:
                    45:9b:2d:54:4f:ee:0a:df:7a:c3:7f:1a:30:8e:93:
                    a1:1c:70:43:2a:b6:1c:d5:93:af:3f:c0:69:99:17:
                    ca:5e:9d:d1:2d:60:12:4a:a1:8d:b6:fd:47:b4:42:
                    73:89:95:3c:bd:6f:21:3b:94:71:45:6a:a4:03:91:
                    5e:c0:29:57:ad:bb:97:62:9b:31:4c:94:f9:e7:50:
                    d4:cf:1b:32:eb:59:44:f5:59:bf:a6:55:61:71:35:
                    ef:bc:43:18:e5:74:c9:a9:81:62:87:1d:c0:cf:56:
                    70:f1:bc:79:7d:bb:c9:da:9e:58:71:eb:71:26:4a:
                    63:fa:94:43:c1:ad:86:07:88:ba:73:f7:b3:34:30:
                    75:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2F:2A:70:73:4C:FC:AC:75:A7:22:71:50:CD:E8:10:81:0D:0D:3E
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:31:de:ec:00:fb:57:42:24:94:af:ea:b0:a6:79:87:d8:ea:
         c0:8a:08:66:d0:67:aa:97:94:2a:1c:e3:c2:50:c1:b4:26:33:
         e2:4f:9f:dd:c7:ef:d8:db:00:aa:43:0c:1a:c6:98:e3:2a:0d:
         4d:79:62:57:d6:26:c9:38:52:cf:7f:ab:c2:93:96:86:50:6e:
         c9:82:a4:08:44:5f:20:b6:6e:ad:cb:ef:a5:17:63:cf:a5:d8:
         8d:65:29:e4:33:4b:b2:2d:f3:c2:cc:82:8d:b4:6c:ac:db:eb:
         31:bd:18:a7:cb:1c:dd:27:e0:65:ab:16:55:4a:21:07:2d:77:
         4f:65:0f:c2:6b:ba:e6:3a:28:e7:37:b0:79:dc:02:60:61:a9:
         97:79:d7:04:43:df:9c:bb:ec:e9:2f:d9:c1:04:14:56:41:cb:
         9c:37:38:4d:d4:6c:f1:7d:f5:b0:39:43:a9:99:4c:e7:4b:c4:
         4b:b6:c4:cf:b5:d1:af:e8:e6:88:c0:89:c2:0f:a5:24:91:20:
         7c:99:e0:23:18:05:6e:6f:13:be:13:ac:07:fe:66:69:cb:b3:
         86:b5:f5:01:16:d5:8f:63:2f:a7:cf:77:8f:04:cd:c4:ab:b3:
         08:c7:c5:6f:6d:2d:eb:4b:7e:3d:8e:a6:0c:58:27:60:4f:3d:
         a5:e7:63:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:44 2025 by rpki-client