Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa
File:                     3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          a6VruKH9lkwUDkULKKbZWrsXvrDoNWAcrUoSNPrrsrU=
Subject key identifier:   C4:DF:95:12:6F:6F:6D:2B:1C:61:F9:1A:8B:AB:74:DC:10:EA:34:48
Certificate issuer:       /CN=817F49231FF07F454E790AAA133485546F995822
Certificate serial:       477E69281B53E7C9CAF3441FCBCA6887BA8A9055
Authority key identifier: 81:7F:49:23:1F:F0:7F:45:4E:79:0A:AA:13:34:85:54:6F:99:58:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa
Signing time:             Thu 04 Apr 2024 10:14:01 +0000
ROA not before:           Thu 04 Apr 2024 10:09:01 +0000
ROA not after:            Thu 03 Apr 2025 10:14:01 +0000
asID:                     53107
IP address blocks:        131.100.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 06:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7e:69:28:1b:53:e7:c9:ca:f3:44:1f:cb:ca:68:87:ba:8a:90:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F49231FF07F454E790AAA133485546F995822
        Validity
            Not Before: Apr  4 10:09:01 2024 GMT
            Not After : Apr  3 10:14:01 2025 GMT
        Subject: CN=C4DF95126F6F6D2B1C61F91A8BAB74DC10EA3448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:11:77:98:b3:48:77:65:37:b7:3b:e2:70:
                    1d:ec:a4:3d:79:bf:67:38:d2:e0:80:87:fc:94:3f:
                    5f:c8:f2:84:bf:ee:9a:78:d6:13:eb:54:bc:6e:45:
                    8f:be:56:29:bb:e5:53:93:16:63:c0:5b:b3:2d:7a:
                    df:27:77:02:99:9b:64:4d:df:50:45:da:c1:0f:f5:
                    1f:fa:72:1b:76:29:8b:c4:67:2d:00:40:f1:2e:c5:
                    e8:f0:75:34:2a:3f:9d:2f:36:34:9b:e7:0b:c1:30:
                    f0:9c:f7:81:31:f9:96:cf:e7:06:c1:78:b0:e6:ec:
                    0a:79:8f:1b:65:55:e6:d6:dd:ff:6f:18:99:14:4a:
                    be:01:8d:b0:3f:43:6b:ab:05:8f:29:1f:7c:5c:78:
                    fe:7d:7f:77:79:12:67:25:c6:28:2c:af:33:51:11:
                    cd:0e:73:e5:ad:5f:71:15:54:13:26:ea:dc:7c:a1:
                    a8:d1:b2:50:91:66:33:02:cc:72:ab:ec:65:d3:90:
                    a3:23:7f:d4:01:70:96:ac:a8:0a:c6:19:ad:67:3d:
                    4c:ac:ad:dd:82:80:7d:da:de:cc:8b:60:12:f3:bc:
                    30:fa:87:88:8b:35:45:0f:3e:4b:8a:34:52:b6:44:
                    c4:3e:c8:e0:52:a9:8d:58:8a:9f:3f:78:d2:11:33:
                    8b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DF:95:12:6F:6F:6D:2B:1C:61:F9:1A:8B:AB:74:DC:10:EA:34:48
            X509v3 Authority Key Identifier:
                keyid:81:7F:49:23:1F:F0:7F:45:4E:79:0A:AA:13:34:85:54:6F:99:58:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3133312e3130302e3232382e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:e8:6d:75:2e:12:c1:32:50:09:d1:78:cf:e7:32:e5:db:01:
         cf:3c:02:a4:69:bf:73:87:39:31:4c:5f:ed:77:81:84:2d:0c:
         8a:fa:6d:68:8e:26:a2:c4:a2:a0:41:6a:b2:8d:ec:2a:e2:b8:
         89:5a:08:71:d6:8a:22:43:57:d7:cc:cb:f2:4a:00:69:45:44:
         fc:e4:07:29:16:00:2a:0e:a6:d4:7b:cb:56:65:69:1e:32:20:
         3a:03:9c:11:17:2e:0f:45:dd:b1:6a:e1:d8:cb:04:6c:8e:8b:
         4a:85:57:fb:69:ac:72:ad:de:05:c5:a2:af:14:8e:53:fb:92:
         52:1c:e3:83:f6:23:7e:16:c8:77:5f:89:02:91:7e:12:2f:ba:
         1f:62:df:62:3c:00:89:41:d4:25:64:03:b0:29:51:87:91:fb:
         c8:98:5b:38:1e:9d:cb:5e:07:9f:74:8f:25:11:73:83:5c:d4:
         5e:a0:3f:5d:eb:71:95:a0:36:12:51:db:f0:24:f7:11:f8:5c:
         f8:f7:ea:1b:f6:b1:16:d2:e5:39:81:d5:84:9d:27:7a:33:89:
         53:51:10:0a:3b:ee:03:5b:63:e4:1f:b9:69:ac:15:2b:7c:8f:
         92:d2:68:93:91:02:5b:d7:7a:1a:80:a1:c9:b3:f9:eb:34:d8:
         fb:a2:81:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR35pKBtT58nK80Qfy8poh7qKkFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3RjQ5MjMxRkYwN0Y0NTRFNzkwQUFBMTMzNDg1NTQ2
Rjk5NTgyMjAeFw0yNDA0MDQxMDA5MDFaFw0yNTA0MDMxMDE0MDFaMDMxMTAvBgNV
BAMTKEM0REY5NTEyNkY2RjZEMkIxQzYxRjkxQThCQUI3NERDMTBFQTM0NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr2xF3mLNId2U3tzvicB3spD15
v2c40uCAh/yUP1/I8oS/7pp41hPrVLxuRY++Vim75VOTFmPAW7Mtet8ndwKZm2RN
31BF2sEP9R/6cht2KYvEZy0AQPEuxejwdTQqP50vNjSb5wvBMPCc94Ex+ZbP5wbB
eLDm7Ap5jxtlVebW3f9vGJkUSr4BjbA/Q2urBY8pH3xceP59f3d5EmclxigsrzNR
Ec0Oc+WtX3EVVBMm6tx8oajRslCRZjMCzHKr7GXTkKMjf9QBcJasqArGGa1nPUys
rd2CgH3a3syLYBLzvDD6h4iLNUUPPkuKNFK2RMQ+yOBSqY1Yip8/eNIRM4stAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxN+VEm9vbSscYfkai6t03BDqNEgwHwYDVR0j
BBgwFoAUgX9JIx/wf0VOeQqqEzSFVG+ZWCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZTQ3VQNHNiNjR4c3JzQnU0d29BZXFWM21GNFhrdHdKUlBaRVQ2UDU0
TXUvNS84MTdGNDkyMzFGRjA3RjQ1NEU3OTBBQUExMzM0ODU1NDZGOTk1ODIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxN0Y0OTIzMUZGMDdGNDU0
RTc5MEFBQTEzMzQ4NTU0NkY5OTU4MjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2U0N1UDRzYjY0eHNyc0J1NHdvQWVxVjNtRjRYa3R3SlJQWkVUNlA1NE11LzUv
MzEzMzMxMmUzMTMwMzAyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzMzMTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDZOQwDQYJKoZIhvcNAQELBQADggEBAKDobXUu
EsEyUAnReM/nMuXbAc88AqRpv3OHOTFMX+13gYQtDIr6bWiOJqLEoqBBarKN7Cri
uIlaCHHWiiJDV9fMy/JKAGlFRPzkBykWACoOptR7y1ZlaR4yIDoDnBEXLg9F3bFq
4djLBGyOi0qFV/tprHKt3gXFoq8UjlP7klIc44P2I34WyHdfiQKRfhIvuh9i32I8
AIlB1CVkA7ApUYeR+8iYWzgencteB590jyURc4Nc1F6gP13rcZWgNhJR2/Ak9xH4
XPj36hv2sRbS5TmB1YSdJ3oziVNREAo77gNbY+QfuWmsFSt8j5LSaJORAlvXehqA
ocmz+es02Puigaw=
-----END CERTIFICATE-----
Generated at Mon May 20 06:51:07 2024 by rpki-client on console-ams.rpki-client.org