Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa
File:                     3133312e3130302e32342e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          RnsxHJZ6Kimtq2NMn0PxOAYDGkm/g5pn29UL9keM0MA=
Subject key identifier:   3B:C5:B4:BE:08:9D:3C:89:61:CB:2C:CD:D6:06:16:11:97:71:84:44
Certificate issuer:       /CN=817F49231FF07F454E790AAA133485546F995822
Certificate serial:       486CC52006364373F77741B3F1FA6E0027C9D57E
Authority key identifier: 81:7F:49:23:1F:F0:7F:45:4E:79:0A:AA:13:34:85:54:6F:99:58:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa
Signing time:             Thu 04 Apr 2024 10:14:02 +0000
ROA not before:           Thu 04 Apr 2024 10:09:02 +0000
ROA not after:            Thu 03 Apr 2025 10:14:02 +0000
asID:                     53107
IP address blocks:        131.100.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 23:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6c:c5:20:06:36:43:73:f7:77:41:b3:f1:fa:6e:00:27:c9:d5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F49231FF07F454E790AAA133485546F995822
        Validity
            Not Before: Apr  4 10:09:02 2024 GMT
            Not After : Apr  3 10:14:02 2025 GMT
        Subject: CN=3BC5B4BE089D3C8961CB2CCDD606161197718444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f5:48:b9:18:19:00:69:1c:0c:d1:27:53:0d:
                    9d:9a:20:d9:b6:f6:e6:92:8c:31:5c:c9:8b:91:0d:
                    3f:cb:c8:96:56:25:85:85:e7:dc:ef:66:6c:27:dd:
                    f6:19:00:d1:83:36:44:74:14:b7:23:a9:87:67:c2:
                    8f:fa:90:2c:8c:d3:9b:18:bd:28:d9:24:27:9e:6f:
                    2a:42:9b:67:e0:b6:47:2d:f7:48:c5:03:0c:20:8f:
                    53:8c:17:2e:c8:d0:97:69:6c:ba:24:85:3b:68:57:
                    7e:e9:ea:39:f8:03:65:50:d6:c9:01:b1:a3:36:3d:
                    7a:55:5d:2b:ef:a7:3b:82:4c:03:0f:03:82:e7:a3:
                    df:12:83:3e:16:b5:fc:cd:77:52:c8:8e:83:db:75:
                    75:93:19:8c:68:88:5d:0e:fb:57:8e:ce:f8:6e:f8:
                    db:7f:6c:21:9e:3a:68:39:1c:17:02:8e:5b:8f:ec:
                    a4:69:33:92:1f:67:a6:cf:19:65:35:90:7e:5d:11:
                    3c:7b:8b:95:d8:d3:46:2a:b2:6c:3c:a9:f7:ca:ce:
                    c9:81:f3:29:80:d5:c4:38:79:ec:39:d6:a0:b0:4d:
                    c5:ad:d6:a5:46:0b:24:f7:d2:a4:2b:39:4c:09:20:
                    dc:9e:30:44:9e:e8:4e:96:bf:ed:dc:38:a6:f2:48:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C5:B4:BE:08:9D:3C:89:61:CB:2C:CD:D6:06:16:11:97:71:84:44
            X509v3 Authority Key Identifier:
                keyid:81:7F:49:23:1F:F0:7F:45:4E:79:0A:AA:13:34:85:54:6F:99:58:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:e2:0a:3b:97:3c:d0:4a:87:e5:7d:98:be:9b:2a:b2:0b:07:
         01:25:99:c8:a2:53:b6:32:74:74:58:a8:db:bd:1e:8e:02:12:
         f1:23:62:83:0b:7d:ea:2e:31:b9:c7:3c:c3:2e:51:23:3c:f4:
         15:c5:e5:1e:0c:c1:84:07:df:84:02:a7:7d:41:6e:6b:19:f2:
         cf:82:17:9a:45:6b:d1:21:bf:f2:20:b7:bd:7c:9e:c7:cd:92:
         73:27:4e:a5:3a:3d:7f:0c:0f:8b:c1:e2:f6:68:75:07:45:20:
         e4:41:9d:a9:74:7e:23:79:29:c4:e2:73:f3:b3:84:33:30:da:
         f3:7b:f7:3d:31:d5:31:2b:b3:86:16:60:d2:ea:3e:a2:be:0c:
         c0:93:f9:a6:14:7f:13:56:51:73:59:40:f9:5d:d8:5f:b7:32:
         db:f1:69:e1:51:9c:46:a7:42:90:74:cc:15:4f:27:27:16:7f:
         ad:fc:0a:f2:bf:1c:d9:1d:df:0f:2d:03:08:91:f0:17:ed:63:
         36:b9:11:da:71:11:f5:bd:74:f7:dc:e9:42:0e:65:8c:97:f0:
         5c:21:db:79:4e:e4:2d:f4:e4:4a:1f:a6:13:b3:11:54:14:34:
         6b:f2:1a:b4:c1:53:44:94:40:5b:0f:42:90:24:9c:d2:ac:e4:
         69:9f:45:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:05:01 2024 by rpki-client on console-fra.rpki-client.org