Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32342d3234203d3e203631383835.roa
File:                     3133312e302e3134302e302f32342d3234203d3e203631383835.roa (raw, json)
Hash identifier:          6p5vnbVVcccEJ9l7GDGjcXQPnMNDaS77FHOheurCgAg=
Subject key identifier:   36:47:A0:16:62:A9:C2:64:4E:91:47:18:FB:93:DC:52:2F:FE:62:54
Certificate issuer:       /CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
Certificate serial:       200DD740CE971F8FAEA304444030FC6AE2AA9673
Authority key identifier: 3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32342d3234203d3e203631383835.roa
Signing time:             Thu 29 Aug 2024 18:19:04 +0000
ROA not before:           Thu 29 Aug 2024 18:14:04 +0000
ROA not after:            Thu 28 Aug 2025 18:19:04 +0000
asID:                     61885
IP address blocks:        131.0.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl
                          rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0d:d7:40:ce:97:1f:8f:ae:a3:04:44:40:30:fc:6a:e2:aa:96:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7FA74CDFF1E4752479602672F26A883C7A6052
        Validity
            Not Before: Aug 29 18:14:04 2024 GMT
            Not After : Aug 28 18:19:04 2025 GMT
        Subject: CN=3647A01662A9C2644E914718FB93DC522FFE6254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:df:74:3b:7b:96:48:b0:19:4c:f4:2b:97:
                    5f:ae:1d:eb:8d:87:8d:ca:a7:4b:eb:d1:d8:a5:1d:
                    d0:72:27:9b:ee:6f:1b:82:69:65:66:70:71:80:87:
                    7c:72:75:11:7a:52:e7:07:2b:97:c7:cc:d1:a4:2c:
                    41:39:7a:75:fc:0f:a9:41:2d:14:95:d2:c5:83:1b:
                    fd:73:e7:58:e5:b1:ff:72:b2:aa:e8:07:ea:20:bd:
                    f9:6a:b5:75:ff:58:e7:81:3b:e4:0a:9e:64:34:f4:
                    29:80:08:8d:5b:09:4d:fb:4b:83:9a:b4:02:79:62:
                    93:66:b7:38:b2:1d:5c:60:c8:01:54:85:58:22:f6:
                    78:b5:dd:2a:1b:f3:26:69:05:5b:3c:9c:96:c8:50:
                    3c:45:1c:88:fb:6b:b7:f1:1d:20:21:d5:ee:85:0c:
                    c3:20:2c:2d:c8:fa:99:4e:1b:e7:e9:f1:66:f9:e8:
                    35:65:5c:16:9f:50:f5:d0:2a:cf:43:2a:50:64:ef:
                    10:0a:3a:0f:3f:65:25:1f:44:f6:4f:9c:69:5f:3a:
                    28:57:e0:fd:b0:4e:15:20:9b:29:47:90:b6:e8:18:
                    29:9c:91:11:89:e3:e3:02:3f:70:1c:40:09:67:e9:
                    8e:b2:20:05:00:81:37:04:6a:0e:a1:81:8e:26:e7:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:47:A0:16:62:A9:C2:64:4E:91:47:18:FB:93:DC:52:2F:FE:62:54
            X509v3 Authority Key Identifier:
                keyid:3C:7F:A7:4C:DF:F1:E4:75:24:79:60:26:72:F2:6A:88:3C:7A:60:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3C7FA74CDFF1E4752479602672F26A883C7A6052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7FA74CDFF1E4752479602672F26A883C7A6052.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/0/3133312e302e3134302e302f32342d3234203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:5d:bf:59:5d:a0:56:b1:eb:15:dc:fc:0b:fb:18:c9:82:4f:
         27:e1:e4:b8:e5:cf:3c:cd:2a:09:66:ef:84:05:4a:f1:89:18:
         89:ba:d3:c8:6f:36:8e:06:5f:fe:a0:66:32:f8:cd:bf:ab:ca:
         87:cf:95:45:57:21:85:fd:68:5a:4e:cf:50:cc:be:0b:35:ec:
         d9:60:96:36:98:7f:7a:e5:ae:16:9b:bd:ca:07:22:5a:ef:f6:
         8d:1c:b7:60:6f:7a:5b:ff:27:2c:6d:dc:c1:9a:96:96:ec:9b:
         35:37:0d:c1:f7:fb:37:20:0a:5f:5b:8f:7b:41:42:35:49:82:
         22:7e:33:93:d7:b3:d6:0a:67:39:c0:59:70:0c:41:03:ff:c4:
         82:3f:41:0a:05:42:6f:5d:32:60:51:f9:c2:d5:8e:04:b8:93:
         7f:d7:28:46:88:ba:76:26:b0:d7:e0:1a:64:ad:59:e7:12:e3:
         7b:10:1f:43:ad:bd:33:ec:da:2c:ae:fd:40:4e:49:c1:19:0c:
         2e:bb:f3:b9:10:7b:be:e8:e0:44:52:f7:a6:14:a0:0c:b9:89:
         2a:eb:c1:d7:a7:4c:aa:52:53:22:e1:a2:82:05:de:b9:ef:56:
         a6:8f:b4:71:38:7f:ac:82:68:22:b8:66:e8:15:ad:1a:7a:8c:
         72:7d:fd:3f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUIA3XQM6XH4+uowREQDD8auKqlnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3RkE3NENERkYxRTQ3NTI0Nzk2MDI2NzJGMjZBODgz
QzdBNjA1MjAeFw0yNDA4MjkxODE0MDRaFw0yNTA4MjgxODE5MDRaMDMxMTAvBgNV
BAMTKDM2NDdBMDE2NjJBOUMyNjQ0RTkxNDcxOEZCOTNEQzUyMkZGRTYyNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ed90O3uWSLAZTPQrl1+uHeuN
h43Kp0vr0dilHdByJ5vubxuCaWVmcHGAh3xydRF6UucHK5fHzNGkLEE5enX8D6lB
LRSV0sWDG/1z51jlsf9ysqroB+ogvflqtXX/WOeBO+QKnmQ09CmACI1bCU37S4Oa
tAJ5YpNmtziyHVxgyAFUhVgi9ni13Sob8yZpBVs8nJbIUDxFHIj7a7fxHSAh1e6F
DMMgLC3I+plOG+fp8Wb56DVlXBafUPXQKs9DKlBk7xAKOg8/ZSUfRPZPnGlfOihX
4P2wThUgmylHkLboGCmckRGJ4+MCP3AcQAln6Y6yIAUAgTcEag6hgY4m5xZDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUNkegFmKpwmROkUcY+5PcUi/+YlQwHwYDVR0j
BBgwFoAUPH+nTN/x5HUkeWAmcvJqiDx6YFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSERLU2lzN1lBTkZ1anI5ZExFR1ZmRmdpR0c5OWd5WnBRVzdxdkF0amE5
ZHQvMC8zQzdGQTc0Q0RGRjFFNDc1MjQ3OTYwMjY3MkYyNkE4ODNDN0E2MDUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDN0ZBNzRDREZGMUU0NzUy
NDc5NjAyNjcyRjI2QTg4M0M3QTYwNTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hES1NpczdZQU5GdWpyOWRMRUdWZkZnaUdHOTlneVpwUVc3cXZBdGphOWR0LzAv
MzEzMzMxMmUzMDJlMzEzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM4
MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAIMAjDANBgkqhkiG9w0BAQsFAAOCAQEAd12/WV2gVrHr
Fdz8C/sYyYJPJ+HkuOXPPM0qCWbvhAVK8YkYibrTyG82jgZf/qBmMvjNv6vKh8+V
RVchhf1oWk7PUMy+CzXs2WCWNph/euWuFpu9ygciWu/2jRy3YG96W/8nLG3cwZqW
luybNTcNwff7NyAKX1uPe0FCNUmCIn4zk9ez1gpnOcBZcAxBA//Egj9BCgVCb10y
YFH5wtWOBLiTf9coRoi6diaw1+AaZK1Z5xLjexAfQ629M+zaLK79QE5JwRkMLrvz
uRB7vujgRFL3phSgDLmJKuvB16dMqlJTIuGiggXeue9Wpo+0cTh/rIJoIrhm6BWt
GnqMcn39Pw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:26:11 2024 by rpki-client on console-fra.rpki-client.org