Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa
File:                     3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa (raw, json)
Hash identifier:          o5BSZMY+qVPtYRX4K8mfoNpVTyk73yfxCl35IMioG8g=
Subject key identifier:   DD:BF:33:72:92:21:57:C0:6B:C0:42:5C:EB:51:5D:39:BB:5A:67:1D
Certificate issuer:       /CN=4F46505CC0FEC2DEE60976A6282C5D61DD9F230E
Certificate serial:       36AA80E2397C0513E3F396BF86ECC435B4F39D45
Authority key identifier: 4F:46:50:5C:C0:FE:C2:DE:E6:09:76:A6:28:2C:5D:61:DD:9F:23:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa
Signing time:             Wed 03 Apr 2024 20:41:02 +0000
ROA not before:           Wed 03 Apr 2024 20:36:02 +0000
ROA not after:            Wed 02 Apr 2025 20:41:02 +0000
asID:                     61673
IP address blocks:        131.108.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.crl
                          rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:aa:80:e2:39:7c:05:13:e3:f3:96:bf:86:ec:c4:35:b4:f3:9d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F46505CC0FEC2DEE60976A6282C5D61DD9F230E
        Validity
            Not Before: Apr  3 20:36:02 2024 GMT
            Not After : Apr  2 20:41:02 2025 GMT
        Subject: CN=DDBF3372922157C06BC0425CEB515D39BB5A671D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:79:a2:61:5a:15:39:37:05:9f:4b:8c:af:
                    6e:28:69:2f:0b:85:a5:93:9e:6b:29:b6:97:6b:62:
                    c8:ac:46:49:d0:bb:50:55:a6:8b:20:ef:76:03:c1:
                    97:d0:ab:b1:91:dd:0a:76:52:1a:73:bf:26:e7:c8:
                    0e:d5:1c:41:8a:8e:ae:10:d7:e8:9b:e4:35:71:6d:
                    38:9c:47:14:88:90:2e:fe:ca:d0:3a:58:85:97:66:
                    6f:26:f2:e1:b4:00:5e:7b:96:21:c9:e4:27:7b:1c:
                    87:5e:9e:39:b6:2b:69:71:82:2b:44:40:6a:34:12:
                    f5:b7:e1:f2:99:01:34:71:20:60:79:89:c6:23:24:
                    ad:ac:e7:c6:3c:74:16:41:2e:4b:f7:0d:77:18:82:
                    34:4e:50:05:06:02:ef:8a:03:98:75:6e:e4:96:e2:
                    75:4c:bb:c0:32:7d:59:26:78:b7:60:b3:78:53:1d:
                    fa:02:65:71:2d:e2:bd:20:43:72:84:ea:08:f7:a2:
                    8c:2c:80:94:ca:b9:d2:14:35:e2:55:61:9f:1d:2d:
                    cb:25:8a:e5:3e:98:17:54:52:ea:46:c7:8d:c7:80:
                    9d:6e:78:ed:7d:e3:82:60:7c:92:b9:23:e8:d2:2c:
                    3d:0b:a1:b5:f8:72:09:75:22:de:20:41:0d:e4:16:
                    75:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BF:33:72:92:21:57:C0:6B:C0:42:5C:EB:51:5D:39:BB:5A:67:1D
            X509v3 Authority Key Identifier:
                keyid:4F:46:50:5C:C0:FE:C2:DE:E6:09:76:A6:28:2C:5D:61:DD:9F:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F46505CC0FEC2DEE60976A6282C5D61DD9F230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J2gCNqqkgJzdByugRoQLWkWqRTY7LEKtN4ArUiSjXEaF/1/3133312e3130382e3132302e302f32322d3234203d3e203631363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:79:bc:92:64:95:ac:d9:f2:0e:1b:a3:78:5f:09:f6:b4:37:
         82:8c:cf:95:8c:74:9b:a5:20:1f:e2:08:fd:c7:7d:a6:f9:5e:
         de:21:9b:9f:be:c1:e1:6f:a4:3e:ed:f1:27:22:ac:c0:0c:a4:
         30:78:d1:94:31:3b:25:18:5a:7c:b5:a9:f0:06:09:1f:d8:bd:
         d6:ed:87:0e:37:8b:c4:ca:ca:5d:7b:d0:c0:30:a1:f9:31:65:
         63:30:8e:d2:35:96:0a:eb:ac:c7:14:15:92:bb:ee:b0:95:db:
         2d:cb:09:a4:61:03:a9:be:6d:7a:7c:b7:ea:22:45:93:09:32:
         9c:2c:b4:2d:22:79:92:15:2c:52:e5:d0:ca:ec:d2:ac:9a:a5:
         c4:99:73:ba:d1:6d:9d:28:6e:78:4e:9b:92:15:63:34:87:8c:
         a9:6a:98:64:61:08:37:78:8e:79:d0:60:20:1d:34:3a:1f:d8:
         b4:c4:94:f2:4c:58:0f:a7:35:76:2f:b1:bc:40:3b:21:b3:8e:
         17:b8:36:c3:c6:4e:a9:57:0d:c8:af:17:df:f8:61:8d:23:50:
         cd:36:4f:0d:4c:f6:ed:9e:c2:03:b2:88:59:d1:1d:db:c1:1a:
         18:41:88:9c:14:d3:5b:d8:d4:66:2d:6e:57:12:73:7f:44:00:
         14:02:7e:2a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNqqA4jl8BRPj85a/huzENbTznUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY0NjUwNUNDMEZFQzJERUU2MDk3NkE2MjgyQzVENjFE
RDlGMjMwRTAeFw0yNDA0MDMyMDM2MDJaFw0yNTA0MDIyMDQxMDJaMDMxMTAvBgNV
BAMTKEREQkYzMzcyOTIyMTU3QzA2QkMwNDI1Q0VCNTE1RDM5QkI1QTY3MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBHmiYVoVOTcFn0uMr24oaS8L
haWTnmsptpdrYsisRknQu1BVposg73YDwZfQq7GR3Qp2UhpzvybnyA7VHEGKjq4Q
1+ib5DVxbTicRxSIkC7+ytA6WIWXZm8m8uG0AF57liHJ5Cd7HIdenjm2K2lxgitE
QGo0EvW34fKZATRxIGB5icYjJK2s58Y8dBZBLkv3DXcYgjROUAUGAu+KA5h1buSW
4nVMu8AyfVkmeLdgs3hTHfoCZXEt4r0gQ3KE6gj3oowsgJTKudIUNeJVYZ8dLcsl
iuU+mBdUUupGx43HgJ1ueO1944JgfJK5I+jSLD0LobX4cgl1It4gQQ3kFnWnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3b8zcpIhV8BrwEJc61FdObtaZx0wHwYDVR0j
BBgwFoAUT0ZQXMD+wt7mCXamKCxdYd2fIw4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjJnQ05xcWtnSnpkQnl1Z1JvUUxXa1dxUlRZN0xFS3RONEFyVWlTalhF
YUYvMS80RjQ2NTA1Q0MwRkVDMkRFRTYwOTc2QTYyODJDNUQ2MUREOUYyMzBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGNDY1MDVDQzBGRUMyREVF
NjA5NzZBNjI4MkM1RDYxREQ5RjIzMEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0oyZ0NOcXFrZ0p6ZEJ5dWdSb1FMV2tXcVJUWTdMRUt0TjRBclVpU2pYRWFGLzEv
MzEzMzMxMmUzMTMwMzgyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDbHgwDQYJKoZIhvcNAQELBQADggEBAF15vJJk
lazZ8g4bo3hfCfa0N4KMz5WMdJulIB/iCP3Hfab5Xt4hm5++weFvpD7t8ScirMAM
pDB40ZQxOyUYWny1qfAGCR/Yvdbthw43i8TKyl170MAwofkxZWMwjtI1lgrrrMcU
FZK77rCV2y3LCaRhA6m+bXp8t+oiRZMJMpwstC0ieZIVLFLl0Mrs0qyapcSZc7rR
bZ0obnhOm5IVYzSHjKlqmGRhCDd4jnnQYCAdNDof2LTElPJMWA+nNXYvsbxAOyGz
jhe4NsPGTqlXDcivF9/4YY0jUM02Tw1M9u2ewgOyiFnRHdvBGhhBiJwU01vY1GYt
blcSc39EABQCfio=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:28 2024 by rpki-client on console-ams.rpki-client.org