Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32322d3232203d3e20323633363237.roa
File:                     3134332e3230322e3233362e302f32322d3232203d3e20323633363237.roa (raw, json)
Hash identifier:          HoKOa37j3pYoJgPxiXmj/r/kJh+dJPSOh6psk45Nd3o=
Subject key identifier:   08:BD:4A:17:B7:BB:8E:0D:3B:CD:86:E4:F7:8B:DB:CB:BB:A9:10:7B
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       6054DA665598640FC7E96F2AA4D2C6D7A5481184
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32322d3232203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:38 +0000
ROA not before:           Tue 23 Apr 2024 19:08:38 +0000
ROA not after:            Tue 22 Apr 2025 19:13:38 +0000
asID:                     263627
IP address blocks:        143.202.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 23:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:54:da:66:55:98:64:0f:c7:e9:6f:2a:a4:d2:c6:d7:a5:48:11:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:38 2024 GMT
            Not After : Apr 22 19:13:38 2025 GMT
        Subject: CN=08BD4A17B7BB8E0D3BCD86E4F78BDBCBBBA9107B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:08:fe:e2:b9:a2:47:8f:49:d9:bb:de:52:
                    ff:7b:ef:a2:1f:de:a1:8a:19:ea:05:2f:1b:62:94:
                    ec:ff:2b:22:cc:1d:3d:ad:bd:07:22:da:72:b6:29:
                    63:fd:a9:d7:0c:3f:cd:90:46:65:6d:64:16:ec:8f:
                    d4:57:1e:10:cf:a7:65:fd:09:01:38:da:44:db:82:
                    c7:6e:53:c9:30:d1:ea:92:71:49:38:21:02:05:a8:
                    89:ff:7c:2d:b7:dd:d5:7b:00:cb:c7:5c:40:50:90:
                    ab:d9:96:4b:7c:06:b8:29:01:9e:ee:be:bf:5b:a1:
                    8d:e9:2d:95:62:3e:4a:0a:d0:3c:34:1d:63:68:fa:
                    ec:16:4b:51:bc:3f:16:c2:45:c8:72:e2:f6:fe:75:
                    c3:6b:10:68:51:1c:3f:2e:3e:c5:14:14:d5:ac:84:
                    97:ea:92:e2:a2:02:0b:2c:15:32:4d:5c:db:8b:73:
                    ef:14:a8:74:eb:ce:11:0b:cb:23:07:fd:25:b2:a7:
                    c6:47:54:05:21:6f:d3:3b:f8:6e:23:15:43:f8:44:
                    ca:8e:53:82:5b:9b:95:21:fb:5f:ec:8e:3d:c5:c5:
                    38:b4:f9:a9:c9:27:33:9a:a7:41:29:8d:2e:97:11:
                    6e:78:d2:ec:c4:3d:d2:d2:5a:10:9c:13:92:98:f6:
                    cb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BD:4A:17:B7:BB:8E:0D:3B:CD:86:E4:F7:8B:DB:CB:BB:A9:10:7B
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32322d3232203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:33:68:b2:07:4a:1f:b2:2b:1a:71:87:d4:d3:93:b6:29:1d:
         39:c8:e1:00:0f:50:7b:e1:ab:e3:4f:15:05:cd:3f:ae:d5:27:
         e0:b2:27:84:b2:df:b8:41:ab:2f:ad:44:64:cd:90:22:f3:37:
         af:99:c5:e1:fc:19:91:28:98:d3:23:15:39:df:8c:ef:57:07:
         05:46:1c:a9:c5:a2:38:c6:53:08:41:3d:56:62:49:28:a0:49:
         18:08:d6:ce:09:13:70:b5:fb:2a:26:1b:f3:3a:1a:34:39:c6:
         1b:fa:98:30:c1:1b:77:cd:b7:0d:aa:21:d1:8a:4b:8f:c9:0d:
         ca:61:b3:53:e6:c9:77:77:62:33:91:f4:bc:14:a1:cd:5a:65:
         2f:3d:af:91:0e:c6:a7:58:55:89:60:ca:63:15:5b:8c:8e:7e:
         1e:02:74:d7:84:e6:76:b2:08:53:78:f6:be:1c:a9:1f:3c:0b:
         a6:97:ba:4d:c7:81:17:87:13:21:bb:fa:b8:b3:29:7e:5e:0a:
         74:23:a0:f5:67:da:f3:1a:8c:5c:08:26:ad:37:60:9f:d2:78:
         77:25:cb:39:54:7a:7f:63:db:7c:ec:c3:12:f5:31:15:2c:b4:
         96:36:f9:89:1b:ab:aa:44:29:9d:f2:9d:f5:59:24:46:b4:fb:
         4a:d3:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:05:00 2024 by rpki-client on console-fra.rpki-client.org