Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa
File:                     3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa (raw, json)
Hash identifier:          ADMgvqu30ITqs5jmbGZ6IM48vt3S3Qxuk2daXzcYWHc=
Subject key identifier:   7E:EA:DA:37:E1:7D:1D:3D:22:B7:3D:C9:F9:4C:8B:55:94:29:A3:57
Certificate issuer:       /CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
Certificate serial:       37AF2B9B6B74A666AD9288A4F7AE132AC737F596
Authority key identifier: 59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa
Signing time:             Thu 04 Apr 2024 14:58:27 +0000
ROA not before:           Thu 04 Apr 2024 14:53:27 +0000
ROA not after:            Thu 03 Apr 2025 14:58:27 +0000
asID:                     264042
IP address blocks:        143.137.152.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl
                          rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:af:2b:9b:6b:74:a6:66:ad:92:88:a4:f7:ae:13:2a:c7:37:f5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
        Validity
            Not Before: Apr  4 14:53:27 2024 GMT
            Not After : Apr  3 14:58:27 2025 GMT
        Subject: CN=7EEADA37E17D1D3D22B73DC9F94C8B559429A357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:57:ae:e8:49:d8:cb:c2:21:aa:a7:42:d9:
                    fa:10:8a:83:68:ba:8d:62:2f:14:c0:74:3a:79:31:
                    81:18:a9:c1:1e:d6:a2:58:d5:72:4f:08:6e:2a:88:
                    09:57:b2:ac:47:b6:dd:92:60:55:00:0f:c2:ce:5c:
                    a0:18:9f:8f:3f:5e:ea:5d:ec:a1:77:31:4a:04:c1:
                    90:fa:62:c8:50:ad:3e:bb:07:1b:6c:f4:7a:3c:f9:
                    6e:f8:da:92:aa:d1:26:8e:73:bb:a3:fc:38:e7:04:
                    9f:9c:03:54:3a:f2:92:b0:54:7f:25:dd:56:1d:81:
                    eb:c0:78:a3:bb:9a:6b:75:8c:ce:9b:4d:e0:32:f0:
                    fc:a7:b1:c5:6a:6a:5a:7a:cd:80:5c:bc:85:5b:47:
                    7a:ce:f7:e7:4f:70:58:ed:3d:05:2a:da:67:64:18:
                    00:57:c7:19:02:ff:e7:a0:97:c8:18:95:e6:1a:c9:
                    1d:8f:a8:c1:1f:d1:38:41:84:fe:ef:bc:28:1d:25:
                    8a:13:9f:7e:77:b5:7d:7c:c3:19:30:9f:be:77:c9:
                    82:82:17:56:47:2e:f0:1e:91:3b:08:6f:b5:cd:9d:
                    20:f4:b4:a5:17:12:83:bb:92:82:3d:db:23:4d:23:
                    bf:87:d4:12:b6:70:f3:fe:b8:17:8a:6e:cc:2a:47:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EA:DA:37:E1:7D:1D:3D:22:B7:3D:C9:F9:4C:8B:55:94:29:A3:57
            X509v3 Authority Key Identifier:
                keyid:59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/3134332e3133372e3135322e302f32322d3332203d3e20323634303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:6b:63:74:8a:9c:c8:16:72:ee:5f:87:0c:c8:c7:77:6a:3d:
         f9:84:73:22:fa:5e:d0:09:6b:b1:97:d3:0c:c5:5f:5e:0a:79:
         54:47:99:65:ef:9b:03:ca:17:f2:17:ce:47:d6:98:7e:c5:58:
         f7:cb:3f:4e:ed:da:a5:c6:e9:2b:4a:a9:7c:34:6e:fd:10:b9:
         b0:74:6a:41:45:c7:8e:ee:eb:46:09:b9:d6:23:3e:cf:77:7d:
         54:5a:3b:09:9b:17:56:f5:4a:7d:9c:5f:7d:5a:24:85:05:da:
         53:f2:ae:86:29:6d:0b:95:7b:d6:d4:dd:01:ab:f6:41:e3:f1:
         b5:9f:1e:e5:12:af:8d:18:02:19:9e:ff:2d:c7:fe:3e:38:71:
         b3:9b:3c:ca:b6:05:b5:1a:b5:01:f0:1c:05:18:4b:96:12:a2:
         dd:ac:f1:30:58:08:30:47:f8:3b:7b:b3:9a:e2:6c:27:13:69:
         e6:1a:15:20:06:f3:0d:ad:c0:c0:9c:8c:a6:52:ac:87:95:09:
         6c:af:b1:93:20:b6:4d:4f:f8:b2:51:6b:d2:1b:52:b0:b2:bb:
         77:6e:63:57:ae:34:f9:bb:80:f8:1c:8f:7c:43:31:df:51:a3:
         28:05:58:6c:5a:82:b8:7a:3c:8d:c6:51:53:83:7f:97:d4:51:
         85:27:f2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 08:31:54 2024 by rpki-client on console-ams.rpki-client.org