Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/3134332e302e382e302f32322d3332203d3e20323634353136.roa
File:                     3134332e302e382e302f32322d3332203d3e20323634353136.roa (raw, json)
Hash identifier:          kmWyrVbOhR7maQi0+Nzm9VW/edyGzmgueMdVD3VT74s=
Subject key identifier:   DA:49:6C:D5:88:43:CE:2D:C4:F4:18:23:32:68:9B:E6:90:4D:71:79
Certificate issuer:       /CN=75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7
Certificate serial:       2C32AA2752CEBC159E474A36AB79916121787C24
Authority key identifier: 75:B6:EE:36:8E:3D:46:C1:83:6E:D3:0F:BC:E6:0C:5D:2D:45:FB:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/3134332e302e382e302f32322d3332203d3e20323634353136.roa
Signing time:             Tue 13 Aug 2024 20:06:26 +0000
ROA not before:           Tue 13 Aug 2024 20:01:26 +0000
ROA not after:            Tue 12 Aug 2025 20:06:26 +0000
asID:                     264516
IP address blocks:        143.0.8.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7.crl
                          rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 18:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:32:aa:27:52:ce:bc:15:9e:47:4a:36:ab:79:91:61:21:78:7c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7
        Validity
            Not Before: Aug 13 20:01:26 2024 GMT
            Not After : Aug 12 20:06:26 2025 GMT
        Subject: CN=DA496CD58843CE2DC4F4182332689BE6904D7179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f9:50:ca:18:12:b7:90:03:4b:af:86:91:62:
                    67:2d:d3:fa:cd:a7:0c:95:dd:05:f2:1a:e5:c4:5c:
                    13:0b:88:fe:cb:e5:bf:1a:15:62:69:d0:6c:28:95:
                    2e:fb:24:6b:77:e0:ca:90:04:fc:b5:c5:10:0c:24:
                    02:6d:51:9f:89:30:79:b7:d4:6b:92:1a:f0:18:7a:
                    04:98:35:bf:91:9f:a0:d6:02:41:92:bb:1b:26:58:
                    ac:42:24:8e:ef:98:15:cf:93:ed:da:78:e0:e7:ba:
                    88:5d:15:09:07:81:c3:30:d4:cc:07:72:fd:0a:25:
                    e7:77:f4:b5:0e:c3:0f:61:bb:8e:35:e8:b1:ac:37:
                    2d:d3:6e:6b:f2:4b:7f:7b:fd:c6:fb:5c:22:32:21:
                    d1:d4:6c:10:c4:6c:e9:62:89:72:c1:55:cc:3d:25:
                    3c:d5:d0:ce:e3:c5:96:a3:f7:f1:ab:e9:3a:aa:b3:
                    f3:2f:e2:41:b4:a9:f4:31:4c:ee:d8:71:28:bf:96:
                    ca:90:4f:96:3d:f0:30:d9:5c:77:da:40:4a:df:a6:
                    db:c4:ef:0b:79:26:59:1c:78:62:30:5a:01:56:c6:
                    c7:c3:0a:0c:5b:57:f7:61:37:52:7e:e1:ce:66:4d:
                    7e:ef:fe:41:93:f0:1a:f5:4b:c6:3e:a5:6a:9f:4e:
                    11:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:49:6C:D5:88:43:CE:2D:C4:F4:18:23:32:68:9B:E6:90:4D:71:79
            X509v3 Authority Key Identifier:
                keyid:75:B6:EE:36:8E:3D:46:C1:83:6E:D3:0F:BC:E6:0C:5D:2D:45:FB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75B6EE368E3D46C1836ED30FBCE60C5D2D45FBC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/0/3134332e302e382e302f32322d3332203d3e20323634353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:1e:f1:72:4c:98:75:33:b0:5e:2d:2b:35:5c:69:10:db:9b:
         a2:0f:64:c9:d6:a0:2b:22:cf:82:9b:39:b9:8a:a7:ca:9d:72:
         9a:8a:9c:8b:57:d1:c0:08:f3:ad:02:51:6e:08:3c:cf:09:36:
         df:ff:52:8d:44:f1:20:bf:70:e0:1d:24:3c:cd:74:47:5c:bd:
         4c:94:d0:7c:10:e2:4c:d3:14:22:3e:58:02:e5:1b:8f:ba:33:
         86:73:4b:bc:0f:ad:27:a6:44:bd:2c:84:23:e6:7f:3d:61:de:
         ca:bf:b5:a9:5d:ed:76:57:b0:89:66:97:f0:e2:9a:2e:cf:b7:
         fc:9e:d4:b9:fb:b4:11:68:9b:ec:09:67:bd:3c:f3:64:86:55:
         f7:5e:c9:aa:c3:32:e4:e2:f5:42:c2:82:6f:70:8f:7a:43:a2:
         70:8f:5f:a7:e1:3f:f4:70:24:2b:7c:1f:45:2c:aa:9b:64:9a:
         02:6a:76:24:92:41:4c:9f:04:c8:05:f5:07:bd:e1:ac:0f:cb:
         a1:21:06:63:96:9a:77:8e:3f:20:3b:18:39:54:a9:31:cb:ef:
         76:65:25:e3:44:a3:46:cc:8b:91:49:40:f1:15:d0:a3:a5:2c:
         7a:02:f9:21:a1:7f:c4:e1:b7:cc:14:f7:17:1a:45:af:ed:5a:
         b3:b0:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 16:31:05 2024 by rpki-client on console-fra.rpki-client.org