Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/3134332e3235352e3232382e302f32322d3234203d3e20323635313632.roa
File:                     3134332e3235352e3232382e302f32322d3234203d3e20323635313632.roa (raw, json)
Hash identifier:          O2I9ybTCzKYKwDCFcqhOL9g29L0EBB58zcPbpJp339Q=
Subject key identifier:   87:6F:1F:37:24:CF:C9:E0:42:85:61:E5:6C:B1:EB:56:C1:8C:A2:2B
Certificate issuer:       /CN=1C56253CEF2C7C6D01C4D0C06935463CFCD2140F
Certificate serial:       085148873F2AF4A1E9C13BA0C9AF291513D7E322
Authority key identifier: 1C:56:25:3C:EF:2C:7C:6D:01:C4:D0:C0:69:35:46:3C:FC:D2:14:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/3134332e3235352e3232382e302f32322d3234203d3e20323635313632.roa
Signing time:             Thu 19 Sep 2024 01:52:35 +0000
ROA not before:           Thu 19 Sep 2024 01:47:35 +0000
ROA not after:            Thu 18 Sep 2025 01:52:35 +0000
asID:                     265162
IP address blocks:        143.255.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.crl
                          rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:51:48:87:3f:2a:f4:a1:e9:c1:3b:a0:c9:af:29:15:13:d7:e3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C56253CEF2C7C6D01C4D0C06935463CFCD2140F
        Validity
            Not Before: Sep 19 01:47:35 2024 GMT
            Not After : Sep 18 01:52:35 2025 GMT
        Subject: CN=876F1F3724CFC9E0428561E56CB1EB56C18CA22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:00:e9:b3:00:87:1d:aa:e1:28:08:ed:38:8a:
                    e5:2c:24:93:2d:6e:5e:0b:be:8f:24:91:10:66:ef:
                    f8:80:f5:7f:a4:23:5c:75:17:bb:6d:35:b6:fb:4f:
                    d9:bd:9b:51:57:a0:67:18:38:87:ee:02:c9:a3:e1:
                    ed:d5:3f:04:2f:4b:88:6f:03:22:7d:a7:76:33:e3:
                    95:eb:89:a3:ba:64:e3:59:01:5b:1f:26:18:d3:08:
                    22:fb:27:42:a5:6c:e9:3a:f5:bb:ee:a0:d0:42:79:
                    26:d6:32:16:23:46:97:48:81:86:41:a1:d6:35:29:
                    e7:f7:d7:83:75:e0:6e:fc:52:21:81:3b:b2:f6:39:
                    3f:28:18:e6:00:9a:13:a6:1e:da:0a:67:92:20:03:
                    9c:d3:7b:40:70:9e:16:bd:48:bf:66:0d:8c:39:ab:
                    17:0a:63:3f:4a:63:0d:c7:e4:89:4f:61:d1:a7:17:
                    d2:dc:42:7a:cf:a0:3d:cb:5d:28:5c:8a:8f:99:1e:
                    52:ae:73:e7:70:42:a3:33:0a:3a:a0:39:55:0a:0e:
                    19:ac:1d:16:2d:b4:5a:3f:0c:c9:19:1e:45:ab:78:
                    47:87:3b:54:cb:35:1d:87:60:8d:8c:44:db:7d:07:
                    f7:bd:36:16:a7:5c:c4:60:65:11:93:8b:09:eb:c3:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6F:1F:37:24:CF:C9:E0:42:85:61:E5:6C:B1:EB:56:C1:8C:A2:2B
            X509v3 Authority Key Identifier:
                keyid:1C:56:25:3C:EF:2C:7C:6D:01:C4:D0:C0:69:35:46:3C:FC:D2:14:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/3134332e3235352e3232382e302f32322d3234203d3e20323635313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:d2:b1:c1:dc:10:07:e3:da:86:5c:61:6a:34:e0:da:2c:de:
         fe:9b:7f:21:d9:40:fa:a2:e3:5c:0c:a5:cf:e3:85:a9:29:c7:
         ea:b9:c8:5a:e1:7a:83:5c:98:20:f5:b8:0c:42:2c:48:d0:cc:
         3f:2f:b8:2e:72:f3:0e:c4:39:dc:0d:e7:e8:69:9f:8e:cf:43:
         88:30:77:89:ac:ca:87:30:1a:44:2e:9f:ba:22:d1:16:61:7f:
         ec:f1:b2:74:9d:28:b2:64:60:d9:2f:42:3f:28:d8:93:77:51:
         70:ed:b9:f6:ce:65:81:63:ff:d5:66:f1:ee:d7:aa:46:c4:b1:
         64:77:a5:a9:42:29:d6:41:77:62:0f:3b:00:a3:cc:e2:a0:e4:
         0a:96:d2:8e:de:3b:ac:c1:da:43:d4:f3:36:a1:68:b9:c2:f5:
         ba:ba:d8:32:c5:1c:2e:bd:6e:40:e4:c7:05:e6:25:20:92:ce:
         f5:bd:16:e3:c5:bf:1c:45:f8:35:10:63:3d:0f:18:99:22:e9:
         3c:b1:17:f3:41:d4:cb:dd:ca:57:ff:2a:a4:c5:6d:43:97:97:
         32:64:09:b5:9b:cf:3c:db:ff:18:ff:86:25:98:59:4f:bf:0a:
         c3:dc:35:f2:d9:dc:5e:0c:c0:34:de:9b:11:7b:30:29:02:fa:
         8c:9b:8e:71
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCFFIhz8q9KHpwTugya8pFRPX4yIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1NjI1M0NFRjJDN0M2RDAxQzREMEMwNjkzNTQ2M0NG
Q0QyMTQwRjAeFw0yNDA5MTkwMTQ3MzVaFw0yNTA5MTgwMTUyMzVaMDMxMTAvBgNV
BAMTKDg3NkYxRjM3MjRDRkM5RTA0Mjg1NjFFNTZDQjFFQjU2QzE4Q0EyMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3AOmzAIcdquEoCO04iuUsJJMt
bl4Lvo8kkRBm7/iA9X+kI1x1F7ttNbb7T9m9m1FXoGcYOIfuAsmj4e3VPwQvS4hv
AyJ9p3Yz45XriaO6ZONZAVsfJhjTCCL7J0KlbOk69bvuoNBCeSbWMhYjRpdIgYZB
odY1Kef314N14G78UiGBO7L2OT8oGOYAmhOmHtoKZ5IgA5zTe0Bwnha9SL9mDYw5
qxcKYz9KYw3H5IlPYdGnF9LcQnrPoD3LXShcio+ZHlKuc+dwQqMzCjqgOVUKDhms
HRYttFo/DMkZHkWreEeHO1TLNR2HYI2MRNt9B/e9NhanXMRgZRGTiwnrwwWxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUh28fNyTPyeBChWHlbLHrVsGMoiswHwYDVR0j
BBgwFoAUHFYlPO8sfG0BxNDAaTVGPPzSFA8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZ2SjRSOTJRRDhqdGN4VXFQTWlmTDE1QjZMUWlaTTRnVTN0NTVUd0th
V1ovMC8xQzU2MjUzQ0VGMkM3QzZEMDFDNEQwQzA2OTM1NDYzQ0ZDRDIxNDBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDNTYyNTNDRUYyQzdDNkQw
MUM0RDBDMDY5MzU0NjNDRkNEMjE0MEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWdko0UjkyUUQ4anRjeFVxUE1pZkwxNUI2TFFpWk00Z1UzdDU1VHdLYVdaLzAv
MzEzNDMzMmUzMjM1MzUyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMxMzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo//5DANBgkqhkiG9w0BAQsFAAOCAQEAfdKx
wdwQB+PahlxhajTg2ize/pt/IdlA+qLjXAylz+OFqSnH6rnIWuF6g1yYIPW4DEIs
SNDMPy+4LnLzDsQ53A3n6Gmfjs9DiDB3iazKhzAaRC6fuiLRFmF/7PGydJ0osmRg
2S9CPyjYk3dRcO259s5lgWP/1Wbx7teqRsSxZHelqUIp1kF3Yg87AKPM4qDkCpbS
jt47rMHaQ9TzNqFoucL1urrYMsUcLr1uQOTHBeYlIJLO9b0W48W/HEX4NRBjPQ8Y
mSLpPLEX80HUy93KV/8qpMVtQ5eXMmQJtZvPPNv/GP+GJZhZT78Kw9w18tncXgzA
NN6bEXswKQL6jJuOcQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:38 2024 by rpki-client on console-ams.rpki-client.org