Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/1/3134332e3133372e35322e302f32322d3234203d3e20323634303331.roa
File:                     3134332e3133372e35322e302f32322d3234203d3e20323634303331.roa (raw, json)
Hash identifier:          W26cMnCY4zJruJBnrX7IOVE/7q70tUOchUJ+8dw8gn0=
Subject key identifier:   22:F2:4B:EA:AF:2B:ED:FC:6F:B4:57:79:44:A1:3A:35:22:FA:BE:5F
Certificate issuer:       /CN=381E345630000EA22767980F4710FE4349C822B1
Certificate serial:       4063F5897AB1ECA8B9840ED4E9FA7B028D456472
Authority key identifier: 38:1E:34:56:30:00:0E:A2:27:67:98:0F:47:10:FE:43:49:C8:22:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/381E345630000EA22767980F4710FE4349C822B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/1/3134332e3133372e35322e302f32322d3234203d3e20323634303331.roa
Signing time:             Wed 03 Apr 2024 18:30:56 +0000
ROA not before:           Wed 03 Apr 2024 18:25:56 +0000
ROA not after:            Wed 02 Apr 2025 18:30:56 +0000
asID:                     264031
IP address blocks:        143.137.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/1/381E345630000EA22767980F4710FE4349C822B1.crl
                          rsync://rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/1/381E345630000EA22767980F4710FE4349C822B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/381E345630000EA22767980F4710FE4349C822B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:63:f5:89:7a:b1:ec:a8:b9:84:0e:d4:e9:fa:7b:02:8d:45:64:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381E345630000EA22767980F4710FE4349C822B1
        Validity
            Not Before: Apr  3 18:25:56 2024 GMT
            Not After : Apr  2 18:30:56 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:14:2f:7a:2b:13:83:3c:3d:04:e9:2f:d5:a6:
                    ef:4e:2d:73:46:32:0e:80:e6:6b:86:fd:51:bc:67:
                    7d:24:8b:6b:c3:a7:99:5f:ca:c8:5d:4b:8a:34:b6:
                    e1:07:91:63:96:0d:09:a6:a3:9e:f9:29:1e:75:20:
                    b0:01:17:bc:54:8c:29:0d:58:e4:a7:08:53:70:6e:
                    de:01:dd:28:3e:5d:0a:db:f3:c8:b6:2d:bb:27:98:
                    0f:5e:fc:d7:b5:77:06:86:01:75:81:8b:95:aa:d6:
                    84:24:20:a4:aa:c3:3c:b5:31:86:fd:56:2d:de:18:
                    ce:c6:f8:f2:b4:2d:ad:a1:83:3a:52:a4:33:86:ea:
                    46:c9:65:5f:3b:e0:a9:10:da:67:a9:0b:9a:2d:3e:
                    d5:b7:ec:79:8f:cd:ae:8e:d6:24:32:98:30:90:7d:
                    78:fd:af:2d:5e:18:d6:3e:79:c3:2f:f7:87:eb:59:
                    62:09:59:4c:87:3a:cf:eb:d4:1a:c1:29:4f:e0:03:
                    cc:5e:5a:97:ab:67:6e:ee:25:c0:0c:c8:86:3b:1d:
                    5c:db:b7:94:0b:18:1a:f5:b6:9a:5f:e1:b6:69:e0:
                    1b:22:ce:cb:03:86:ee:b9:4f:f9:63:7a:d3:25:a8:
                    e8:1a:2d:f1:59:2e:f9:82:3e:a2:1f:aa:d3:b2:ce:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F2:4B:EA:AF:2B:ED:FC:6F:B4:57:79:44:A1:3A:35:22:FA:BE:5F
            X509v3 Authority Key Identifier:
                keyid:38:1E:34:56:30:00:0E:A2:27:67:98:0F:47:10:FE:43:49:C8:22:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/1/381E345630000EA22767980F4710FE4349C822B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/381E345630000EA22767980F4710FE4349C822B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2xpVYk4YpnqjBjnANNybdtFBvEk5LfXqKTSRDuNX64p7/1/3134332e3133372e35322e302f32322d3234203d3e20323634303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:e5:80:00:f7:ba:c5:60:f0:74:35:3b:0b:26:1f:f8:7d:c3:
         1d:6f:a4:0a:00:a8:98:b5:6b:7a:78:59:86:23:bf:2b:3f:70:
         20:f7:7d:20:d4:85:7c:ca:6c:95:c8:4d:c8:f4:aa:92:f8:21:
         3e:f1:95:5d:1b:17:7d:14:1f:d3:c7:17:6f:5a:4a:f0:e8:35:
         d4:06:1d:7f:f2:05:68:ad:47:33:59:be:eb:34:a2:d6:10:07:
         59:b5:4a:67:da:c3:5f:24:95:6b:3f:e0:4e:26:93:8f:6a:84:
         de:58:3e:a2:b8:81:ec:e1:3c:b2:70:f4:fa:d2:b3:ab:73:ca:
         99:25:8a:86:da:c1:6b:00:41:12:83:73:c6:08:21:18:5f:ad:
         2b:b2:98:74:46:7f:c3:0b:9a:df:5e:ba:c8:12:aa:7b:07:12:
         6b:86:eb:c8:7e:8b:d5:0f:c8:2e:4f:99:36:32:90:cf:f3:8e:
         b5:bc:c6:ac:52:c2:50:9a:4e:9d:9f:1f:73:09:31:31:76:1c:
         80:91:46:28:58:11:d9:f3:71:89:ad:fd:2e:83:de:d9:7c:65:
         0b:92:e7:9a:04:31:8d:8d:34:4b:b4:e0:2a:3f:66:95:81:ef:
         f6:82:fc:6d:4d:a7:b1:c2:0b:83:3a:24:57:b7:40:fe:15:d9:
         55:81:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:21 2024 by rpki-client on console-fra.rpki-client.org