Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa
File:                     3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa (raw, json)
Hash identifier:          sKp5cOur1S2Fp0z2dheJaz1/eCOSgdamd6fCVAkHWV0=
Subject key identifier:   2C:C1:C1:4D:37:59:A1:CF:D1:BC:D9:89:E9:8C:2A:AC:7D:F7:25:39
Certificate issuer:       /CN=FD419A93880C50E8553950967A4679AE5C75624E
Certificate serial:       453E2C4AD067B9242ABABCF5C6B26E428C888769
Authority key identifier: FD:41:9A:93:88:0C:50:E8:55:39:50:96:7A:46:79:AE:5C:75:62:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa
Signing time:             Fri 17 Jan 2025 11:40:53 +0000
ROA not before:           Fri 17 Jan 2025 11:35:53 +0000
ROA not after:            Fri 16 Jan 2026 11:40:53 +0000
asID:                     264030
IP address blocks:        143.137.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.crl
                          rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 16:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3e:2c:4a:d0:67:b9:24:2a:ba:bc:f5:c6:b2:6e:42:8c:88:87:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD419A93880C50E8553950967A4679AE5C75624E
        Validity
            Not Before: Jan 17 11:35:53 2025 GMT
            Not After : Jan 16 11:40:53 2026 GMT
        Subject: CN=2CC1C14D3759A1CFD1BCD989E98C2AAC7DF72539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:dd:21:d6:e0:5b:16:ab:13:a3:28:05:d2:
                    d9:94:e0:2c:7f:ef:c8:c8:06:be:ee:2b:1b:f1:b2:
                    60:1a:72:2b:f2:10:15:55:fb:61:ce:ab:a7:04:13:
                    9d:85:29:38:44:d4:e4:66:a0:49:77:0b:82:fd:fd:
                    91:ea:d4:66:63:cd:2b:3a:38:5f:0a:93:a0:f9:66:
                    9d:93:08:79:86:8b:7c:a7:b6:f7:4c:a8:14:96:a9:
                    5c:f8:da:b4:c2:c0:08:30:08:05:e9:bc:3c:4e:0a:
                    2b:a6:c4:ab:32:95:11:53:2c:97:f5:f2:03:8e:ab:
                    f3:73:c8:91:8b:17:77:df:3d:38:4f:a4:f2:4f:ab:
                    18:48:9b:1f:51:e4:d5:b4:6a:c4:6c:b1:dc:3a:24:
                    80:35:7a:dc:c4:e5:0a:00:d4:79:c9:24:a5:42:6f:
                    73:22:a3:da:9e:ca:af:97:c7:85:de:f1:9c:fc:78:
                    f0:32:46:ea:39:1c:c4:8a:6e:7c:53:a6:1e:a3:08:
                    86:c5:9b:cd:d3:1b:62:c1:96:bc:01:c6:0a:bc:3c:
                    9d:e7:ab:65:b5:a0:a8:45:45:21:46:45:5d:4b:75:
                    15:3d:a9:fc:a0:9d:b3:5f:af:d8:69:91:48:94:3c:
                    ec:2c:07:67:d5:7e:6c:78:8b:63:bb:31:53:40:d7:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C1:C1:4D:37:59:A1:CF:D1:BC:D9:89:E9:8C:2A:AC:7D:F7:25:39
            X509v3 Authority Key Identifier:
                keyid:FD:41:9A:93:88:0C:50:E8:55:39:50:96:7A:46:79:AE:5C:75:62:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/FD419A93880C50E8553950967A4679AE5C75624E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD419A93880C50E8553950967A4679AE5C75624E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/0/3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:28:da:b3:b7:87:29:87:7a:4f:7b:dd:24:41:b5:d8:36:d9:
         90:f2:8b:72:7c:3e:73:1a:aa:ab:9f:f9:a7:05:0d:22:ee:6b:
         5c:88:f8:1f:ce:44:85:8e:ea:27:02:65:e5:a1:80:41:24:71:
         94:ed:24:7d:ad:b0:91:8f:19:50:38:d7:f2:0e:1b:f1:84:b3:
         fe:52:2d:d7:42:0b:84:d1:03:6e:dd:4f:f7:0d:99:48:89:f8:
         ee:62:ec:8f:c8:a7:75:55:39:2b:03:91:97:14:f4:23:28:5e:
         da:d5:71:a2:b3:68:7a:80:cb:69:5c:8f:ce:5f:f5:8c:20:a3:
         e5:cd:74:d1:34:df:06:e2:ba:90:86:92:82:21:24:b0:0b:75:
         b2:96:dc:25:53:58:d8:41:cb:ae:81:e1:fa:a0:48:88:3f:38:
         01:4d:3a:42:57:33:86:df:06:db:19:62:ed:d8:c9:43:74:0e:
         f0:61:9b:c9:b6:73:31:b4:9e:e9:2a:a1:42:43:a2:f0:e6:36:
         91:bf:0f:5d:70:52:b6:3b:31:bf:b3:bc:52:db:0d:db:79:43:
         a3:62:85:46:c9:a3:59:8c:46:c3:15:1c:03:ca:61:60:69:17:
         34:d3:63:e6:87:36:34:17:e0:b7:af:21:bb:04:42:bb:02:fa:
         8d:c2:58:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:39 2025 by rpki-client