Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/3134332e3133372e34302e302f32322d3232203d3e20323634303330.roa
File:                     3134332e3133372e34302e302f32322d3232203d3e20323634303330.roa (raw, json)
Hash identifier:          QxHbUS+uE+f/kJ7TJYvsUj1ECVKtIZWKMhfEPUCzujw=
Subject key identifier:   88:EB:54:71:E6:6F:41:C4:65:02:4B:B9:91:24:E1:42:84:85:09:DE
Certificate issuer:       /CN=972925A57A172EFE7255E798517DAC0C695452AC
Certificate serial:       66FBDC21BB5CB630583F780C2C6ED66847C63027
Authority key identifier: 97:29:25:A5:7A:17:2E:FE:72:55:E7:98:51:7D:AC:0C:69:54:52:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/3134332e3133372e34302e302f32322d3232203d3e20323634303330.roa
Signing time:             Thu 04 Apr 2024 19:23:18 +0000
ROA not before:           Thu 04 Apr 2024 19:18:18 +0000
ROA not after:            Thu 03 Apr 2025 19:23:18 +0000
asID:                     264030
IP address blocks:        143.137.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.crl
                          rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fb:dc:21:bb:5c:b6:30:58:3f:78:0c:2c:6e:d6:68:47:c6:30:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972925A57A172EFE7255E798517DAC0C695452AC
        Validity
            Not Before: Apr  4 19:18:18 2024 GMT
            Not After : Apr  3 19:23:18 2025 GMT
        Subject: CN=88EB5471E66F41C465024BB99124E142848509DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:25:b7:11:6a:02:e0:76:7c:65:1e:56:ef:
                    25:37:27:8e:a1:85:2c:31:3a:74:5a:a4:c8:e1:4e:
                    a7:43:c4:c0:c8:9c:4e:ad:ab:39:07:b5:f3:e1:9d:
                    dd:1f:2b:9c:ed:47:7e:56:55:a4:ae:c4:f5:b3:aa:
                    cc:72:11:ca:a6:46:45:f3:b6:0c:ed:81:34:32:15:
                    bc:c7:4a:f4:4e:13:d7:d4:1a:76:df:6f:58:c8:3c:
                    25:29:72:58:7a:81:12:1d:96:1f:e7:0a:b0:fb:3b:
                    81:1b:7c:c9:f7:b9:b8:02:42:ed:85:7d:cf:2f:76:
                    0c:fc:a1:38:1d:f2:83:b1:50:7d:0c:81:98:6d:a6:
                    38:36:e9:83:d1:47:91:6f:5b:20:d0:72:90:9d:45:
                    6d:91:d6:de:b6:a3:ad:e7:e0:e5:bf:b3:38:73:ac:
                    2a:c0:19:c5:60:f9:49:05:98:bd:09:68:9c:7f:e0:
                    0e:4a:6c:7f:b7:a9:b9:c2:c0:4c:05:64:ee:55:f3:
                    17:98:4c:f6:a6:14:b8:b8:9a:eb:d9:26:94:83:41:
                    d7:08:56:31:73:da:e8:06:94:5f:42:de:13:ad:94:
                    dd:e4:5f:da:54:48:a5:55:99:56:34:7a:f9:6c:0b:
                    9a:6d:75:e7:2d:dc:00:76:fa:9a:5f:3e:02:91:1f:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EB:54:71:E6:6F:41:C4:65:02:4B:B9:91:24:E1:42:84:85:09:DE
            X509v3 Authority Key Identifier:
                keyid:97:29:25:A5:7A:17:2E:FE:72:55:E7:98:51:7D:AC:0C:69:54:52:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/3134332e3133372e34302e302f32322d3232203d3e20323634303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:fd:b5:85:36:07:61:47:d5:07:db:86:80:5a:e3:2f:f5:aa:
         d5:89:06:df:63:44:e1:2a:2b:f5:b7:b7:ac:81:9f:7c:d0:ac:
         24:ac:de:08:6d:41:d6:27:c0:bd:3c:bb:1b:41:28:1f:11:bc:
         8b:20:81:f5:14:2e:6b:ea:68:5f:31:12:b1:94:21:fb:db:3e:
         3b:a0:f1:f6:0c:6b:49:c7:51:db:8f:63:36:13:bc:ce:12:84:
         b4:98:90:43:d8:73:50:d7:f5:32:a0:22:0a:81:1d:d7:df:b7:
         fe:e9:a2:72:36:ab:ab:53:95:a2:62:54:f6:e7:ca:82:59:96:
         e1:f6:1b:51:99:62:3b:65:75:53:51:5b:6a:aa:e3:8c:50:72:
         6e:9d:b4:36:7d:f7:dc:a1:90:7b:c5:c4:50:05:fc:fd:61:19:
         d8:16:53:77:f7:90:c8:b3:62:93:bd:48:0e:44:e9:b1:e5:55:
         76:df:1e:93:0f:89:7f:62:48:21:09:e0:cf:45:4c:06:3f:c8:
         c2:86:b5:d1:e8:86:ff:6f:82:59:1e:f3:d2:6a:a6:cb:d3:03:
         17:15:e3:08:b3:1d:25:85:91:93:ea:29:e1:72:1d:89:55:18:
         b1:c1:d4:97:15:08:7f:3e:df:a5:ed:a6:6e:4d:f2:e0:fc:95:
         d3:26:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:18 2024 by rpki-client on console-ams.rpki-client.org