Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa
File:                     3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa (raw, json)
Hash identifier:          emVatyv161m20Qj9NnQEpLQzwvV3d2PR90Zfr3rRjbs=
Subject key identifier:   5C:A6:98:1C:99:DD:88:26:40:F0:D1:06:87:F7:4B:97:35:F3:02:9D
Certificate issuer:       /CN=972925A57A172EFE7255E798517DAC0C695452AC
Certificate serial:       64BFBDB0845F0EF768D9A2BA344BF2492B9B8186
Authority key identifier: 97:29:25:A5:7A:17:2E:FE:72:55:E7:98:51:7D:AC:0C:69:54:52:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa
Signing time:             Thu 04 Apr 2024 19:23:19 +0000
ROA not before:           Thu 04 Apr 2024 19:18:19 +0000
ROA not after:            Thu 03 Apr 2025 19:23:19 +0000
asID:                     264030
IP address blocks:        143.137.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.crl
                          rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bf:bd:b0:84:5f:0e:f7:68:d9:a2:ba:34:4b:f2:49:2b:9b:81:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972925A57A172EFE7255E798517DAC0C695452AC
        Validity
            Not Before: Apr  4 19:18:19 2024 GMT
            Not After : Apr  3 19:23:19 2025 GMT
        Subject: CN=5CA6981C99DD882640F0D10687F74B9735F3029D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:5c:ed:8e:ea:61:05:11:26:79:23:33:8d:d6:
                    2b:6c:a4:27:4a:0a:4f:98:6f:74:d2:0e:86:73:91:
                    42:72:62:42:ac:94:d7:6b:f5:87:20:ca:ea:d7:20:
                    fa:10:7a:bc:ac:31:98:af:0c:ed:d5:86:79:ec:77:
                    7d:4c:5b:9f:ad:3f:61:e1:fe:54:0c:10:52:f1:a2:
                    a9:c9:e1:c8:ed:3a:01:a0:19:db:be:50:5f:74:42:
                    e2:b7:1c:ab:86:36:ac:31:de:61:59:64:a4:ad:e0:
                    8a:a3:4d:0c:bd:75:f5:56:7f:8a:be:cc:31:9f:d4:
                    6c:37:73:2f:cb:04:5a:0f:00:c3:90:0c:ee:c7:b8:
                    e6:55:34:b1:d3:47:69:d6:9e:f3:c4:40:c8:b0:89:
                    3f:8c:19:39:18:b7:30:a8:0d:98:ed:b6:2d:83:95:
                    f3:b2:8c:f3:3f:a2:85:a4:1f:33:b5:c7:90:ef:b8:
                    b3:54:f7:d0:18:8a:6d:4b:87:c8:e9:e9:ae:be:96:
                    42:df:1d:db:0c:5a:25:6f:e5:48:50:0c:41:cd:30:
                    fa:91:ec:0c:f9:c9:98:c7:10:74:4f:95:33:a4:11:
                    fa:cc:d6:93:23:f2:f1:1f:58:30:93:be:f6:fd:c2:
                    00:73:80:e5:94:6b:02:52:c6:db:33:76:de:5f:3d:
                    c1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A6:98:1C:99:DD:88:26:40:F0:D1:06:87:F7:4B:97:35:F3:02:9D
            X509v3 Authority Key Identifier:
                keyid:97:29:25:A5:7A:17:2E:FE:72:55:E7:98:51:7D:AC:0C:69:54:52:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/3134332e3133372e34302e302f32332d3233203d3e20323634303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:96:3e:6d:dc:28:72:9d:fb:60:99:cf:77:f3:9c:7c:b4:53:
         c7:20:bd:24:5b:df:cf:74:42:51:ce:df:cd:17:5c:27:bb:dd:
         ad:70:ba:c1:1d:4c:c0:eb:cd:73:1f:c6:4d:b4:28:4f:c8:50:
         fd:60:7e:16:5b:52:75:ff:ab:e6:f7:61:ed:71:65:30:4d:86:
         eb:f5:bf:73:a5:c0:b3:f3:c1:ed:2b:db:b7:2b:bc:28:ee:34:
         95:5d:90:a7:19:41:de:9a:93:d1:e4:94:c4:d1:81:2f:63:ea:
         ef:61:7a:1d:52:3d:a3:36:6f:4f:61:77:86:8d:ff:08:30:6f:
         ef:67:6d:4c:7e:9c:9b:7c:20:a5:00:76:a5:97:38:80:41:e5:
         1c:53:4f:f5:c7:4e:d4:e0:21:44:fe:05:b3:81:b1:a0:6b:c4:
         cf:a5:98:45:48:ab:8c:c8:d6:1f:a7:40:43:fd:85:3e:97:cb:
         6a:4d:b3:28:66:35:63:05:fa:1f:93:10:1a:9e:4b:34:10:08:
         38:d6:2b:4d:87:4a:15:5d:52:7f:98:40:c2:1a:e1:48:fd:7e:
         56:4c:fd:03:d3:fd:6e:26:88:a8:6c:61:ca:d1:c4:51:88:e3:
         d0:8b:57:24:93:44:1d:9c:f5:3a:fb:c0:df:a1:09:25:06:2a:
         6e:5b:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:03 2024 by rpki-client on console-fra.rpki-client.org