Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/3134332e3133372e34322e302f32342d3234203d3e20323634303330.roa
File:                     3134332e3133372e34322e302f32342d3234203d3e20323634303330.roa (raw, json)
Hash identifier:          mwW0fYtbhRjSmGjaetRV1FgLkpCfinuBRyA53ieFEGQ=
Subject key identifier:   8A:C6:3E:5C:71:6B:FE:E9:2D:40:5E:E3:96:B4:96:8A:71:68:78:46
Certificate issuer:       /CN=972925A57A172EFE7255E798517DAC0C695452AC
Certificate serial:       025FBE5D829EC42AF0A9E925B025D9B39277E450
Authority key identifier: 97:29:25:A5:7A:17:2E:FE:72:55:E7:98:51:7D:AC:0C:69:54:52:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/3134332e3133372e34322e302f32342d3234203d3e20323634303330.roa
Signing time:             Thu 04 Apr 2024 19:23:18 +0000
ROA not before:           Thu 04 Apr 2024 19:18:18 +0000
ROA not after:            Thu 03 Apr 2025 19:23:18 +0000
asID:                     264030
IP address blocks:        143.137.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.crl
                          rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5f:be:5d:82:9e:c4:2a:f0:a9:e9:25:b0:25:d9:b3:92:77:e4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972925A57A172EFE7255E798517DAC0C695452AC
        Validity
            Not Before: Apr  4 19:18:18 2024 GMT
            Not After : Apr  3 19:23:18 2025 GMT
        Subject: CN=8AC63E5C716BFEE92D405EE396B4968A71687846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:9f:90:16:ff:8d:ef:12:ec:03:35:36:d3:
                    8c:e2:cb:a1:81:66:85:2d:31:69:08:76:43:62:52:
                    13:7b:d2:49:a4:e8:3a:0b:3c:69:d3:61:22:7a:7e:
                    14:c9:a8:05:5e:2b:75:30:bf:fa:6c:d1:35:4e:7f:
                    4b:32:da:ea:99:9f:23:7a:89:bd:5f:29:9e:c1:b9:
                    9a:09:d5:47:26:b7:b2:e4:7f:17:e1:6b:c0:62:b5:
                    1d:71:79:00:a7:d8:a4:9f:54:9c:74:b7:4a:2a:1c:
                    9a:19:d2:cf:aa:1a:18:59:fa:62:83:32:e3:7a:d1:
                    1b:5a:2b:b3:c0:87:13:df:2a:da:bd:0a:e2:db:b9:
                    4c:7c:31:b4:db:07:63:99:ac:a5:b6:a9:5f:34:df:
                    b5:3c:44:8e:f4:e7:d1:df:72:93:8a:2e:f4:f0:15:
                    61:d1:5b:46:f3:c1:c4:48:df:c7:56:a4:0b:48:9d:
                    1d:5f:ff:bd:7d:f1:88:a6:95:c4:6a:36:54:c6:50:
                    21:d5:89:a7:c0:eb:db:5e:9f:fb:37:34:55:26:b5:
                    9e:c1:c4:9e:bd:c1:c6:36:a2:67:a7:df:47:76:76:
                    98:01:95:e7:8c:ed:6b:02:88:c1:52:62:b0:61:5b:
                    4d:4d:67:95:99:b5:fd:54:8c:58:c4:b2:17:2b:f9:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C6:3E:5C:71:6B:FE:E9:2D:40:5E:E3:96:B4:96:8A:71:68:78:46
            X509v3 Authority Key Identifier:
                keyid:97:29:25:A5:7A:17:2E:FE:72:55:E7:98:51:7D:AC:0C:69:54:52:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/972925A57A172EFE7255E798517DAC0C695452AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972925A57A172EFE7255E798517DAC0C695452AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xD2BY2ZffMwD5god8DAU2GRfp3WsgJLTGNcZJZUefCV/1/3134332e3133372e34322e302f32342d3234203d3e20323634303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:96:a2:a2:c4:39:bc:05:6c:8d:28:21:8a:87:aa:2c:07:c4:
         a2:db:97:0b:5d:4a:b5:a4:96:30:a9:3b:8d:51:96:3d:13:79:
         fd:f8:08:d1:75:f9:70:f5:85:71:b8:46:8f:b3:fa:06:cb:75:
         8c:55:a0:97:16:fc:e3:a9:49:2e:fd:87:27:45:5c:84:87:1f:
         08:5b:64:39:5d:5f:55:b9:0a:a0:7c:25:1e:e4:55:09:07:ad:
         ad:81:6f:4b:01:d2:72:05:1e:08:af:fa:9f:bc:90:7f:16:df:
         60:bd:00:a7:01:4e:13:50:bf:90:e7:f2:39:fd:aa:59:2d:fb:
         bd:4b:53:d4:91:e7:c0:47:40:1f:0b:86:a2:7b:9d:5b:7e:8b:
         37:22:8c:17:fe:2d:0c:b0:a8:30:f1:ca:90:a9:e2:58:bc:8b:
         e3:69:53:db:ba:2d:7a:54:86:e0:ca:e2:01:fd:08:d2:c1:af:
         73:32:1d:b9:76:28:61:c0:0b:82:97:14:1c:ed:e0:26:31:3c:
         75:e2:1f:de:0b:3a:6d:1e:0b:cd:ac:de:ee:c8:08:38:75:db:
         79:57:ef:c0:ab:f9:9b:c9:00:e0:b6:cd:d7:f8:23:19:5c:8b:
         bb:67:85:15:b0:a1:bd:e5:17:55:75:d6:66:a8:55:ff:2d:f1:
         f4:0c:90:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:03 2024 by rpki-client on console-fra.rpki-client.org