Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa
File:                     3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          pwCSTO4iOmefpw2Sn6gsjCIRT5FraOgvU0K7E5Af/Zs=
Subject key identifier:   1D:D3:BF:11:B6:64:E9:6B:EB:A3:68:5F:2F:C6:C4:D6:23:56:CE:99
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       23C58CC8B8B2E2D074E96C0BDF5986EDC220EEAF
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:41 +0000
ROA not before:           Tue 23 Apr 2024 19:08:41 +0000
ROA not after:            Tue 22 Apr 2025 19:13:41 +0000
asID:                     263627
IP address blocks:        143.202.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c5:8c:c8:b8:b2:e2:d0:74:e9:6c:0b:df:59:86:ed:c2:20:ee:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:41 2024 GMT
            Not After : Apr 22 19:13:41 2025 GMT
        Subject: CN=1DD3BF11B664E96BEBA3685F2FC6C4D62356CE99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:bd:4b:d0:ef:bc:2e:2d:4e:ea:3d:f6:15:
                    57:22:97:a9:22:77:6a:2b:c9:00:2e:97:b7:09:fe:
                    3d:55:5c:4d:6d:36:7f:46:29:6c:42:c0:16:48:41:
                    b1:39:26:db:68:60:dd:4c:a3:14:7a:fa:33:40:bc:
                    ad:c4:51:c2:a7:9b:b7:23:c0:f7:20:57:89:3f:1b:
                    3d:05:c2:c6:57:7f:80:34:a0:b1:f8:72:25:37:ed:
                    b6:11:0f:d5:05:ce:3f:4d:f8:4c:5b:92:a2:ba:ba:
                    5d:aa:7d:79:7e:b3:00:9c:d9:4c:d1:eb:bb:dc:5d:
                    d3:3b:39:1f:06:04:9b:6e:05:e2:ba:30:ef:e5:9b:
                    b7:54:d2:c3:35:c8:a7:c6:b9:a1:c3:c2:f0:33:32:
                    86:b1:06:14:29:5e:e6:15:c5:86:20:75:f3:d1:b1:
                    dc:e3:29:3f:64:fc:b7:70:da:3b:a4:19:eb:3b:5c:
                    a3:13:09:73:ac:27:ab:01:0f:92:02:93:d2:e0:1c:
                    92:7d:7b:b0:aa:00:f7:43:77:10:2c:3d:9b:b2:70:
                    69:01:29:8a:0e:60:81:39:ea:aa:1c:58:2e:4d:b5:
                    c9:ad:2e:ea:90:9b:6c:3f:43:1d:eb:92:87:16:77:
                    e8:59:7c:5a:fb:6a:e9:a0:5c:25:91:52:7b:fd:02:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D3:BF:11:B6:64:E9:6B:EB:A3:68:5F:2F:C6:C4:D6:23:56:CE:99
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f2:7e:63:46:a3:df:31:35:81:39:1c:05:b7:27:50:e9:af:
         72:6d:b9:c4:a4:fc:06:76:91:76:1c:0c:1d:20:b5:74:7e:8b:
         a8:16:ee:d4:fa:9e:cd:54:72:03:53:cf:e0:68:28:54:4f:73:
         08:22:ee:e5:7f:f8:d6:04:40:e2:5d:b9:86:a3:52:50:3a:ad:
         72:0b:29:6c:e8:5b:3e:5c:1a:10:6f:cb:7f:51:c9:8d:59:f6:
         28:f8:13:1a:1f:70:c4:93:34:82:09:42:23:02:da:fd:27:65:
         78:d7:a3:2f:29:f3:15:99:03:6b:f0:9a:aa:53:ad:c6:90:89:
         c5:7b:f5:45:8a:b1:18:19:b3:9c:9e:76:10:da:50:9a:10:c3:
         9d:9e:a8:51:7a:e4:0d:d6:cb:ed:4d:55:0e:93:fd:db:97:5f:
         b9:cb:96:84:7d:11:1f:e1:a3:d3:57:9c:a7:b8:58:0c:df:cf:
         35:92:d7:58:d6:5e:a8:7b:37:f1:b3:7c:8a:46:18:69:71:84:
         1d:af:0b:68:26:c5:b5:99:6a:d5:83:2d:92:02:ed:93:ce:98:
         53:70:85:fb:86:3c:c3:76:80:c0:4f:eb:a3:c9:b1:02:d4:72:
         0d:df:4e:2a:45:44:5b:b3:97:cd:b4:c6:0c:33:3a:1d:57:06:
         2f:91:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:39 2024 by rpki-client on console-fra.rpki-client.org