Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa
File:                     3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          zp+Alv7tm4vYZC7OoBRFFDheIbkSFu3vTkygE53g7a0=
Subject key identifier:   E8:A6:33:A9:06:7D:A7:0F:78:2C:CF:9C:73:12:DE:4F:D2:1E:2F:22
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       3F30DEA859891D9C712F15844DD8F491B52BD854
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:39 +0000
ROA not before:           Tue 23 Apr 2024 19:08:39 +0000
ROA not after:            Tue 22 Apr 2025 19:13:39 +0000
asID:                     263627
IP address blocks:        143.202.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:30:de:a8:59:89:1d:9c:71:2f:15:84:4d:d8:f4:91:b5:2b:d8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:39 2024 GMT
            Not After : Apr 22 19:13:39 2025 GMT
        Subject: CN=E8A633A9067DA70F782CCF9C7312DE4FD21E2F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:99:07:7b:f4:83:a5:05:4c:30:68:ea:22:
                    20:8a:dc:03:1b:77:cf:90:94:ba:cb:3d:c7:8a:b1:
                    b3:f3:7a:a4:0a:bc:9a:79:29:69:8f:db:80:f8:c9:
                    c8:07:41:9e:e7:e7:d2:c1:df:83:89:24:98:12:09:
                    f1:02:24:d3:f7:bd:a6:60:fe:2b:6c:25:ff:89:a4:
                    04:88:28:1d:d6:11:55:da:82:63:88:6f:4c:ab:a9:
                    33:3a:38:d3:ff:ba:e4:b1:42:6d:44:a7:00:5e:d5:
                    fd:9c:c0:6c:24:b3:c2:ef:44:85:3c:00:a7:cc:0f:
                    d0:d0:01:ce:c2:09:03:fe:b1:28:a1:9e:74:5a:af:
                    31:0e:50:d8:43:c5:76:e1:bb:a5:63:00:2e:7e:42:
                    11:59:60:85:2c:a5:00:09:80:dd:a8:a8:61:84:24:
                    17:08:1b:60:b8:02:32:54:13:34:28:13:b8:34:23:
                    7c:a4:22:37:e7:b5:94:4a:35:1a:cc:f2:dc:2c:7d:
                    51:2e:8e:fd:f0:da:5e:b9:79:ad:5b:42:6c:8f:86:
                    74:4f:07:e1:93:8c:2e:8f:c5:81:d8:d6:5d:10:3b:
                    ba:a3:fb:04:7d:ca:d5:eb:7f:1a:fc:3d:f9:06:c1:
                    28:3c:b4:1c:7e:17:da:5a:8c:72:7d:1f:50:26:22:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A6:33:A9:06:7D:A7:0F:78:2C:CF:9C:73:12:DE:4F:D2:1E:2F:22
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233372e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:51:9a:bb:7e:5e:1d:83:88:7a:20:d0:cc:40:e3:4a:83:92:
         5f:a8:f6:f3:c7:ba:eb:5d:e8:3a:fa:14:2d:8b:59:f1:51:89:
         9b:a5:35:1e:70:17:a8:f5:7c:fe:c7:b1:64:13:48:b3:a9:61:
         40:08:e8:19:f3:1e:37:14:81:57:bd:85:e8:0f:c1:5c:99:81:
         b1:ba:b9:43:fb:7f:6a:5a:67:45:7f:e2:c7:f8:f5:fb:bb:be:
         25:9c:7a:b9:63:e4:99:b5:29:43:aa:b4:c7:8f:f2:7b:8f:c4:
         7c:d7:0c:90:84:84:42:cb:9f:e1:d1:66:c8:8a:b1:22:78:db:
         fc:2c:3d:63:76:46:e2:99:99:33:16:3c:e9:2f:0a:47:10:64:
         e6:97:50:bc:39:55:fd:99:51:cd:7f:19:67:75:4e:a4:d3:d4:
         c8:58:41:54:82:0c:38:d7:2c:fd:b7:02:6f:6f:8a:f2:92:f6:
         ad:28:0e:71:9b:73:29:01:b4:ad:d9:52:88:f1:21:cf:cf:4c:
         79:8a:dd:a2:3f:72:13:c0:bc:1b:0a:a9:b0:7a:eb:4d:44:63:
         d3:be:46:a2:4a:ec:36:5e:4a:01:4b:cb:79:3d:65:bc:72:8f:
         58:31:3c:33:bb:71:ee:21:fb:1b:14:ff:11:b3:5c:a5:4b:6d:
         ec:9b:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:41 2024 by rpki-client on console-ams.rpki-client.org