Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233392e302f32342d3234203d3e20323633363237.roa
File:                     3134332e3230322e3233392e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          EOUo8J4HKf/ewr1O1u9DfPHY2PZuXdrwvlQUi2JqM+E=
Subject key identifier:   F2:FE:84:5D:C2:9A:3F:57:56:44:30:24:77:73:78:B6:B5:BE:03:0F
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       1FA6AF1D827C5C648810FB40B4D54D03E35A671E
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233392e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:39 +0000
ROA not before:           Tue 23 Apr 2024 19:08:39 +0000
ROA not after:            Tue 22 Apr 2025 19:13:39 +0000
asID:                     263627
IP address blocks:        143.202.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a6:af:1d:82:7c:5c:64:88:10:fb:40:b4:d5:4d:03:e3:5a:67:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:39 2024 GMT
            Not After : Apr 22 19:13:39 2025 GMT
        Subject: CN=F2FE845DC29A3F5756443024777378B6B5BE030F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1d:f8:25:b9:61:bb:cd:75:e3:61:4e:58:b8:
                    d0:53:b2:51:b4:7d:e0:fd:7e:a0:40:a8:fc:c9:a2:
                    22:aa:aa:e8:ff:dc:66:83:09:7d:69:f1:e7:cc:1b:
                    1e:37:94:39:b3:34:bc:2f:e7:c7:ca:12:83:15:f0:
                    db:63:38:88:96:4d:61:93:9d:db:5e:1a:57:18:80:
                    d5:b3:f2:90:57:cd:c1:a6:07:e0:40:bf:35:4d:a5:
                    d8:2e:50:6a:51:03:c6:ce:ae:89:7f:37:53:0e:51:
                    8f:ad:7b:d9:59:a9:d8:48:cf:a0:a3:8d:2b:d4:ee:
                    81:0a:0b:6f:11:21:f0:f3:10:5c:a8:d2:a5:de:f0:
                    af:d9:1d:da:00:ea:a7:0b:3c:71:7e:03:0f:a0:ce:
                    f5:0b:65:32:25:53:cb:8e:8c:66:f5:dd:97:fc:19:
                    e8:03:e5:8a:6a:79:5e:b6:4b:ab:84:35:03:eb:77:
                    9f:c2:94:91:72:10:5c:90:9d:c3:42:df:c0:e4:c6:
                    e5:75:51:93:e0:bd:c0:72:6e:0c:1c:10:a9:0c:82:
                    14:1d:96:e8:3c:d4:51:42:aa:0b:11:69:b9:63:1d:
                    f5:20:26:1c:a6:63:36:63:33:ce:7b:dc:0e:81:ec:
                    d4:c0:64:77:d8:3f:ba:73:f5:bd:94:3a:9f:17:41:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FE:84:5D:C2:9A:3F:57:56:44:30:24:77:73:78:B6:B5:BE:03:0F
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233392e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e9:09:86:54:ad:30:99:68:c0:da:a7:df:0e:6e:d5:55:ae:
         a9:77:8e:48:05:1a:47:f0:a9:5b:28:db:8a:a5:58:e2:8c:13:
         06:30:4a:e1:60:1e:bb:ee:31:93:a6:27:4c:e7:3b:41:dc:f8:
         6b:ac:46:36:33:60:9e:a8:a9:b1:73:d2:5b:03:68:66:ee:44:
         ea:34:1f:b9:58:1f:09:f2:c7:6d:78:e8:ee:57:ba:39:46:e7:
         cc:70:38:60:09:21:b5:b8:a9:02:7e:2a:93:34:33:44:f3:59:
         8a:50:11:e7:86:47:ee:86:ce:4f:85:28:d5:ae:15:d7:bb:16:
         0a:53:c9:e6:a9:a8:4c:9c:09:a2:6e:00:c5:a5:a7:c1:24:ce:
         ee:d0:4a:2c:62:a1:43:cf:cd:cd:49:33:b4:c5:d3:55:f6:bf:
         aa:95:58:a2:1f:38:d4:c4:aa:55:a3:bc:73:5d:11:39:33:81:
         5a:7e:ce:85:ee:ea:82:d3:e8:80:1b:58:72:54:97:26:8f:1e:
         bb:2d:e7:30:c7:8c:48:90:2b:bf:a7:25:8b:65:5d:f7:24:72:
         73:70:6a:f9:1c:92:bc:e2:eb:2f:bc:08:b7:d9:42:4e:91:c9:
         24:80:60:8b:6a:09:f5:2d:92:05:92:f4:da:e0:53:83:6b:0c:
         e0:ca:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:13 2024 by rpki-client on console-fra.rpki-client.org