Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32322d3232203d3e20323634303131.roa
File:                     3134332e302e3133362e302f32322d3232203d3e20323634303131.roa (raw, json)
Hash identifier:          0znVvydLub2t3Ae8FHGzGuuAxrtygMT8tDQQ4aBSfp4=
Subject key identifier:   E8:BC:B3:92:84:79:5F:88:32:01:D1:59:4B:63:C9:33:E6:C0:B6:10
Certificate issuer:       /CN=2E322CEA05DD556250D2E421A2366BA5D174766B
Certificate serial:       2F889DE09414B2121DF6D6288E74F41AD24FEC05
Authority key identifier: 2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32322d3232203d3e20323634303131.roa
Signing time:             Wed 19 Jun 2024 18:20:08 +0000
ROA not before:           Wed 19 Jun 2024 18:15:08 +0000
ROA not after:            Wed 18 Jun 2025 18:20:08 +0000
asID:                     264011
IP address blocks:        143.0.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:9d:e0:94:14:b2:12:1d:f6:d6:28:8e:74:f4:1a:d2:4f:ec:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E322CEA05DD556250D2E421A2366BA5D174766B
        Validity
            Not Before: Jun 19 18:15:08 2024 GMT
            Not After : Jun 18 18:20:08 2025 GMT
        Subject: CN=E8BCB39284795F883201D1594B63C933E6C0B610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:ac:10:35:7e:bb:e4:8e:99:7b:7b:b2:22:
                    3e:91:4b:48:6c:61:35:7b:73:a1:eb:7d:9a:a4:5e:
                    f4:a0:b2:1d:5d:87:16:01:f3:55:d2:f7:1c:9b:bd:
                    3a:83:12:b4:97:81:48:ab:30:bc:7f:63:f9:c5:af:
                    09:ef:98:bd:71:91:ce:3a:8a:b4:0f:7e:98:d9:8e:
                    f5:4f:3d:28:80:47:57:2a:68:87:46:48:05:96:87:
                    bc:ed:50:95:a3:55:5d:c0:32:35:99:fe:81:3a:e7:
                    ff:d2:25:3f:83:e3:53:ab:c3:9d:5d:4d:f4:f8:4b:
                    f8:61:ea:0d:75:69:50:12:02:e5:d9:e4:80:ac:e5:
                    aa:be:70:07:f0:a2:05:ef:a5:48:39:bc:17:45:b9:
                    3e:1f:cf:82:10:43:fa:80:84:df:4c:6f:81:bd:5c:
                    86:84:07:74:7a:d7:37:f7:73:8b:21:2b:0f:c0:52:
                    b5:f0:ca:9f:af:0a:45:61:37:2f:be:6c:b1:a5:13:
                    4e:35:f9:03:80:4d:8c:35:98:83:37:f3:0e:d7:59:
                    24:38:e5:e8:2f:79:e6:d7:60:be:cc:a8:9e:1b:eb:
                    37:35:e1:bc:9d:18:a2:6f:20:60:f3:f5:86:1e:cd:
                    12:5c:22:81:67:d3:d1:97:07:d1:f8:ff:31:9f:18:
                    8e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BC:B3:92:84:79:5F:88:32:01:D1:59:4B:63:C9:33:E6:C0:B6:10
            X509v3 Authority Key Identifier:
                keyid:2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32322d3232203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:4c:26:32:45:ea:b4:e2:a9:af:0c:51:cb:41:5c:49:45:a1:
         d4:26:50:d7:cf:2e:f0:72:5d:3a:fd:c3:25:93:ef:13:7b:d8:
         39:2f:74:cc:0c:cd:aa:ca:49:31:f4:50:f0:62:03:84:76:14:
         21:10:75:3c:3c:16:9e:7b:6b:42:0e:9b:71:7e:30:20:ae:85:
         e7:61:59:b4:48:ee:48:79:db:df:cb:58:41:90:13:4e:d7:ca:
         6d:3e:50:03:d3:fd:eb:55:47:6a:f9:6b:63:51:30:3d:77:89:
         97:cb:38:08:02:bd:f8:d3:12:fe:2f:0a:56:f8:72:ee:d9:f0:
         d7:d9:a8:a0:f8:cf:fb:6e:68:9f:2d:f5:92:61:c1:44:04:cc:
         e6:c7:a4:e1:54:79:78:7e:2d:8a:98:71:30:fb:16:88:2e:b6:
         6d:5a:d6:14:79:82:07:65:61:50:80:b9:4e:d0:ee:28:32:06:
         29:80:6c:f8:a0:80:f8:e0:b6:d4:31:fb:42:ce:16:84:e6:e5:
         94:ce:00:51:ea:fb:dd:6a:92:75:b3:34:90:7d:09:29:82:52:
         25:4c:dd:81:a9:c0:99:50:26:08:f2:05:8d:49:99:d0:fb:84:
         bc:13:27:34:bb:73:18:84:55:63:41:ce:1f:3a:70:0e:a9:e9:
         e9:0a:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:29 2024 by rpki-client on console-fra.rpki-client.org