Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32332d3233203d3e20323634303131.roa
File:                     3134332e302e3133362e302f32332d3233203d3e20323634303131.roa (raw, json)
Hash identifier:          MFGCoNDZw1Y+KhaKGs87pWI74a5FLiZnMq385kuf98Y=
Subject key identifier:   D2:6E:CF:3C:9D:8A:50:93:47:1A:0D:2A:E1:01:3C:C8:3A:F9:12:53
Certificate issuer:       /CN=2E322CEA05DD556250D2E421A2366BA5D174766B
Certificate serial:       017730C0D31E019BA0B897D2C9AE29D9B480F3FA
Authority key identifier: 2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32332d3233203d3e20323634303131.roa
Signing time:             Wed 19 Jun 2024 18:20:08 +0000
ROA not before:           Wed 19 Jun 2024 18:15:08 +0000
ROA not after:            Wed 18 Jun 2025 18:20:08 +0000
asID:                     264011
IP address blocks:        143.0.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Jun 2024 22:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:77:30:c0:d3:1e:01:9b:a0:b8:97:d2:c9:ae:29:d9:b4:80:f3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E322CEA05DD556250D2E421A2366BA5D174766B
        Validity
            Not Before: Jun 19 18:15:08 2024 GMT
            Not After : Jun 18 18:20:08 2025 GMT
        Subject: CN=D26ECF3C9D8A5093471A0D2AE1013CC83AF91253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:78:a8:78:a0:c5:3c:21:66:3d:ae:29:96:
                    cb:78:d4:c1:b3:6e:a6:e8:e8:e5:8f:67:b2:57:ee:
                    c4:b8:cc:d4:20:3c:4d:49:75:e4:4c:d0:ab:db:56:
                    64:6b:ad:9a:87:63:21:5a:b7:f9:f8:68:44:f6:13:
                    dc:1d:7f:8a:4b:29:ce:3c:a3:33:db:86:27:c2:b8:
                    d1:1c:a4:e8:47:e5:1b:08:65:3d:fe:78:c5:0c:63:
                    cd:03:ff:93:2e:71:e9:52:29:a8:6f:26:d0:6e:e3:
                    ee:cf:25:bc:fb:63:bf:4a:17:99:60:6f:25:13:70:
                    db:ef:f7:d4:75:f1:fe:cb:43:99:96:2d:57:ce:20:
                    86:0d:62:59:17:71:cd:84:d6:23:aa:33:a6:93:b3:
                    53:54:af:96:0b:96:05:47:61:bb:d2:30:6b:e1:ec:
                    be:fa:9d:8a:55:c0:d1:64:80:29:24:ce:ea:e2:86:
                    55:6f:6d:a8:57:6f:d4:c8:6a:7d:ae:dc:43:f4:a3:
                    c4:f5:81:a1:cb:f6:a0:4f:29:63:cc:79:40:64:a5:
                    06:2e:6c:2f:6e:89:7e:2c:5b:03:f8:33:f6:b1:ca:
                    28:6a:ac:7f:05:e3:92:43:49:06:2b:b0:1c:1e:86:
                    a2:d5:11:c4:80:50:3c:4b:6f:b7:91:80:cf:d2:ce:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6E:CF:3C:9D:8A:50:93:47:1A:0D:2A:E1:01:3C:C8:3A:F9:12:53
            X509v3 Authority Key Identifier:
                keyid:2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133362e302f32332d3233203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:12:48:20:90:08:87:e0:7a:6d:cc:87:90:eb:9f:db:43:a7:
         49:3c:dc:d4:ff:af:99:a5:57:d0:41:03:28:e3:fa:26:af:98:
         e2:19:6a:4b:61:25:aa:ac:97:0d:e1:41:70:07:da:df:a9:98:
         42:4a:ea:67:96:ed:1a:99:57:33:c7:95:3b:6d:7d:5d:80:61:
         23:da:b0:dc:33:97:49:38:9d:82:ea:2d:15:5b:02:58:f7:c1:
         14:ff:83:cc:d0:99:7b:75:14:96:85:a4:a3:b1:b9:ea:b2:9a:
         ef:9a:df:da:aa:38:2a:75:53:44:08:c1:fd:22:3a:41:a9:93:
         c9:c4:90:bd:72:d0:25:8a:25:f4:68:2b:74:07:d5:21:16:5e:
         31:5a:0b:ac:da:6c:21:61:09:0f:50:7e:1e:eb:49:bc:e9:55:
         ac:ad:9e:42:f4:d2:9d:d4:96:43:c7:4e:48:a3:0b:40:cc:3f:
         eb:d9:e1:8f:3a:c1:60:ca:2d:e4:6c:f6:9e:7e:42:95:23:c6:
         42:bf:e9:e8:d5:67:42:60:db:f4:83:f1:ca:1d:4c:73:94:ed:
         53:ba:c2:b8:40:1c:be:d6:a7:8c:21:82:3c:db:a0:19:28:e7:
         36:3f:53:a0:6b:17:b3:89:61:8c:92:8b:5e:f0:c6:76:b8:2f:
         57:0a:03:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:30 2024 by rpki-client on console-fra.rpki-client.org