Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133382e302f32332d3233203d3e20323634303131.roa
File:                     3134332e302e3133382e302f32332d3233203d3e20323634303131.roa (raw, json)
Hash identifier:          OAPyIyxAIHTNmaBAm0PE8YRRf15OtdPtdGotxb9IZfU=
Subject key identifier:   99:36:47:8E:56:81:5A:A0:07:4C:58:A1:A8:0C:A8:F0:41:10:54:5A
Certificate issuer:       /CN=2E322CEA05DD556250D2E421A2366BA5D174766B
Certificate serial:       4E8164E6A741870147BCE93AE5EC51CBC689EE24
Authority key identifier: 2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133382e302f32332d3233203d3e20323634303131.roa
Signing time:             Wed 19 Jun 2024 18:20:07 +0000
ROA not before:           Wed 19 Jun 2024 18:15:07 +0000
ROA not after:            Wed 18 Jun 2025 18:20:07 +0000
asID:                     264011
IP address blocks:        143.0.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Jun 2024 22:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:81:64:e6:a7:41:87:01:47:bc:e9:3a:e5:ec:51:cb:c6:89:ee:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E322CEA05DD556250D2E421A2366BA5D174766B
        Validity
            Not Before: Jun 19 18:15:07 2024 GMT
            Not After : Jun 18 18:20:07 2025 GMT
        Subject: CN=9936478E56815AA0074C58A1A80CA8F04110545A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:05:7c:65:ca:61:21:a3:ea:f2:45:3b:c6:
                    ad:34:5b:96:65:a9:68:70:25:7b:b3:1b:ca:fe:d4:
                    1e:d1:6d:5f:ef:9f:55:a4:e7:46:e9:81:5f:98:b2:
                    db:d9:df:e6:5f:38:fb:e6:4c:62:92:a5:2f:19:11:
                    02:2a:82:0d:44:1b:48:5d:32:c0:a7:d4:34:e1:97:
                    39:4b:e7:39:9a:cd:32:7e:c9:6b:8e:6b:16:ff:25:
                    9b:95:e4:d4:ff:f9:e6:dc:bf:ab:ee:07:b6:6c:74:
                    ca:8d:44:36:5a:87:af:21:65:d6:fe:96:c0:5f:41:
                    47:ca:15:8e:49:66:66:ac:c9:ae:9b:82:a4:6a:be:
                    cd:a1:8e:98:3d:78:d9:13:94:42:c3:48:d4:31:8a:
                    9e:bb:55:07:05:7c:4a:db:e6:2b:c8:9e:61:ab:50:
                    be:4e:52:94:73:36:57:21:23:fc:7e:2d:4d:a0:9c:
                    74:84:cd:70:42:a0:e7:b4:e4:bd:8a:ea:e0:c0:24:
                    9e:7f:07:d4:96:bc:34:25:cf:08:0d:2d:7c:0a:45:
                    24:36:06:9e:29:a5:50:c9:12:a3:35:b9:c5:67:8d:
                    39:6f:1b:7b:d6:60:0b:29:87:aa:24:d4:ba:68:70:
                    9e:86:25:08:c0:cf:6c:75:d4:9f:d2:55:3b:3a:58:
                    fa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:36:47:8E:56:81:5A:A0:07:4C:58:A1:A8:0C:A8:F0:41:10:54:5A
            X509v3 Authority Key Identifier:
                keyid:2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/3134332e302e3133382e302f32332d3233203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:ed:6d:91:78:a7:b7:c4:f3:e3:cf:e3:c6:fa:a9:5a:47:64:
         de:ee:8c:46:b8:39:6d:6b:5e:88:d1:25:7e:39:20:e8:40:c9:
         8e:0f:00:ee:f2:6a:18:60:ce:e6:b7:0a:3e:a5:f9:1b:4f:de:
         50:62:10:42:01:ba:f2:4d:96:72:19:77:59:37:5e:f3:0d:1e:
         d3:5d:c7:b7:65:45:4c:b8:49:94:73:28:89:64:a4:d1:f9:d9:
         a7:dd:b4:c0:07:c9:0d:31:02:1f:29:64:a9:38:8e:8e:54:19:
         c1:99:23:d1:ab:1b:69:11:35:f4:7e:d8:02:78:2f:95:1b:5c:
         98:e5:80:5e:36:5d:cf:62:82:ac:3c:2b:fe:8e:7f:eb:b8:ab:
         50:0d:e3:3b:a5:62:33:f8:ba:08:67:15:2b:26:67:3d:7e:25:
         01:62:41:68:41:0b:33:8e:ff:64:31:fd:2d:65:91:39:22:f4:
         a0:bd:06:19:75:91:a6:7c:e1:b5:d0:c5:6a:19:b7:96:f0:22:
         45:54:45:ac:f5:d5:df:02:98:29:56:d1:73:b8:a2:f6:72:96:
         3d:e4:fe:0e:9d:c5:9e:49:44:87:23:55:ce:a4:94:64:36:66:
         2c:01:92:74:29:18:0d:ba:ad:94:4b:44:a0:13:03:69:c1:e1:
         b0:4a:0a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:06:00 2024 by rpki-client on console-ams.rpki-client.org