Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa
File:                     3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa (raw, json)
Hash identifier:          W8JgieO/br6XQbFdXaAlP/QCAtyRhQhh70JCbAI09k0=
Subject key identifier:   D8:0E:E9:FA:80:FA:B7:6B:9F:73:42:B5:81:53:88:1B:46:6A:96:F6
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       17CB2BF96862E4C9DB446A58359CD7DF40FE5266
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa
Signing time:             Thu 04 Apr 2024 08:02:39 +0000
ROA not before:           Thu 04 Apr 2024 07:57:39 +0000
ROA not after:            Thu 03 Apr 2025 08:02:39 +0000
asID:                     264589
IP address blocks:        143.202.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cb:2b:f9:68:62:e4:c9:db:44:6a:58:35:9c:d7:df:40:fe:52:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Apr  4 07:57:39 2024 GMT
            Not After : Apr  3 08:02:39 2025 GMT
        Subject: CN=D80EE9FA80FAB76B9F7342B58153881B466A96F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:55:8f:70:c6:d2:5b:0a:d2:bf:b6:31:7f:
                    0a:62:1c:c4:db:54:d3:3c:11:33:a5:8f:97:29:77:
                    68:60:e8:2d:99:47:8a:a6:07:69:84:49:d3:8f:88:
                    9d:17:97:fc:f4:fc:fc:29:a4:af:79:4e:1f:46:00:
                    d2:53:bf:4b:2d:2e:20:09:d1:e6:72:05:5e:25:90:
                    bc:09:3f:7a:ce:47:12:8b:d5:57:f1:a4:72:4b:fb:
                    a8:46:a8:f8:8a:af:0c:ae:8d:2e:be:3d:0f:80:ce:
                    4e:2e:f0:8a:28:d3:11:7a:85:5b:79:9d:cb:a2:c4:
                    25:52:1e:fb:05:36:db:c7:dd:d8:56:27:9a:62:e0:
                    ad:df:60:e5:ac:47:26:8f:70:ca:b3:2c:02:b9:56:
                    f1:5a:6f:68:fa:fa:cb:87:63:07:0d:c2:e2:fe:c2:
                    6c:e2:c9:53:d7:33:36:27:15:30:45:92:b1:10:44:
                    a0:e9:17:32:41:e9:30:2d:43:da:34:49:11:f0:bc:
                    fd:62:f2:df:92:87:4b:13:e4:0d:48:13:3d:0d:b7:
                    d5:ec:4b:7a:e8:1a:06:c9:5a:bb:7d:8e:b7:c7:9b:
                    dc:8e:09:f0:af:b6:c8:af:65:4f:08:68:7a:3a:99:
                    6f:bc:16:44:73:5a:a4:fc:30:75:07:d1:90:86:5a:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0E:E9:FA:80:FA:B7:6B:9F:73:42:B5:81:53:88:1B:46:6A:96:F6
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:3c:d5:d8:ab:42:10:4d:8d:52:19:cd:c1:1d:f4:24:20:96:
         c3:fd:d6:8c:7b:c1:3a:ef:99:47:ad:b5:7f:0b:32:ef:f6:c0:
         76:dd:b3:8b:36:f0:60:e3:68:84:2f:a0:d9:6f:e7:a1:61:60:
         a7:32:36:52:91:20:f1:4a:2c:51:4d:00:21:b6:2c:83:ae:87:
         c7:8a:1b:d8:3d:a9:30:bd:b5:c1:97:0b:29:22:50:4b:1b:8c:
         e9:6a:4e:e1:78:c5:84:3d:60:bb:6a:ce:b2:0d:82:08:3b:27:
         1e:42:d1:43:e6:a4:ea:82:e6:78:70:81:98:e9:35:8c:a1:24:
         83:35:af:9c:04:c4:32:d8:f4:61:62:09:09:b7:49:9c:0b:8e:
         1b:a5:dc:5e:e3:07:6d:ef:2e:41:85:b6:cc:ae:40:a8:3e:9d:
         fe:55:b7:5a:f0:96:eb:c3:b0:af:d2:83:c9:09:a5:0e:59:d2:
         c4:f9:cf:a6:e6:5a:16:8a:e2:24:34:33:31:77:49:51:59:7a:
         57:07:c7:db:cd:e0:31:47:25:8b:f0:9e:dd:93:99:52:39:6f:
         39:fa:48:67:c0:c3:e4:2b:91:35:3f:32:00:6c:d6:47:8a:45:
         ec:c7:23:c2:20:37:8e:50:a4:4d:db:c9:d7:41:93:60:69:a5:
         61:9e:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org