Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232312e302f32342d3234203d3e20323634303232.roa
File:                     3134332e302e3232312e302f32342d3234203d3e20323634303232.roa (raw, json)
Hash identifier:          ijgo7Wu88SzvVYVInEhPXIM5KweFsQFmiohVNztWff0=
Subject key identifier:   52:DB:55:81:E6:C6:8E:69:2D:00:03:1C:48:36:86:83:9D:32:78:18
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       2CC5B7C318C074195A869D5E918A3245D619440A
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232312e302f32342d3234203d3e20323634303232.roa
Signing time:             Fri 24 May 2024 13:50:20 +0000
ROA not before:           Fri 24 May 2024 13:45:20 +0000
ROA not after:            Fri 23 May 2025 13:50:20 +0000
asID:                     264022
IP address blocks:        143.0.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c5:b7:c3:18:c0:74:19:5a:86:9d:5e:91:8a:32:45:d6:19:44:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: May 24 13:45:20 2024 GMT
            Not After : May 23 13:50:20 2025 GMT
        Subject: CN=52DB5581E6C68E692D00031C483686839D327818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:ec:e7:79:c9:8a:da:1a:5b:ce:5d:71:cd:
                    5a:c9:4d:e3:85:c6:90:e8:a6:c1:54:9f:10:ab:0b:
                    bc:df:e2:9d:10:8e:d8:08:8d:d1:89:ef:34:4f:94:
                    03:c8:02:be:6e:e0:30:5e:f9:9f:3b:78:a6:b4:13:
                    c3:d6:93:a9:89:f6:65:ed:3c:8c:09:6d:7e:e3:88:
                    c6:d9:1f:97:c4:5c:50:55:7a:73:4f:9f:42:95:75:
                    b6:f5:9a:64:25:05:fc:ab:ca:6f:a2:65:09:4f:07:
                    4b:03:3d:f1:6c:ce:9d:b2:26:7d:b4:fd:b9:f8:65:
                    4d:8d:3a:18:49:58:43:36:e4:e1:7b:25:38:82:be:
                    b8:74:10:e9:cf:37:ab:1c:67:8f:f9:fa:25:41:b1:
                    c1:9f:93:d8:28:8b:69:f7:ea:2d:93:8b:62:ec:d8:
                    a6:da:fc:9d:b8:07:86:89:6b:9a:ff:d9:c9:ab:ca:
                    92:9e:63:6a:c4:64:bd:a7:95:f6:ba:41:1b:5a:da:
                    9e:b3:2d:b9:af:4b:b9:bc:e1:b0:25:7b:d7:e2:43:
                    9d:ed:a8:d3:14:fa:73:b7:54:13:47:44:06:16:48:
                    96:ba:ec:d6:ec:1d:e4:b4:ad:18:4a:12:e5:fc:c9:
                    6d:6e:04:80:ee:7b:c1:45:c9:23:17:e0:7a:af:58:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DB:55:81:E6:C6:8E:69:2D:00:03:1C:48:36:86:83:9D:32:78:18
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/3134332e302e3232312e302f32342d3234203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:7d:c5:0c:6f:e4:03:33:34:42:f5:b1:63:97:d2:1f:8d:86:
         27:0d:f4:72:16:6d:e9:09:2e:26:1d:77:86:88:24:b8:87:9e:
         24:03:25:f1:bf:f5:ee:4e:09:db:30:46:66:e5:92:c1:72:b6:
         85:57:d5:81:28:f7:5e:f8:ef:16:d9:e3:9e:aa:59:02:24:4b:
         14:00:65:02:4b:59:6c:96:51:7f:7d:41:64:29:e5:df:f4:34:
         0d:59:e6:0c:42:da:07:a6:d3:ec:f5:a6:5f:e0:c4:b6:49:59:
         f3:84:81:d7:e7:d2:73:8f:ec:a8:32:27:02:15:c3:13:ae:8a:
         5e:26:cb:94:79:2b:15:e6:91:3b:62:b7:b3:45:18:2e:82:d0:
         5a:1e:6f:76:bc:54:49:b5:43:d6:a5:b4:9e:ea:d5:3c:a6:8e:
         3f:0b:f7:e4:c9:50:a7:52:06:86:57:a9:91:83:d7:8b:5b:ce:
         02:84:65:b0:51:93:f9:9e:a4:f1:1a:a8:db:ed:e4:6a:52:57:
         32:cd:b4:5d:36:c5:02:f7:52:df:7a:c0:09:36:f3:de:5c:4e:
         5d:00:7f:a2:8e:34:f7:29:fb:c4:7a:97:82:6d:51:40:66:01:
         03:c5:f8:08:a3:57:34:c7:90:b9:82:af:0e:19:1e:55:86:f1:
         15:ed:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org