Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3134332e302e34302e302f32322d3234203d3e20323632353530.roa
File:                     3134332e302e34302e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          nU5f8KL/07x1jbfKu3ozNmYuqFM68qsp/xiw84tq47I=
Subject key identifier:   7F:27:D6:19:60:22:4C:04:67:4C:11:C3:B1:1B:A9:13:B0:2D:74:39
Certificate issuer:       /CN=CA6EB79104876EFECBF1CFEF07ECFB3A048D0598
Certificate serial:       5EB18A75BDB2B45D48EE4465E674791B3AB8B43B
Authority key identifier: CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3134332e302e34302e302f32322d3234203d3e20323632353530.roa
Signing time:             Thu 27 Jun 2024 20:13:05 +0000
ROA not before:           Thu 27 Jun 2024 20:08:05 +0000
ROA not after:            Thu 26 Jun 2025 20:13:05 +0000
asID:                     262550
IP address blocks:        143.0.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b1:8a:75:bd:b2:b4:5d:48:ee:44:65:e6:74:79:1b:3a:b8:b4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6EB79104876EFECBF1CFEF07ECFB3A048D0598
        Validity
            Not Before: Jun 27 20:08:05 2024 GMT
            Not After : Jun 26 20:13:05 2025 GMT
        Subject: CN=7F27D61960224C04674C11C3B11BA913B02D7439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:ab:ee:92:0c:44:54:ba:09:a3:fa:8d:54:
                    e8:70:7b:99:32:f4:97:8c:8a:4d:00:00:8d:d4:d7:
                    fd:e3:0c:4b:08:b6:df:fe:a1:bf:d1:14:0b:90:a6:
                    ac:cc:c7:14:2a:47:cf:2d:94:9b:c1:23:20:45:e9:
                    e4:44:68:dd:31:60:88:a2:a2:df:d4:bd:5c:f5:65:
                    14:e4:6f:3c:41:c7:a5:4a:17:4c:b3:e4:d8:d1:cc:
                    d6:7d:e5:06:67:98:36:50:f9:92:99:2b:77:23:86:
                    a7:aa:cc:37:98:47:40:e0:7e:ed:d9:59:78:ce:4e:
                    25:35:9c:04:6b:9f:38:9e:5c:c9:0a:77:56:d1:6e:
                    a5:0b:2a:99:ae:b5:c8:ff:14:ba:30:62:6f:f9:7f:
                    25:0b:de:56:74:c0:8f:d2:7a:6a:ad:62:58:02:64:
                    3c:e9:8d:84:69:24:10:3c:09:32:72:a2:0f:55:c1:
                    12:0a:9d:3b:e6:2f:fd:4d:3b:c3:b5:da:7e:fa:1c:
                    f6:81:54:24:99:7d:b8:9d:40:f5:02:f9:00:71:5a:
                    f5:b7:87:3d:a9:20:39:e8:ce:4a:c7:b6:c4:42:d6:
                    50:76:f0:e7:45:71:f3:77:bc:5f:c8:86:da:02:c2:
                    28:de:1f:f4:e1:1a:ac:0e:26:b3:0a:30:b4:f4:1b:
                    c2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:27:D6:19:60:22:4C:04:67:4C:11:C3:B1:1B:A9:13:B0:2D:74:39
            X509v3 Authority Key Identifier:
                keyid:CA:6E:B7:91:04:87:6E:FE:CB:F1:CF:EF:07:EC:FB:3A:04:8D:05:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA6EB79104876EFECBF1CFEF07ECFB3A048D0598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/1/3134332e302e34302e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:98:94:72:ba:2d:8a:e8:f6:21:4a:96:d3:c7:61:50:2a:bb:
         74:80:61:22:7d:ad:38:13:a2:58:9d:a2:71:46:dd:5f:a2:dd:
         b1:76:32:21:b6:2f:24:40:c1:c8:1e:97:21:e1:62:ab:60:55:
         80:41:ee:a2:53:af:e3:1f:84:b2:74:58:95:6e:2d:bf:dd:d4:
         72:11:cf:7a:da:a1:b3:94:e0:06:28:2f:0d:16:20:b2:35:e9:
         6d:c3:6d:bb:f3:dd:c3:9f:40:03:bd:90:f6:91:86:34:45:9d:
         89:a6:57:27:a7:3b:dd:db:39:d7:d0:13:49:bb:b5:a1:61:c9:
         2e:55:17:27:a6:2f:46:87:de:02:61:39:e1:fb:06:52:f5:88:
         3e:5d:2d:31:b2:ee:f4:52:77:9c:5a:5f:8f:05:1e:6d:01:60:
         9e:bd:ce:2a:76:17:f5:ef:3f:cd:2f:02:97:cd:46:ea:4b:d9:
         0a:30:4e:d7:6e:2a:64:14:2a:ca:40:1a:34:73:34:2c:9a:10:
         94:3d:a7:7e:8f:65:68:35:f0:37:bc:66:04:9a:ab:b0:1c:8f:
         9e:42:71:1c:4f:ac:41:48:2b:9e:92:4a:bf:08:4c:47:15:08:
         20:66:1f:fe:45:f6:de:34:13:3e:31:23:58:20:b1:08:36:f0:
         76:8b:50:35
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXrGKdb2ytF1I7kRl5nR5Gzq4tDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E2RUI3OTEwNDg3NkVGRUNCRjFDRkVGMDdFQ0ZCM0Ew
NDhEMDU5ODAeFw0yNDA2MjcyMDA4MDVaFw0yNTA2MjYyMDEzMDVaMDMxMTAvBgNV
BAMTKDdGMjdENjE5NjAyMjRDMDQ2NzRDMTFDM0IxMUJBOTEzQjAyRDc0MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTr6vukgxEVLoJo/qNVOhwe5ky
9JeMik0AAI3U1/3jDEsItt/+ob/RFAuQpqzMxxQqR88tlJvBIyBF6eREaN0xYIii
ot/UvVz1ZRTkbzxBx6VKF0yz5NjRzNZ95QZnmDZQ+ZKZK3cjhqeqzDeYR0Dgfu3Z
WXjOTiU1nARrnzieXMkKd1bRbqULKpmutcj/FLowYm/5fyUL3lZ0wI/SemqtYlgC
ZDzpjYRpJBA8CTJyog9VwRIKnTvmL/1NO8O12n76HPaBVCSZfbidQPUC+QBxWvW3
hz2pIDnozkrHtsRC1lB28OdFcfN3vF/IhtoCwijeH/ThGqwOJrMKMLT0G8JNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUfyfWGWAiTARnTBHDsRupE7AtdDkwHwYDVR0j
BBgwFoAUym63kQSHbv7L8c/vB+z7OgSNBZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVTcGZqUUZvbUpROGVGaFJRbXJBaFUxQ1M3UGVKc1hNV2tIUlRic1Vv
emQvMS9DQTZFQjc5MTA0ODc2RUZFQ0JGMUNGRUYwN0VDRkIzQTA0OEQwNTk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBNkVCNzkxMDQ4NzZFRkVD
QkYxQ0ZFRjA3RUNGQjNBMDQ4RDA1OTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFU3BmalFGb21KUThlRmhSUW1yQWhVMUNTN1BlSnNYTVdrSFJUYnNVb3pkLzEv
MzEzNDMzMmUzMDJlMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjM1
MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAo8AKDANBgkqhkiG9w0BAQsFAAOCAQEAV5iUcrotiuj2
IUqW08dhUCq7dIBhIn2tOBOiWJ2icUbdX6LdsXYyIbYvJEDByB6XIeFiq2BVgEHu
olOv4x+EsnRYlW4tv93UchHPetqhs5TgBigvDRYgsjXpbcNtu/Pdw59AA72Q9pGG
NEWdiaZXJ6c73ds519ATSbu1oWHJLlUXJ6YvRofeAmE54fsGUvWIPl0tMbLu9FJ3
nFpfjwUebQFgnr3OKnYX9e8/zS8Cl81G6kvZCjBO124qZBQqykAaNHM0LJoQlD2n
fo9laDXwN7xmBJqrsByPnkJxHE+sQUgrnpJKvwhMRxUIIGYf/kX23jQTPjEjWCCx
CDbwdotQNQ==
-----END CERTIFICATE-----
Generated at Tue Jul 2 07:17:55 2024 by rpki-client on console-ams.rpki-client.org