Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa
File:                     3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa (raw, json)
Hash identifier:          08v3qJE2gcKOrHSuTx0q0Q9WBeibI6d9fN3bNypHkqo=
Subject key identifier:   D9:87:90:2E:06:89:F7:C7:8C:90:0B:97:A2:72:1F:43:EE:98:F4:D2
Certificate issuer:       /CN=A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E
Certificate serial:       30B9EC15939FBAAC67B44893484AD7B2FE534014
Authority key identifier: A9:C0:D4:0A:28:14:EB:36:F3:DD:48:E1:6F:27:C5:CF:F4:1E:FA:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa
Signing time:             Mon 02 Sep 2024 14:53:49 +0000
ROA not before:           Mon 02 Sep 2024 14:48:49 +0000
ROA not after:            Mon 01 Sep 2025 14:53:49 +0000
asID:                     263604
IP address blocks:        143.202.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.crl
                          rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b9:ec:15:93:9f:ba:ac:67:b4:48:93:48:4a:d7:b2:fe:53:40:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E
        Validity
            Not Before: Sep  2 14:48:49 2024 GMT
            Not After : Sep  1 14:53:49 2025 GMT
        Subject: CN=D987902E0689F7C78C900B97A2721F43EE98F4D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:13:c7:f0:51:f9:59:09:1b:2d:e2:2a:49:
                    45:be:26:1b:23:ba:9f:53:b2:3f:75:c0:92:5a:7e:
                    f9:bc:25:d8:43:1a:b4:db:44:41:a6:a9:f8:e3:7c:
                    00:0e:42:e8:fc:2d:76:05:5b:9e:78:4d:4e:88:ee:
                    dd:bb:6b:7c:4d:89:93:b8:02:08:45:b9:22:09:ae:
                    1f:6d:80:52:2a:b3:b2:5e:9f:c0:6e:e8:b3:b2:7a:
                    f6:17:c8:83:6c:1f:5a:99:79:52:83:4a:94:ac:0a:
                    3d:a1:33:39:72:5f:b3:bc:5d:c7:b8:5b:72:dc:e3:
                    e5:87:1e:c8:bc:59:ca:ea:26:d8:2f:6d:75:16:e5:
                    f7:94:5f:26:95:f4:57:d6:d1:72:98:f9:65:71:05:
                    31:15:0b:ae:c5:55:6e:71:d4:eb:a1:1a:96:45:37:
                    d0:54:8d:f9:47:b1:1b:75:4d:49:a2:c7:16:36:c5:
                    a8:36:5f:58:6b:cc:a5:3f:d3:b2:ce:59:2e:e4:7d:
                    4b:87:89:ee:04:75:4f:83:59:c0:a5:1f:65:64:dc:
                    a6:af:95:92:0b:20:37:38:b7:8f:fb:f7:1f:67:21:
                    68:74:c6:87:cb:5f:37:39:ae:f2:c6:b0:28:65:e5:
                    62:e3:cf:08:39:8c:6d:dc:2b:b8:62:e9:40:25:ed:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:87:90:2E:06:89:F7:C7:8C:90:0B:97:A2:72:1F:43:EE:98:F4:D2
            X509v3 Authority Key Identifier:
                keyid:A9:C0:D4:0A:28:14:EB:36:F3:DD:48:E1:6F:27:C5:CF:F4:1E:FA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9C0D40A2814EB36F3DD48E16F27C5CFF41EFA9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/1/3134332e3230322e3131342e302f32342d3234203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f9:7a:88:3b:c0:0f:29:a7:94:b0:69:05:b0:f8:c2:67:9c:
         e9:a6:35:31:74:54:82:fc:4e:be:21:84:e5:09:3c:ea:98:3f:
         2d:bd:95:5f:94:9b:89:c4:c8:2b:ba:6d:0e:24:a1:00:21:c7:
         e2:30:89:2f:de:cd:69:1c:37:33:18:c4:10:d7:d2:a5:a7:28:
         57:ba:b1:89:ce:cf:9d:62:2a:3f:64:63:8a:1d:2e:4d:1d:f9:
         b4:79:50:d8:79:34:7d:25:33:20:a9:1b:c7:e9:ab:de:29:91:
         2f:22:bc:44:43:bb:62:2c:39:5c:65:47:70:b1:06:7c:32:6c:
         04:3a:79:23:90:3c:99:f1:ea:65:54:4b:fc:bb:3b:27:df:85:
         d9:89:e5:9a:06:06:a5:99:73:5d:e6:4d:c8:63:a7:fe:ed:0f:
         be:41:47:d0:54:90:bb:75:85:52:e1:0b:12:e8:24:9c:99:7b:
         8f:4a:c7:e9:de:30:64:42:6d:89:93:c7:79:4d:e0:47:ce:81:
         f7:8d:b2:59:eb:20:7d:aa:f9:88:59:ec:7c:0d:58:c2:c6:79:
         39:d1:74:fe:00:11:75:04:5c:11:6d:8d:16:3a:1f:10:80:e8:
         7a:f1:f9:12:ab:71:8b:86:28:0a:7f:c2:21:9c:69:3a:b3:4d:
         51:39:1b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:34 2024 by rpki-client on console-fra.rpki-client.org