Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/3134332e3133372e3230382e302f32322d3332203d3e20323634303535.roa
File:                     3134332e3133372e3230382e302f32322d3332203d3e20323634303535.roa (raw, json)
Hash identifier:          fKHEvvS2Li08N/YRkWI9aLvQMqjg0hObJcrzuPtE6iU=
Subject key identifier:   07:B1:4E:69:09:57:25:FD:9F:FB:32:14:7B:18:38:01:C3:A1:BA:AE
Certificate issuer:       /CN=C4718E13E885F1DF2DA1B48E5359594EF87F0F64
Certificate serial:       0640A86E240474D8961CB40CCB9A73AEB8D39523
Authority key identifier: C4:71:8E:13:E8:85:F1:DF:2D:A1:B4:8E:53:59:59:4E:F8:7F:0F:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/3134332e3133372e3230382e302f32322d3332203d3e20323634303535.roa
Signing time:             Fri 11 Oct 2024 22:05:15 +0000
ROA not before:           Fri 11 Oct 2024 22:00:15 +0000
ROA not after:            Fri 10 Oct 2025 22:05:15 +0000
asID:                     264055
IP address blocks:        143.137.208.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.crl
                          rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:40:a8:6e:24:04:74:d8:96:1c:b4:0c:cb:9a:73:ae:b8:d3:95:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4718E13E885F1DF2DA1B48E5359594EF87F0F64
        Validity
            Not Before: Oct 11 22:00:15 2024 GMT
            Not After : Oct 10 22:05:15 2025 GMT
        Subject: CN=07B14E69095725FD9FFB32147B183801C3A1BAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:fe:92:fa:cc:14:f9:38:e9:fa:17:00:e5:
                    89:88:1e:af:46:dc:dc:8a:45:6a:fa:e8:ed:38:2e:
                    ac:75:84:ee:10:84:40:20:bc:a9:e3:a9:08:0a:b0:
                    e5:03:91:61:a0:a7:ad:04:45:62:a7:ef:40:d6:32:
                    61:2d:75:99:32:52:e4:51:f6:38:57:b7:06:d1:57:
                    48:77:35:46:c3:07:23:30:8b:36:57:d3:46:39:66:
                    ce:39:09:f8:3f:30:31:3a:a9:e4:09:99:42:26:0a:
                    cd:ef:63:3d:81:d6:0d:e5:af:21:36:66:bf:4e:1f:
                    ea:22:cd:58:b3:b5:c5:c9:f5:6d:f1:7e:68:7a:e1:
                    6c:f3:ee:c4:f8:fd:ba:f4:9f:e7:ff:3e:b5:c8:68:
                    42:d1:75:7b:8d:b1:38:21:12:f2:a9:d2:8a:d7:4b:
                    ad:cd:90:95:b8:f8:ec:ab:b1:3b:22:d2:d5:19:d2:
                    1a:22:45:95:13:ca:da:a8:d9:ce:c2:1f:e3:d3:67:
                    ff:01:a2:26:d3:fe:42:24:bd:31:71:46:6e:1b:34:
                    d4:68:e5:4e:ca:96:24:6b:b1:11:b8:77:bf:53:a7:
                    fe:b8:c2:76:b2:b7:a8:d2:78:16:2b:4f:7c:8a:27:
                    9f:54:1f:86:fe:d9:e4:b4:81:d6:84:ee:e9:ab:b4:
                    58:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B1:4E:69:09:57:25:FD:9F:FB:32:14:7B:18:38:01:C3:A1:BA:AE
            X509v3 Authority Key Identifier:
                keyid:C4:71:8E:13:E8:85:F1:DF:2D:A1:B4:8E:53:59:59:4E:F8:7F:0F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4718E13E885F1DF2DA1B48E5359594EF87F0F64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XtUQoarKwKfV2kiDipayvzMfxYUvwHbypozdxCL3qh1/0/3134332e3133372e3230382e302f32322d3332203d3e20323634303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:81:b6:67:f6:25:dc:90:2d:77:d8:27:18:49:0b:ca:92:4a:
         d9:85:7a:41:22:80:52:47:21:6d:57:ae:9b:54:6c:da:b0:12:
         ce:06:27:98:76:40:33:e6:74:24:b7:d0:34:b5:d8:d0:d4:a3:
         a6:e7:7f:55:ca:0c:f4:3a:3e:20:ea:e4:8b:73:58:ee:83:06:
         43:87:bc:7f:33:ec:39:da:3d:f3:79:3b:35:d2:de:fa:8c:42:
         11:3b:a6:71:09:9e:fe:13:34:d0:86:be:14:98:91:8f:a2:d8:
         f9:18:00:2f:52:8e:b1:6d:cf:7b:c1:7a:5d:fd:a0:20:44:d9:
         2a:49:77:8a:18:80:a0:a8:f9:34:25:99:f5:b0:13:0a:73:cf:
         d0:a1:58:2e:f6:4b:51:40:1e:20:82:0e:9c:36:5f:85:5d:66:
         d3:f5:93:06:63:62:aa:d3:20:b4:ee:27:b2:fe:56:a6:74:50:
         15:9a:b4:7c:22:27:e6:f6:f1:d9:d8:3c:5b:da:f1:06:a1:25:
         10:7f:46:06:d5:9c:f4:76:f6:ce:bd:66:f0:71:00:6c:88:dd:
         23:d6:d5:ad:36:e5:98:19:2e:e2:57:bd:67:53:a8:9f:44:47:
         8d:f4:14:96:ed:1d:3b:a6:b6:74:63:c3:54:a2:f0:62:3e:51:
         5b:11:fc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:52 2024 by rpki-client on console-fra.rpki-client.org