Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa
File:                     3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          61GvzTcjnJJbydXszCSWw3A49m/xUrJG9MX4sbkxiR8=
Subject key identifier:   B8:BF:2E:19:F7:B3:18:00:50:87:BF:DA:45:17:F9:36:C2:B6:BE:4E
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       7A40F272E09DA1EA83C4069A21E9064020BC7CB9
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa
Signing time:             Thu 04 Apr 2024 07:31:18 +0000
ROA not before:           Thu 04 Apr 2024 07:26:18 +0000
ROA not after:            Thu 03 Apr 2025 07:31:18 +0000
asID:                     262784
IP address blocks:        143.202.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:40:f2:72:e0:9d:a1:ea:83:c4:06:9a:21:e9:06:40:20:bc:7c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr  4 07:26:18 2024 GMT
            Not After : Apr  3 07:31:18 2025 GMT
        Subject: CN=B8BF2E19F7B318005087BFDA4517F936C2B6BE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:32:73:cd:f7:ef:e4:46:71:c1:d1:85:37:
                    2c:b5:ad:00:67:6d:e4:fa:5d:b3:1e:26:b7:4d:d6:
                    39:1e:0e:25:96:93:3d:1a:91:1e:1f:26:f4:c1:0e:
                    68:91:13:95:1f:8d:52:b8:2c:43:5b:04:cb:8b:6e:
                    31:06:c5:f7:87:d0:28:f3:69:04:9e:ad:dc:90:a3:
                    6b:0e:62:9b:44:22:45:92:44:4e:9f:43:c3:98:92:
                    f1:ef:63:44:0d:da:52:90:4e:96:ef:4c:a0:6d:5b:
                    5d:ed:9e:6f:92:94:68:5e:c4:29:04:0c:dc:6d:b8:
                    33:8e:93:65:64:2f:58:e1:b4:20:1a:76:c7:91:0b:
                    64:51:83:ac:28:f3:04:44:ca:a2:6a:2c:3b:eb:18:
                    e7:02:47:4d:01:97:c7:cb:52:56:67:92:10:0b:95:
                    b9:39:d3:17:3b:de:80:ce:df:00:0f:ae:38:9c:c0:
                    cc:f1:6a:6a:00:fc:dd:d5:1c:bd:13:89:7a:e7:1a:
                    57:2f:0e:c9:f3:8c:c7:06:50:5e:62:d0:1d:4e:e7:
                    8a:00:20:b8:16:9e:d5:0f:0c:8a:91:b5:60:5f:b3:
                    2a:3a:8d:84:03:d9:05:66:93:bb:6d:c3:4d:62:24:
                    20:3e:b4:c1:4f:3f:fa:bc:26:92:86:c2:37:d1:c9:
                    d3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BF:2E:19:F7:B3:18:00:50:87:BF:DA:45:17:F9:36:C2:B6:BE:4E
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e6:92:26:dc:68:b7:50:98:ef:9c:a8:c2:9a:f4:40:2b:69:ce:
         1b:45:d3:6d:f3:c3:61:39:d3:2d:72:1b:2a:27:aa:f0:0d:21:
         85:90:e3:ff:c4:2d:e1:84:2f:af:cb:47:47:32:de:59:8b:cb:
         6d:56:f0:56:8d:5b:73:f3:5b:69:29:d8:44:0a:b2:8e:0c:ac:
         60:4e:45:db:52:96:15:5b:71:52:46:df:3c:b6:fa:a3:18:9d:
         05:af:0b:4a:6c:ce:c2:a1:4a:74:51:7f:0b:88:13:57:5a:77:
         22:77:da:ec:01:5b:6d:05:e0:0d:32:7c:3a:04:c5:78:72:9f:
         17:dc:8b:93:6c:fc:e2:d8:a3:49:53:94:f2:e9:c9:67:6a:f8:
         e3:39:d4:f8:3f:ad:86:ae:07:e4:d1:b2:a2:72:7d:19:4a:0c:
         3a:7d:d4:1b:53:a6:96:71:7e:5b:19:6b:28:34:e3:d6:4f:c6:
         c5:4b:33:27:f5:f9:d9:6d:b5:13:7e:f7:02:35:74:7e:1f:4f:
         fe:a1:45:ad:53:1a:6c:cf:a7:b3:40:13:5b:46:d1:d1:cf:2c:
         19:0e:34:ca:72:cd:5e:e5:0d:34:ae:76:81:e7:47:c7:75:4e:
         e5:34:c4:ca:8e:04:f6:da:7d:59:1a:47:6c:fd:52:3f:db:ac:
         64:3d:81:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:43 2024 by rpki-client on console-fra.rpki-client.org