Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/3134332e3230322e3232302e302f32322d3234203d3e203532353434.roa
File:                     3134332e3230322e3232302e302f32322d3234203d3e203532353434.roa (raw, json)
Hash identifier:          SMq7REAfKN3kHPnXDhQf1CgT9d1dAZVh0OyyCLDlV/Q=
Subject key identifier:   19:0F:6B:30:FF:BB:AE:0F:D2:CC:6A:E6:2F:12:23:86:18:63:56:8D
Certificate issuer:       /CN=CB14FE80265F8727559A5009292EBBC26EE55F31
Certificate serial:       4D0F6A5CF1C6094FA874888541F1F3B314374E31
Authority key identifier: CB:14:FE:80:26:5F:87:27:55:9A:50:09:29:2E:BB:C2:6E:E5:5F:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB14FE80265F8727559A5009292EBBC26EE55F31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/3134332e3230322e3232302e302f32322d3234203d3e203532353434.roa
Signing time:             Mon 16 Sep 2024 13:46:14 +0000
ROA not before:           Mon 16 Sep 2024 13:41:14 +0000
ROA not after:            Mon 15 Sep 2025 13:46:14 +0000
asID:                     52544
IP address blocks:        143.202.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/CB14FE80265F8727559A5009292EBBC26EE55F31.crl
                          rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/CB14FE80265F8727559A5009292EBBC26EE55F31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB14FE80265F8727559A5009292EBBC26EE55F31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0f:6a:5c:f1:c6:09:4f:a8:74:88:85:41:f1:f3:b3:14:37:4e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB14FE80265F8727559A5009292EBBC26EE55F31
        Validity
            Not Before: Sep 16 13:41:14 2024 GMT
            Not After : Sep 15 13:46:14 2025 GMT
        Subject: CN=190F6B30FFBBAE0FD2CC6AE62F1223861863568D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:eb:3b:08:1d:11:a7:99:3e:6d:f7:22:12:
                    cb:9f:63:8f:d6:0b:51:c5:14:64:be:ff:b8:1c:ee:
                    b5:0a:b5:2e:b2:3e:9e:20:f5:3e:ab:a8:18:33:87:
                    05:59:36:29:b2:a4:ba:10:dc:3e:dd:ac:c8:bc:90:
                    74:17:12:0f:a3:bf:85:12:f3:d4:c2:68:dd:83:ba:
                    1b:40:dd:15:d8:44:32:86:57:0b:ca:d1:59:e4:18:
                    58:09:8f:92:7e:e6:31:30:cf:8e:f5:f2:90:c0:eb:
                    4e:35:c7:2e:8c:eb:f8:cb:1a:71:cb:79:ed:57:3c:
                    0f:8f:2d:1a:c6:fa:86:d7:94:19:06:58:e2:83:e5:
                    5b:28:af:50:74:4c:95:a6:ae:53:a4:85:c3:6a:28:
                    fb:41:d5:c9:e6:a6:3c:06:79:95:1f:d1:8d:0f:6d:
                    b1:b3:4e:57:8c:89:9f:b0:c6:c7:44:e4:15:e0:ee:
                    95:4b:37:44:f2:47:6b:99:35:de:c1:48:e5:dc:64:
                    7c:24:78:8e:c8:b5:7f:dc:a6:1d:37:fc:aa:a1:0b:
                    84:91:af:d0:09:77:5e:9f:a8:cf:f7:09:fd:9a:84:
                    74:0b:b7:0e:ec:a9:20:b0:85:3b:9c:da:71:b3:7b:
                    bc:45:31:2d:ce:32:c1:c7:1b:45:dd:85:25:ee:c6:
                    7c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0F:6B:30:FF:BB:AE:0F:D2:CC:6A:E6:2F:12:23:86:18:63:56:8D
            X509v3 Authority Key Identifier:
                keyid:CB:14:FE:80:26:5F:87:27:55:9A:50:09:29:2E:BB:C2:6E:E5:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/CB14FE80265F8727559A5009292EBBC26EE55F31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB14FE80265F8727559A5009292EBBC26EE55F31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/3134332e3230322e3232302e302f32322d3234203d3e203532353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:20:1b:0b:8a:4d:f6:f2:e8:3a:b4:ff:71:1e:f1:bc:56:56:
         9c:7f:0d:56:d7:8b:75:a4:1c:4c:77:01:3b:a4:6e:ad:c7:57:
         a6:1e:ad:13:89:f4:0d:69:33:ff:f1:bf:ca:2a:1d:1a:8e:52:
         4c:25:a9:96:63:0f:41:08:f2:99:54:ed:0d:7b:58:b9:01:89:
         6e:4f:58:5c:16:07:0f:5c:57:9c:50:2b:4c:81:9f:36:d5:af:
         28:d5:c1:ce:1a:df:df:c7:52:24:d0:84:c4:2c:28:3b:1f:f4:
         ad:07:93:5c:89:9b:0c:64:3b:5b:a1:c0:f4:de:ed:87:30:39:
         3d:eb:88:f8:42:dc:d6:85:39:96:60:a4:1c:e0:31:19:53:20:
         16:97:d7:79:af:30:0d:3d:76:21:73:55:6f:27:3b:ce:ab:94:
         27:f1:56:4f:7a:21:a1:13:8a:d8:a6:4a:31:77:36:a3:31:c0:
         d0:30:2b:93:8a:73:36:67:cd:a6:fd:54:d4:59:99:b4:45:51:
         a3:da:f8:46:0e:b3:a1:a9:3b:7b:a1:24:a3:cd:ba:0f:a9:fb:
         b3:e6:b3:0b:02:9b:65:3e:7e:fa:a8:6d:f5:93:c6:95:5b:38:
         41:9e:c2:1e:af:2a:5f:ab:dc:44:6a:d7:85:c2:db:c8:75:dc:
         32:75:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 07:06:32 2024 by rpki-client on console-fra.rpki-client.org