Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3134332e302e32342e302f32322d3234203d3e20323634303735.roa
File:                     3134332e302e32342e302f32322d3234203d3e20323634303735.roa (raw, json)
Hash identifier:          uaTbDMk2w9OvuCf/RDM4f7J8dRiaKe/cXYXcR80KrUE=
Subject key identifier:   19:55:23:10:8C:75:80:AB:1D:97:CE:0A:2B:9A:F1:54:06:B1:2E:AD
Certificate issuer:       /CN=3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28
Certificate serial:       324D59C9F782BF2E2B858BD1E7774C1E9EA15150
Authority key identifier: 3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3134332e302e32342e302f32322d3234203d3e20323634303735.roa
Signing time:             Thu 04 Apr 2024 08:59:26 +0000
ROA not before:           Thu 04 Apr 2024 08:54:26 +0000
ROA not after:            Thu 03 Apr 2025 08:59:26 +0000
asID:                     264075
IP address blocks:        143.0.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.crl
                          rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4d:59:c9:f7:82:bf:2e:2b:85:8b:d1:e7:77:4c:1e:9e:a1:51:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28
        Validity
            Not Before: Apr  4 08:54:26 2024 GMT
            Not After : Apr  3 08:59:26 2025 GMT
        Subject: CN=195523108C7580AB1D97CE0A2B9AF15406B12EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ff:7d:67:6b:f9:75:67:49:08:60:98:a8:89:
                    98:65:d3:ec:c1:6b:62:c9:df:a0:14:32:ca:86:71:
                    02:5e:42:4a:c6:3e:a5:6f:71:9e:89:ce:6e:42:d5:
                    9e:0b:3a:90:6a:d7:77:22:06:2d:65:ad:2e:e6:fe:
                    05:11:17:98:d9:e0:da:18:45:71:f2:af:8b:fe:66:
                    f6:8c:01:77:4b:0e:f2:c3:0a:8f:be:21:c8:cd:0a:
                    0b:24:0b:02:38:cc:58:f0:5c:ad:62:47:c3:cc:b6:
                    59:b8:12:b7:84:d4:6f:af:01:ef:5a:2f:fd:3f:64:
                    61:46:33:d9:f4:d2:b2:4f:b3:58:a9:75:b3:82:b0:
                    c2:bc:31:c1:3a:25:f1:4b:16:78:22:e4:2e:cb:f7:
                    57:46:5a:7a:13:9d:fc:ef:55:eb:1d:66:05:38:ff:
                    7c:98:57:e3:c9:62:71:72:c0:40:76:b8:a5:84:96:
                    18:ca:e2:85:99:86:24:4e:d5:3e:ca:61:e0:40:c0:
                    70:f4:60:2b:b8:bf:f9:f3:38:07:1e:23:b8:47:a8:
                    82:01:36:d2:bc:27:a7:c8:8c:00:06:e3:eb:d0:a9:
                    ed:50:d2:24:0c:56:93:90:b7:79:3a:d4:02:55:71:
                    55:b4:8b:b6:dd:16:96:db:d8:d5:40:8c:a5:ce:a5:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:55:23:10:8C:75:80:AB:1D:97:CE:0A:2B:9A:F1:54:06:B1:2E:AD
            X509v3 Authority Key Identifier:
                keyid:3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3134332e302e32342e302f32322d3234203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:be:ce:8f:ac:de:cf:02:08:b8:97:cd:1e:5e:fa:29:13:03:
         f7:e9:c8:69:e0:bd:05:e3:1e:21:6b:f3:ae:24:cb:b7:da:11:
         08:5e:7c:60:38:ad:c6:9a:67:5d:03:2b:3a:8c:f9:e0:71:ff:
         e2:dc:50:0b:a7:bb:2c:65:70:e9:a6:22:26:c4:b0:1a:b8:22:
         c2:61:4f:09:a1:d6:cb:59:6f:92:28:2c:3d:a8:cc:24:63:4c:
         87:b0:b4:2b:2a:a7:44:fe:cf:d6:60:cc:b7:a0:6a:3d:3b:f5:
         2c:85:4e:f2:77:9f:0b:14:8d:4b:39:88:34:a0:5d:96:c2:56:
         d8:d9:41:07:54:4d:c2:18:a1:15:41:c4:38:f3:3c:7f:d4:0c:
         b9:9b:b6:e4:47:3d:f4:c6:06:4f:64:05:80:d8:2c:97:50:9e:
         77:ed:a1:a2:5e:bd:7e:93:f5:fc:b1:ae:cb:8f:84:cb:7f:d9:
         6a:67:25:0c:01:43:d4:c8:ed:57:5b:ec:8c:ab:a5:ac:86:44:
         bd:02:83:08:36:6b:7d:96:56:a3:32:02:03:e8:48:d7:04:54:
         1c:78:11:b3:e5:58:b7:61:98:c1:27:0e:63:b0:ad:8b:bc:69:
         78:4a:a7:ea:f3:b2:a8:f9:bf:72:ba:15:d0:01:ca:9b:64:82:
         e0:0e:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:36 2024 by rpki-client on console-ams.rpki-client.org