Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/3134332e302e3231362e302f32322d3234203d3e20323634303237.roa
File:                     3134332e302e3231362e302f32322d3234203d3e20323634303237.roa (raw, json)
Hash identifier:          uV4LntY/9yOnh0WzIDJVmCDJHQyoIqYT6pOBJEA+sYk=
Subject key identifier:   47:66:98:F7:23:77:31:52:42:DB:60:A8:07:C4:9D:C9:0E:FC:8F:21
Certificate issuer:       /CN=E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58
Certificate serial:       20B41E38027C8888CD7DF331029A6187473D3433
Authority key identifier: E1:A5:5D:C9:56:4F:C6:22:A0:F7:CA:B8:30:52:CF:D6:C9:CA:6C:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/3134332e302e3231362e302f32322d3234203d3e20323634303237.roa
Signing time:             Wed 03 Apr 2024 18:32:16 +0000
ROA not before:           Wed 03 Apr 2024 18:27:16 +0000
ROA not after:            Wed 02 Apr 2025 18:32:16 +0000
asID:                     264027
IP address blocks:        143.0.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.crl
                          rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b4:1e:38:02:7c:88:88:cd:7d:f3:31:02:9a:61:87:47:3d:34:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58
        Validity
            Not Before: Apr  3 18:27:16 2024 GMT
            Not After : Apr  2 18:32:16 2025 GMT
        Subject: CN=3082010A0282010100C489E01E23FEBBD38E72946CD385809A0452010287097F304EB9C86B2D9B81B463408F1C01FB11427F84579C579DD0F238C475353D06CA4A82046B38D15B288474A5E2184561BC27D3D62A997F0B0F8925696E8B4FF13AF39FB43E7A903220A500112904E14F10415A03C7F725F9C7956F4295BE2E9E2A96F65A38C2AB3C2DF29C797DA5B3F98EB39D725DB72226793C2810B6F02EB6FD6EFD651558FEA08AD73D479970EC0295C36E06BB8BFB9651229D097121C770DAB0850A945B4D429F17E43918F8A91F846A89403AF9AAB8C90F82232DC449AEDC1A7E98AD163A54AFDB7AFA7D3A8EA7F30DC14E52B3861526D8A86F6CB4D2AB93D3A726DC977E7A91130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:e0:1e:23:fe:bb:d3:8e:72:94:6c:d3:85:
                    80:9a:04:52:01:02:87:09:7f:30:4e:b9:c8:6b:2d:
                    9b:81:b4:63:40:8f:1c:01:fb:11:42:7f:84:57:9c:
                    57:9d:d0:f2:38:c4:75:35:3d:06:ca:4a:82:04:6b:
                    38:d1:5b:28:84:74:a5:e2:18:45:61:bc:27:d3:d6:
                    2a:99:7f:0b:0f:89:25:69:6e:8b:4f:f1:3a:f3:9f:
                    b4:3e:7a:90:32:20:a5:00:11:29:04:e1:4f:10:41:
                    5a:03:c7:f7:25:f9:c7:95:6f:42:95:be:2e:9e:2a:
                    96:f6:5a:38:c2:ab:3c:2d:f2:9c:79:7d:a5:b3:f9:
                    8e:b3:9d:72:5d:b7:22:26:79:3c:28:10:b6:f0:2e:
                    b6:fd:6e:fd:65:15:58:fe:a0:8a:d7:3d:47:99:70:
                    ec:02:95:c3:6e:06:bb:8b:fb:96:51:22:9d:09:71:
                    21:c7:70:da:b0:85:0a:94:5b:4d:42:9f:17:e4:39:
                    18:f8:a9:1f:84:6a:89:40:3a:f9:aa:b8:c9:0f:82:
                    23:2d:c4:49:ae:dc:1a:7e:98:ad:16:3a:54:af:db:
                    7a:fa:7d:3a:8e:a7:f3:0d:c1:4e:52:b3:86:15:26:
                    d8:a8:6f:6c:b4:d2:ab:93:d3:a7:26:dc:97:7e:7a:
                    91:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:66:98:F7:23:77:31:52:42:DB:60:A8:07:C4:9D:C9:0E:FC:8F:21
            X509v3 Authority Key Identifier:
                keyid:E1:A5:5D:C9:56:4F:C6:22:A0:F7:CA:B8:30:52:CF:D6:C9:CA:6C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A55DC9564FC622A0F7CAB83052CFD6C9CA6C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/1/3134332e302e3231362e302f32322d3234203d3e20323634303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:af:1c:c5:a6:09:06:f3:62:4d:2f:54:b3:da:ef:84:2f:8c:
         04:f4:da:fe:8a:49:ac:7d:a5:96:b1:84:68:0d:03:86:c5:0c:
         f8:72:97:d3:4a:55:7c:ef:2d:75:d6:11:89:fb:01:7f:c5:b4:
         a1:7d:86:14:9b:52:48:53:72:ff:3d:ba:8c:5d:9b:f5:40:86:
         dd:00:2e:19:15:cc:f4:98:92:a6:11:f9:7a:df:66:70:2d:cc:
         44:b8:63:00:68:7f:61:a5:9a:17:14:e1:4e:8e:f9:58:af:d2:
         91:f3:92:3c:a2:34:a9:83:91:08:61:03:ee:58:fd:d5:4c:ab:
         02:b7:f1:3e:07:46:5d:52:a3:23:b7:a1:54:b5:af:24:fa:f1:
         50:4b:cd:91:66:ec:52:7d:19:1e:02:45:ca:ea:d2:8d:65:0f:
         7f:81:1f:00:fa:50:c7:43:2a:1b:04:9f:10:b2:58:b6:43:c3:
         fb:b0:50:5f:79:ff:8e:8e:7a:75:97:be:99:ba:0c:9c:4e:89:
         35:46:ea:bf:5f:36:6f:80:35:80:5f:43:ec:57:7e:ca:ec:f3:
         97:51:33:50:c1:66:1e:42:a3:c6:76:95:43:fa:92:10:0a:e3:
         ca:ba:6d:eb:ab:b1:05:cc:c3:c6:a2:21:bb:24:c9:bc:03:c5:
         58:9b:67:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org