Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa
File:                     3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa (raw, json)
Hash identifier:          PKdLitCIZ9S12UL7KzcVseLx3ACrvvJC5hEFYwQ9SW0=
Subject key identifier:   B9:94:E9:29:79:31:DB:27:95:8E:F6:1A:E2:49:96:20:00:AB:2B:BB
Certificate issuer:       /CN=B3C0ECC43363690F72F949D611EE62DCF8942568
Certificate serial:       77562AC8A773AF10533ACFFF699540E4ABAF4006
Authority key identifier: B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa
Signing time:             Wed 30 Oct 2024 13:54:03 +0000
ROA not before:           Wed 30 Oct 2024 13:49:03 +0000
ROA not after:            Wed 29 Oct 2025 13:54:03 +0000
asID:                     263543
IP address blocks:        143.202.120.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl
                          rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:56:2a:c8:a7:73:af:10:53:3a:cf:ff:69:95:40:e4:ab:af:40:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C0ECC43363690F72F949D611EE62DCF8942568
        Validity
            Not Before: Oct 30 13:49:03 2024 GMT
            Not After : Oct 29 13:54:03 2025 GMT
        Subject: CN=B994E9297931DB27958EF61AE249962000AB2BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:c6:9b:ec:63:04:a0:43:9e:d2:01:75:0f:
                    17:22:be:d4:ed:56:21:6f:84:3d:8d:79:08:78:4e:
                    d5:20:b5:51:ee:50:f3:6d:e7:65:59:d2:f2:7c:d5:
                    bb:2d:5a:fc:fc:35:52:e6:e8:d8:7d:09:0a:43:f0:
                    5c:0e:0f:9c:03:4e:d5:1e:14:cc:93:ba:a8:bc:c7:
                    60:11:7a:dd:bb:b6:20:17:22:39:ce:1d:9a:6c:4f:
                    d5:35:dc:cb:bc:ac:a5:37:07:c7:3c:32:72:f1:f2:
                    84:7e:a4:97:31:1c:47:62:e4:53:49:7a:1a:0e:16:
                    a8:85:5a:69:4c:1c:4b:50:fe:c6:ff:92:bd:15:84:
                    e2:e4:4a:17:b8:6f:1e:94:8a:73:2a:1a:cb:91:3c:
                    01:51:4e:0a:97:e3:22:b6:17:76:2f:e2:9b:bf:7a:
                    ea:c4:66:4a:95:b8:a0:48:e2:e4:0c:11:28:3c:de:
                    9a:f7:2b:6e:64:84:16:9e:0b:d9:4c:27:43:1a:81:
                    83:8b:bc:40:b2:bc:be:ea:a9:3a:d9:9d:3c:09:c4:
                    1d:89:63:0d:9b:89:46:d1:39:5e:44:84:d3:e1:b2:
                    60:f4:a5:37:a8:15:99:df:5a:51:55:f3:dd:f1:f8:
                    a6:dc:76:c5:00:a3:bb:9e:4d:40:55:99:d7:e1:2c:
                    2f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:94:E9:29:79:31:DB:27:95:8E:F6:1A:E2:49:96:20:00:AB:2B:BB
            X509v3 Authority Key Identifier:
                keyid:B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:ce:e6:39:cf:17:c4:43:2b:9d:8f:9d:91:0c:fc:78:b9:fe:
         90:d9:5c:6e:11:6f:8d:24:06:5c:a4:0b:4e:47:43:71:d2:7d:
         7b:98:77:99:b2:e8:98:2c:87:44:27:64:71:fb:84:e3:c1:9c:
         dd:f1:a3:67:d4:37:12:6e:59:6a:14:e8:0d:52:ac:bd:85:88:
         4c:44:02:f4:94:2a:8c:4d:77:11:f8:36:4b:f0:cb:89:58:93:
         cb:e6:65:d3:4b:87:5a:71:19:8c:46:2d:3f:e7:cc:e7:a3:cd:
         a5:22:05:c3:a1:aa:ca:1a:c2:c1:bf:16:1f:b5:21:b2:99:c8:
         32:41:a7:55:fb:88:39:77:01:4b:dc:d4:6e:58:39:db:9a:3f:
         d4:d0:13:cc:b4:bd:64:8c:1c:9c:a6:39:9a:9a:ce:9b:05:00:
         8a:a3:d8:58:52:24:21:d6:49:f6:1e:63:20:c1:22:bf:9e:69:
         52:64:b0:1d:46:e9:62:9b:43:38:f0:47:57:1e:02:f4:41:04:
         ff:65:b4:40:1c:dc:f6:ac:05:27:4e:51:da:df:8a:99:18:4f:
         d3:67:d8:13:5a:4c:7e:7f:b9:12:5e:32:df:f6:bb:69:e6:b6:
         76:44:74:b0:a0:57:b7:82:55:8e:61:a6:31:96:d1:55:d3:1d:
         e3:e7:20:87
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUd1YqyKdzrxBTOs//aZVA5KuvQAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDMEVDQzQzMzYzNjkwRjcyRjk0OUQ2MTFFRTYyRENG
ODk0MjU2ODAeFw0yNDEwMzAxMzQ5MDNaFw0yNTEwMjkxMzU0MDNaMDMxMTAvBgNV
BAMTKEI5OTRFOTI5NzkzMURCMjc5NThFRjYxQUUyNDk5NjIwMDBBQjJCQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNMab7GMEoEOe0gF1DxcivtTt
ViFvhD2NeQh4TtUgtVHuUPNt52VZ0vJ81bstWvz8NVLm6Nh9CQpD8FwOD5wDTtUe
FMyTuqi8x2ARet27tiAXIjnOHZpsT9U13Mu8rKU3B8c8MnLx8oR+pJcxHEdi5FNJ
ehoOFqiFWmlMHEtQ/sb/kr0VhOLkShe4bx6UinMqGsuRPAFRTgqX4yK2F3Yv4pu/
eurEZkqVuKBI4uQMESg83pr3K25khBaeC9lMJ0MagYOLvECyvL7qqTrZnTwJxB2J
Yw2biUbROV5EhNPhsmD0pTeoFZnfWlFV893x+KbcdsUAo7ueTUBVmdfhLC+1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUuZTpKXkx2yeVjvYa4kmWIACrK7swHwYDVR0j
BBgwFoAUs8DsxDNjaQ9y+UnWEe5i3PiUJWgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0pjVXNhRUZrenR5TnF1YUVUbnQ2a3k0TnNGVGloZ0w1NTM5cVZjR3Jt
V3kvMC9CM0MwRUNDNDMzNjM2OTBGNzJGOTQ5RDYxMUVFNjJEQ0Y4OTQyNTY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzBFQ0M0MzM2MzY5MEY3
MkY5NDlENjExRUU2MkRDRjg5NDI1NjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKY1VzYUVGa3p0eU5xdWFFVG50Nmt5NE5zRlRpaGdMNTUzOXFWY0dybVd5LzAv
MzEzNDMzMmUzMjMwMzIyZTMxMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/KeDANBgkqhkiG9w0BAQsFAAOCAQEAWc7m
Oc8XxEMrnY+dkQz8eLn+kNlcbhFvjSQGXKQLTkdDcdJ9e5h3mbLomCyHRCdkcfuE
48Gc3fGjZ9Q3Em5ZahToDVKsvYWITEQC9JQqjE13Efg2S/DLiViTy+Zl00uHWnEZ
jEYtP+fM56PNpSIFw6GqyhrCwb8WH7UhspnIMkGnVfuIOXcBS9zUblg525o/1NAT
zLS9ZIwcnKY5mprOmwUAiqPYWFIkIdZJ9h5jIMEiv55pUmSwHUbpYptDOPBHVx4C
9EEE/2W0QBzc9qwFJ05R2t+KmRhP02fYE1pMfn+5El4y3/a7aea2dkR0sKBXt4JV
jmGmMZbRVdMd4+cghw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:18 2024 by rpki-client on console-fra.rpki-client.org