Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa
File:                     3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa (raw, json)
Hash identifier:          QdtfLPQBhQoyeKhiSXQOCpfdT9Wr2NEhFFViNdomfrk=
Subject key identifier:   AB:2C:B4:14:69:9F:71:AC:CE:1A:4E:C0:4D:3E:68:73:A1:A3:CA:CD
Certificate issuer:       /CN=E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1
Certificate serial:       2FFC97E82A270DC2A7DEBDC64D18E1F7E97069CB
Authority key identifier: E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa
Signing time:             Mon 12 Aug 2024 16:58:35 +0000
ROA not before:           Mon 12 Aug 2024 16:53:35 +0000
ROA not after:            Mon 11 Aug 2025 16:58:35 +0000
asID:                     263623
IP address blocks:        143.255.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.crl
                          rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Mar 2025 01:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fc:97:e8:2a:27:0d:c2:a7:de:bd:c6:4d:18:e1:f7:e9:70:69:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1
        Validity
            Not Before: Aug 12 16:53:35 2024 GMT
            Not After : Aug 11 16:58:35 2025 GMT
        Subject: CN=AB2CB414699F71ACCE1A4EC04D3E6873A1A3CACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:99:ed:34:91:00:4f:46:05:f4:01:be:79:34:
                    19:cc:8f:46:7c:f3:f6:c8:a7:aa:45:6e:e0:c7:3a:
                    bd:ba:3e:1f:79:16:42:bc:e6:f0:34:62:b1:80:44:
                    f9:be:da:2b:e6:47:d9:7c:8d:c7:f8:5c:65:c9:f5:
                    80:b8:9e:32:6b:86:8d:42:72:67:9d:cc:c6:2f:f4:
                    8a:95:66:ae:13:b3:4c:07:e2:6d:1a:bc:f9:24:a3:
                    48:ec:67:6a:32:b3:f9:7f:44:6a:5f:2b:65:d6:b0:
                    dd:7e:6f:eb:5a:9f:d0:f4:4d:e4:fe:77:84:5e:b6:
                    7c:90:5f:cc:da:f2:8e:db:fe:a5:6c:78:e1:5a:98:
                    7a:61:4f:5a:de:46:21:82:47:b1:61:00:72:59:24:
                    23:a8:28:99:20:03:f8:63:7f:c6:20:2a:7f:ff:90:
                    5a:60:a1:3a:b4:48:2c:74:a5:68:e5:97:fe:b5:17:
                    71:6d:16:64:74:32:af:80:7a:d5:85:c6:b8:8f:52:
                    4c:f9:e8:55:6c:fc:81:0a:29:4f:07:be:cd:84:b4:
                    d2:c3:1c:54:e6:07:27:e4:28:4b:87:a7:4b:c9:08:
                    55:2b:d9:b2:a5:f1:00:4a:c1:43:e7:8f:9b:26:21:
                    df:dd:1b:90:f7:8c:e1:c1:72:d3:7e:c4:d7:85:8d:
                    32:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2C:B4:14:69:9F:71:AC:CE:1A:4E:C0:4D:3E:68:73:A1:A3:CA:CD
            X509v3 Authority Key Identifier:
                keyid:E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/3134332e3235352e34342e302f32322d3234203d3e20323633363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:c0:d6:e9:7c:49:ac:f2:f1:e1:a2:69:dc:d4:57:dc:2a:
         65:80:16:69:19:1e:4f:c4:2b:74:e5:7a:f9:4a:f3:09:0b:71:
         3b:a5:d8:ac:9d:ca:e3:08:8d:ff:e9:e1:3f:22:3d:20:11:e2:
         0b:04:2f:b5:0b:ad:25:43:8a:77:31:32:ce:fe:b6:86:86:dd:
         89:27:20:e5:cd:8b:f6:f8:43:60:d5:b0:08:0c:66:ac:50:ee:
         22:36:c1:f3:ba:ec:11:09:77:89:27:cb:62:25:8a:f2:ce:13:
         20:3e:d2:00:98:6b:b9:e9:78:72:de:4b:6d:22:f0:77:db:ce:
         0f:f6:00:61:1c:bd:41:d9:a8:86:5b:68:6e:69:0b:90:66:7c:
         59:48:82:f9:05:a0:f4:e1:42:ee:a6:f0:3c:e9:05:53:4b:1b:
         9b:73:62:c7:c0:b4:88:5f:56:92:df:48:b0:fd:49:a1:de:a2:
         6b:08:33:c0:e2:3d:34:68:03:52:09:f4:61:00:80:84:c4:2e:
         1d:95:cc:8a:d0:cc:d1:3d:57:67:66:19:2b:fc:b9:84:11:36:
         e4:cd:ab:15:f2:aa:c8:ca:f4:04:29:09:92:2c:fe:39:72:b9:
         05:dc:c8:33:2e:a1:2b:c0:9d:1d:d5:14:8f:31:47:3b:0d:65:
         16:74:6c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:13:33 2025 by rpki-client