Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa
File:                     3134332e302e3234312e302f32342d3234203d3e20323731323137.roa (raw, json)
Hash identifier:          LJEc4SrCi51ASsU6kmNbgTpdu4BCPFmjMnWp1vC6RE8=
Subject key identifier:   B8:06:50:83:79:D7:E0:ED:CF:D2:54:C4:F5:C7:B1:DA:4C:0A:7A:E0
Certificate issuer:       /CN=B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E
Certificate serial:       0A76FFE4FCBAAA606196E5B7527C94AB27EE07E7
Authority key identifier: B3:C6:BD:CD:65:4E:C4:1A:8A:FF:03:46:1E:9D:B7:CB:0B:15:B8:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa
Signing time:             Thu 04 Apr 2024 15:52:12 +0000
ROA not before:           Thu 04 Apr 2024 15:47:12 +0000
ROA not after:            Thu 03 Apr 2025 15:52:12 +0000
asID:                     271217
IP address blocks:        143.0.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.crl
                          rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:76:ff:e4:fc:ba:aa:60:61:96:e5:b7:52:7c:94:ab:27:ee:07:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E
        Validity
            Not Before: Apr  4 15:47:12 2024 GMT
            Not After : Apr  3 15:52:12 2025 GMT
        Subject: CN=B806508379D7E0EDCFD254C4F5C7B1DA4C0A7AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ab:b1:53:8e:e8:6e:ef:27:f7:9a:7a:97:da:
                    d5:54:97:96:0a:0c:94:72:5a:72:5a:eb:71:f1:81:
                    fa:0c:94:10:88:2e:7b:df:87:9f:e9:31:20:54:d1:
                    fe:fe:81:1c:cf:f3:6d:69:69:5c:31:1c:e1:4d:55:
                    12:32:13:52:cc:fd:bf:9f:00:60:57:19:3d:39:ce:
                    7c:34:b9:57:a2:1e:77:d1:a1:a7:54:4a:38:5c:15:
                    d0:4e:4e:6c:3d:c9:53:44:4e:72:63:13:c9:37:c7:
                    da:d8:c3:1d:df:d8:16:41:5f:9f:99:23:29:3f:ec:
                    39:4a:5d:b4:41:a8:dc:9e:aa:c0:c1:9b:bc:70:1a:
                    8d:84:ba:6e:a4:22:40:98:ce:46:6f:f4:be:e2:75:
                    10:17:9a:89:e5:9d:80:84:0b:89:95:bd:76:ba:2e:
                    47:01:fa:26:e4:d2:50:6e:97:21:cc:15:81:e2:31:
                    75:c3:68:5f:38:ad:1e:8b:54:72:71:3f:80:f8:a3:
                    65:19:00:f0:34:92:a7:fd:a3:03:09:e8:76:c2:c7:
                    f1:29:7b:be:f8:fc:f9:06:53:47:f6:f2:3f:29:c6:
                    6b:6b:88:a8:ee:b5:6b:f4:02:43:d9:0e:bf:74:09:
                    b6:de:f3:b7:44:cb:a1:76:5f:dc:f0:d0:55:58:73:
                    a9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:06:50:83:79:D7:E0:ED:CF:D2:54:C4:F5:C7:B1:DA:4C:0A:7A:E0
            X509v3 Authority Key Identifier:
                keyid:B3:C6:BD:CD:65:4E:C4:1A:8A:FF:03:46:1E:9D:B7:CB:0B:15:B8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C6BDCD654EC41A8AFF03461E9DB7CB0B15B82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/1/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:09:dd:b4:e3:1e:30:17:c2:02:21:f1:1c:9c:6e:03:c4:36:
         f1:b9:f4:f1:95:ab:5e:69:b3:7e:bd:79:5c:77:b5:1f:34:96:
         5a:2f:7e:d0:cf:cc:28:7d:e1:9d:57:f4:a8:44:b9:be:fd:f3:
         2b:15:1e:6e:5f:37:51:21:61:70:bd:5d:57:13:ab:b4:aa:c0:
         ed:c7:87:e2:9c:98:9f:bf:b8:2c:8e:63:ad:6e:b9:27:7d:4f:
         bc:fe:4a:b4:68:fe:f6:76:d0:ec:cb:40:01:8a:f1:8e:cd:93:
         f4:ab:5a:de:21:26:0d:13:a9:30:55:b5:34:56:b8:e8:9e:ab:
         ca:0f:3a:23:9a:dd:68:a8:72:3f:d0:31:0f:e6:24:99:43:af:
         73:66:5d:73:7a:6c:b1:1a:7d:9c:b8:e7:7b:10:bf:7d:e2:d5:
         1b:00:14:54:a9:a6:f4:ee:dd:3a:cf:6f:a3:9c:60:67:99:8f:
         2e:67:72:aa:c4:a7:5d:ba:c7:32:da:5f:93:9d:d8:09:82:19:
         56:3a:81:50:f5:bc:08:91:d8:23:b1:9a:47:12:03:9d:cd:fa:
         81:ec:8d:08:f8:cc:cc:d9:c1:d7:f9:ab:9e:cf:f6:2d:ad:7f:
         ba:64:b1:24:31:50:d3:d8:af:a3:48:cc:1e:98:0d:97:0f:60:
         44:75:7c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org