Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa
File:                     3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa (raw, json)
Hash identifier:          bKC264aHbdBGzr6iJOTF162PQhmXcXliJMai5lHEf2o=
Subject key identifier:   8E:7A:8D:11:7D:58:62:A1:27:AD:FC:40:38:54:48:E8:6B:C4:0F:78
Certificate issuer:       /CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881
Certificate serial:       4130FBB0DD66050500DC65D5BD190FE3DB697B26
Authority key identifier: B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa
Signing time:             Thu 04 Apr 2024 05:51:17 +0000
ROA not before:           Thu 04 Apr 2024 05:46:17 +0000
ROA not after:            Thu 03 Apr 2025 05:51:17 +0000
asID:                     265130
IP address blocks:        143.208.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.crl
                          rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:30:fb:b0:dd:66:05:05:00:dc:65:d5:bd:19:0f:e3:db:69:7b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881
        Validity
            Not Before: Apr  4 05:46:17 2024 GMT
            Not After : Apr  3 05:51:17 2025 GMT
        Subject: CN=8E7A8D117D5862A127ADFC40385448E86BC40F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:f8:00:ed:62:48:cd:59:94:00:c7:8b:97:
                    42:82:7c:2d:17:da:e0:81:be:54:f1:d5:66:00:2d:
                    97:b5:dc:ee:ed:d3:ec:ee:ad:5e:43:93:36:7b:6d:
                    ce:ae:0e:cd:1c:84:8b:e7:ff:1e:6a:76:a7:bb:70:
                    bd:04:bc:47:08:f5:54:7c:d5:24:75:b7:fa:be:41:
                    4a:19:bf:44:03:ff:b5:d6:59:89:f0:ec:a9:dc:6a:
                    a5:96:43:44:ba:42:40:c1:24:ce:a3:21:91:7f:aa:
                    d8:90:29:3a:ff:4c:d8:12:2d:fa:63:b5:84:72:5a:
                    f1:59:d1:6a:ad:d2:68:25:22:79:c6:97:8a:34:44:
                    3f:99:2e:87:bd:da:ef:99:5f:b4:a0:41:97:2b:82:
                    74:a3:e3:5a:ec:e5:6e:c2:87:d7:55:e6:d4:86:65:
                    82:d4:9e:97:e0:c4:36:6a:c8:94:12:ec:28:74:35:
                    53:dc:85:b0:74:c1:96:91:98:c4:6a:0c:8f:a7:84:
                    74:ff:9f:a4:d4:94:97:18:9a:65:52:c9:c0:c1:b3:
                    6a:47:c4:d9:02:ef:5f:36:5a:a2:29:f5:50:0d:fd:
                    1e:8c:ad:5c:8e:8e:be:a1:c0:b8:ba:7f:a1:2c:b4:
                    25:33:a9:aa:37:27:20:92:6e:9e:7f:d4:b6:e9:58:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7A:8D:11:7D:58:62:A1:27:AD:FC:40:38:54:48:E8:6B:C4:0F:78
            X509v3 Authority Key Identifier:
                keyid:B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/3134332e3230382e3135322e302f32322d3234203d3e20323635313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:7e:2e:69:ae:09:dc:2d:21:ce:a7:47:a7:4a:45:54:29:2a:
         62:12:52:f9:41:fe:fe:2c:b4:26:6f:9b:2e:16:ec:5e:2f:74:
         3a:9e:62:1a:19:0e:98:21:95:ce:b0:2a:8d:66:48:ab:71:bd:
         02:7a:48:76:2c:5b:4f:1b:5d:c4:b9:27:22:c0:49:a5:07:fa:
         70:e4:84:e4:a2:b9:02:d0:1d:5f:74:59:0e:02:5b:d3:0c:cd:
         ff:2e:c5:cd:7e:c6:0b:a3:50:c3:51:70:da:cc:6d:f8:9f:11:
         e2:ea:ec:db:0c:26:0a:fd:95:63:4e:4d:cd:3d:32:71:62:99:
         86:d5:31:27:f3:0e:b5:d9:3b:c2:f5:49:9a:29:f5:90:f1:13:
         50:a1:30:ca:3d:33:67:e9:ed:33:35:a6:e6:29:d3:5f:47:ad:
         13:b1:3a:5b:3e:39:d4:76:30:9d:38:87:d0:83:21:d5:7f:51:
         02:b9:d7:b1:ab:31:2a:17:c5:e0:ad:f8:2e:f6:44:7e:a2:6f:
         6e:e4:2c:ca:cf:48:bf:6f:61:59:f5:5c:8b:21:3b:74:f2:8a:
         1e:d1:4d:8f:d3:ba:ce:23:8f:90:15:b9:dd:6f:b9:63:e4:c5:
         a3:0d:8b:a8:56:85:17:7d:34:b3:1b:fb:45:c1:c3:74:97:80:
         fe:48:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:11 2024 by rpki-client on console-ams.rpki-client.org