Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa
File:                     3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa (raw, json)
Hash identifier:          auWwSGnQ9Xs1weoDvAppub/wmkpp0TqyHgqKZVxC4ns=
Subject key identifier:   EA:A4:21:0F:4B:AF:84:7B:F7:BD:9A:E3:13:91:53:A8:CB:C1:1C:80
Certificate issuer:       /CN=9C94842B2928FAED319D3BB427B8BDD7D2B246FF
Certificate serial:       154F53A4A670185C45843E40CCD3D240898A08C1
Authority key identifier: 9C:94:84:2B:29:28:FA:ED:31:9D:3B:B4:27:B8:BD:D7:D2:B2:46:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa
Signing time:             Thu 04 Apr 2024 10:38:39 +0000
ROA not before:           Thu 04 Apr 2024 10:33:39 +0000
ROA not after:            Thu 03 Apr 2025 10:38:39 +0000
asID:                     265143
IP address blocks:        143.255.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.crl
                          rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4f:53:a4:a6:70:18:5c:45:84:3e:40:cc:d3:d2:40:89:8a:08:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C94842B2928FAED319D3BB427B8BDD7D2B246FF
        Validity
            Not Before: Apr  4 10:33:39 2024 GMT
            Not After : Apr  3 10:38:39 2025 GMT
        Subject: CN=EAA4210F4BAF847BF7BD9AE3139153A8CBC11C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:07:ea:9d:30:e1:d6:7d:36:3d:48:cc:e6:
                    c4:64:4e:50:51:5a:d3:5c:8d:27:fc:1e:2f:83:78:
                    28:2a:41:94:c3:22:dc:af:6c:ca:f0:c8:4e:fe:87:
                    dc:25:58:c5:67:4c:b0:e1:c1:b6:3e:fb:8a:45:24:
                    3c:06:5b:8e:db:ee:17:cb:66:f9:65:7d:3d:83:f0:
                    04:37:e1:33:81:17:6a:e5:3c:0d:1a:5c:cd:18:57:
                    35:77:d3:28:9e:10:a6:d1:08:c3:cd:06:21:e4:99:
                    ef:65:28:9e:a3:de:fe:1b:91:9c:9c:2b:d0:55:97:
                    e4:9e:fa:67:8b:23:5a:5d:94:55:fb:e7:5b:70:65:
                    7e:1a:21:07:8d:a5:2b:76:ce:26:5e:39:96:dc:4c:
                    b3:ba:4d:5c:8c:7f:a8:26:49:a8:fa:52:66:04:b3:
                    7f:74:dd:56:c4:0b:c0:7e:f7:1a:f7:74:0a:1d:2a:
                    d1:85:f5:fd:3b:db:2a:fa:7d:4e:c2:09:17:40:3b:
                    a5:41:65:4a:f3:24:34:30:05:dd:58:c9:21:88:0b:
                    5c:86:c9:a0:83:9f:6e:c0:46:87:95:11:3f:0e:95:
                    83:ab:5a:6a:b2:dc:5b:a8:51:b4:7f:d4:f6:ae:79:
                    84:cc:da:37:22:d8:a9:92:a1:91:6e:6a:70:04:86:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A4:21:0F:4B:AF:84:7B:F7:BD:9A:E3:13:91:53:A8:CB:C1:1C:80
            X509v3 Authority Key Identifier:
                keyid:9C:94:84:2B:29:28:FA:ED:31:9D:3B:B4:27:B8:BD:D7:D2:B2:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/3134332e3235352e39322e302f32322d3234203d3e20323635313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:0c:1d:d4:7f:3d:4a:8c:85:20:39:84:2a:cc:b6:c4:5a:1b:
         e3:84:1e:77:74:07:98:8a:d1:4f:92:83:74:13:06:8f:c7:3c:
         e6:35:16:35:5f:25:58:e7:06:78:4c:88:fd:d8:4d:7d:c5:0c:
         5e:9a:4c:b3:00:6c:5f:7e:5f:13:21:6b:53:c0:81:7f:6c:fb:
         81:6c:22:99:67:85:38:8c:ea:cd:44:51:a7:27:02:c2:22:21:
         8d:29:48:95:22:c2:ba:71:38:2d:8e:bd:16:e8:fe:16:24:ab:
         a2:1e:10:c3:be:b6:a2:d3:13:75:90:e8:a6:5b:b0:1d:c5:1d:
         27:fb:6f:d2:c9:c2:21:1c:4f:09:40:41:51:af:2f:1d:24:65:
         e0:41:02:22:90:56:70:f2:54:40:3f:69:b9:c5:7b:40:d8:1c:
         b8:ab:f3:74:c4:fc:ab:17:88:73:43:cb:00:02:6f:27:c3:53:
         ca:59:5f:36:c3:75:b0:71:8a:14:40:7c:b2:5a:e1:63:89:5a:
         3d:a8:d3:b5:bf:88:18:d0:e4:3d:35:53:33:e8:e2:0f:ab:ab:
         b0:9e:02:4a:40:e8:fd:52:7f:84:c7:66:e2:ac:70:ec:41:10:
         38:f1:17:4e:c4:3e:4f:b4:04:68:dc:fd:50:9d:71:b8:52:66:
         c7:5a:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org