Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa
File:                     3134332e3230322e36382e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier:          LfzxeMv0b34BcEmueqFy9yOkZPw9VIt5DPkDXtlZN2M=
Subject key identifier:   64:DE:A1:09:A6:2B:4D:CE:0C:BB:7F:5F:CE:B4:A2:2C:8F:CC:11:C5
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       0E06F97FB517A5231D0BE10601EFE8C08DB22751
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa
Signing time:             Mon 25 Nov 2024 17:04:24 +0000
ROA not before:           Mon 25 Nov 2024 16:59:24 +0000
ROA not after:            Mon 24 Nov 2025 17:04:24 +0000
asID:                     28667
IP address blocks:        143.202.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:06:f9:7f:b5:17:a5:23:1d:0b:e1:06:01:ef:e8:c0:8d:b2:27:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:24 2024 GMT
            Not After : Nov 24 17:04:24 2025 GMT
        Subject: CN=64DEA109A62B4DCE0CBB7F5FCEB4A22C8FCC11C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:99:24:53:4f:da:54:c2:81:f9:09:49:3d:
                    e7:27:43:54:bc:7a:36:d7:ef:34:49:fe:5d:6d:f6:
                    4f:4d:87:dc:24:15:1a:7f:a0:10:a7:37:79:5d:32:
                    a7:8b:14:4f:c2:73:66:de:9a:53:e9:3c:2e:28:d6:
                    e5:e3:f9:16:53:05:6b:e7:02:b2:4c:d7:3b:71:5f:
                    cb:78:27:80:03:14:cf:af:c1:da:db:13:a3:21:e8:
                    14:8b:6e:a2:1f:1e:43:de:1b:00:72:90:53:3e:2c:
                    81:91:20:78:54:40:3d:cf:ea:06:ea:c2:62:2e:4d:
                    8f:67:a8:ad:19:83:fb:8b:30:6d:2d:5e:49:19:7e:
                    bf:85:fa:c9:26:8d:00:8d:13:35:b0:3b:99:ad:a9:
                    d0:f8:7b:2d:fe:77:67:08:f9:9d:51:fe:8c:3d:0c:
                    c2:67:33:75:c7:87:0f:31:db:d0:89:33:39:15:52:
                    aa:ae:2a:19:a6:36:6a:1e:d2:d6:02:87:af:39:ec:
                    4d:44:24:02:6a:16:b8:9b:1b:30:7c:97:8c:62:6b:
                    f5:ca:78:d0:9b:28:80:77:8d:0b:ab:c5:f5:b9:12:
                    99:89:6b:30:c1:ee:15:d8:78:15:29:9b:14:48:db:
                    13:7c:8f:cc:f0:5a:79:62:a6:f7:f1:5b:69:9b:9f:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DE:A1:09:A6:2B:4D:CE:0C:BB:7F:5F:CE:B4:A2:2C:8F:CC:11:C5
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:15:b9:96:e1:cb:05:2f:84:f8:90:8f:b0:8f:0c:cc:44:
         26:44:69:75:b6:13:4f:09:b6:c9:b2:39:24:ef:7f:8b:04:06:
         85:79:73:9f:90:19:58:c1:45:50:07:ca:89:d0:a2:a2:12:5a:
         7f:45:e2:a5:f3:4b:56:b1:79:0f:c8:81:8a:fa:ca:05:23:4d:
         49:dd:7f:ea:e9:bd:76:bc:94:f8:41:e6:d9:64:cd:9f:50:77:
         09:26:29:41:57:31:14:4f:c0:30:23:94:f3:c8:e6:7f:ab:7c:
         92:c8:fa:cd:e3:62:3b:bf:1a:ea:c0:95:5c:14:c4:b7:4d:7d:
         19:7c:3a:d8:6a:5b:0d:72:f5:1b:80:fc:1c:cd:39:27:68:67:
         a2:29:7d:36:9b:e9:0f:34:f0:6e:63:f2:4a:d7:f7:53:e8:25:
         b4:7b:eb:72:43:ae:93:d4:0a:8d:d4:c5:59:7b:77:60:da:22:
         12:3e:3c:42:0f:fe:2e:0c:d5:c6:b0:d5:cd:29:1a:01:86:68:
         c4:f1:e3:03:41:f0:d5:f1:d7:e2:58:c4:0e:b4:17:67:54:31:
         7a:2d:5f:03:fb:40:cf:bc:37:8e:9c:75:bb:72:2c:7f:df:fe:
         40:49:63:35:40:65:ab:82:8c:50:a4:a4:e1:3f:dd:09:55:61:
         14:69:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org