Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3134332e3230322e35362e302f32322d3332203d3e20323635343332.roa
File:                     3134332e3230322e35362e302f32322d3332203d3e20323635343332.roa (raw, json)
Hash identifier:          E9yBng0UGcQj9e6cDhb2/kEztKV66APGstLpE9tMu70=
Subject key identifier:   E8:45:DA:12:BC:53:A6:78:9A:E9:75:78:4C:CB:EF:83:72:AE:5C:7F
Certificate issuer:       /CN=5E14615AF9BB8C45FA824EF311E6AE526A7C5B32
Certificate serial:       0D92BDB76193C4D7C544CE1E057EA3EF27A9664E
Authority key identifier: 5E:14:61:5A:F9:BB:8C:45:FA:82:4E:F3:11:E6:AE:52:6A:7C:5B:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3134332e3230322e35362e302f32322d3332203d3e20323635343332.roa
Signing time:             Tue 23 Jul 2024 19:02:22 +0000
ROA not before:           Tue 23 Jul 2024 18:57:22 +0000
ROA not after:            Tue 22 Jul 2025 19:02:22 +0000
asID:                     265432
IP address blocks:        143.202.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.crl
                          rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:92:bd:b7:61:93:c4:d7:c5:44:ce:1e:05:7e:a3:ef:27:a9:66:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E14615AF9BB8C45FA824EF311E6AE526A7C5B32
        Validity
            Not Before: Jul 23 18:57:22 2024 GMT
            Not After : Jul 22 19:02:22 2025 GMT
        Subject: CN=E845DA12BC53A6789AE975784CCBEF8372AE5C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:a5:90:a9:12:84:09:d3:22:84:6a:ee:16:
                    99:2b:bb:d0:48:47:df:d8:6c:44:87:d5:10:b5:1e:
                    5c:29:0f:48:26:35:5b:dc:93:da:97:e6:de:27:a0:
                    6d:bd:dd:54:8a:5b:48:67:5f:58:3f:3c:cb:46:f8:
                    db:f8:28:de:78:4e:0f:39:65:ea:15:97:02:af:35:
                    a4:94:10:01:98:02:04:42:ea:fb:60:99:fc:c0:c3:
                    dc:3a:d2:d9:49:20:d6:e9:ee:c9:2c:5e:78:ae:84:
                    b6:27:95:2f:c3:b0:7b:52:0b:22:42:18:61:e7:93:
                    93:b2:87:2a:47:8d:99:33:a9:76:af:a6:dc:62:a5:
                    31:24:30:f1:42:10:38:e9:0d:4b:9d:a4:06:95:f5:
                    41:53:1b:2b:7c:42:00:7f:fd:c0:32:1b:62:b8:cf:
                    1c:3a:ac:16:e3:e4:04:f2:3f:7d:1c:c1:f0:77:52:
                    8a:42:27:b0:e4:3c:3d:f5:d7:22:f4:00:6e:db:2a:
                    ea:eb:7e:48:b1:71:b4:fc:81:a1:27:eb:97:2a:49:
                    54:69:69:01:91:44:6a:7e:75:0a:51:85:b5:ed:ae:
                    a6:73:8c:d3:85:4c:5d:11:59:22:08:9c:79:0f:dd:
                    67:ce:b9:0f:d3:18:82:f7:3a:b8:51:86:0e:0c:24:
                    39:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:45:DA:12:BC:53:A6:78:9A:E9:75:78:4C:CB:EF:83:72:AE:5C:7F
            X509v3 Authority Key Identifier:
                keyid:5E:14:61:5A:F9:BB:8C:45:FA:82:4E:F3:11:E6:AE:52:6A:7C:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E14615AF9BB8C45FA824EF311E6AE526A7C5B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uJYCp1ikFMksUyfqFo4koDVaVjSt7sQpu5XAW7WYKRC/0/3134332e3230322e35362e302f32322d3332203d3e20323635343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:b8:ce:8d:47:14:55:76:27:13:07:d8:58:ab:66:32:fe:6e:
         88:66:aa:a2:b7:65:c9:bb:be:b6:96:66:a3:7e:ec:c6:2d:81:
         e2:61:23:ef:cf:3e:cb:3f:ee:3a:0e:6e:0c:3e:7b:bd:b1:a6:
         cc:8c:9d:37:3c:86:79:bb:08:dc:91:db:f7:4e:4e:a4:b8:c3:
         dd:69:ff:5c:43:e6:19:95:b1:01:f2:aa:ee:b6:b9:57:b0:00:
         bc:9f:57:51:9b:d8:02:0b:e9:ee:9f:07:dc:2a:d9:78:21:2a:
         0f:e6:44:d6:f9:6a:5b:5f:b0:e2:23:17:ed:a8:ec:66:63:84:
         a3:68:a0:0f:da:66:d6:91:51:7f:1e:b2:f5:9e:4f:20:b0:75:
         83:0a:54:d4:78:9f:52:7b:a9:9f:a8:28:d8:08:04:bb:c1:00:
         96:87:62:35:70:5f:66:0a:ed:4a:1e:3d:c3:13:73:12:31:9c:
         e5:b0:fb:a9:28:11:47:43:e2:5b:d7:d0:18:73:51:24:1f:3d:
         b5:94:c8:a0:d7:6b:ed:82:1d:25:ff:fa:43:93:e0:4a:4a:83:
         db:10:bd:55:e1:bf:02:d2:f2:cd:de:90:12:43:20:62:74:42:
         5a:8a:c8:cd:95:21:e6:85:cd:4e:e7:40:67:fc:05:5e:d2:71:
         e9:95:67:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:48 2024 by rpki-client on console-ams.rpki-client.org