Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3230312e3134382e3131322e302f32322d3234203d3e20323634353532.roa
File:                     3230312e3134382e3131322e302f32322d3234203d3e20323634353532.roa (raw, json)
Hash identifier:          AraEfsFv/N+wtGJTz+pq4R9SqdAXQ1WU2aOXrPIgl4g=
Subject key identifier:   7E:26:52:12:17:ED:A8:9E:6A:8D:7B:08:21:5F:EC:53:1F:6D:B2:D0
Certificate issuer:       /CN=42E0C742D5DC5A6C41753F73202F41323E27436C
Certificate serial:       75DC218286C89EA4EF2E2D02FD7759E7995114C9
Authority key identifier: 42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3230312e3134382e3131322e302f32322d3234203d3e20323634353532.roa
Signing time:             Thu 04 Apr 2024 03:39:47 +0000
ROA not before:           Thu 04 Apr 2024 03:34:47 +0000
ROA not after:            Thu 03 Apr 2025 03:39:47 +0000
asID:                     264552
IP address blocks:        201.148.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl
                          rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:dc:21:82:86:c8:9e:a4:ef:2e:2d:02:fd:77:59:e7:99:51:14:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E0C742D5DC5A6C41753F73202F41323E27436C
        Validity
            Not Before: Apr  4 03:34:47 2024 GMT
            Not After : Apr  3 03:39:47 2025 GMT
        Subject: CN=7E26521217EDA89E6A8D7B08215FEC531F6DB2D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:42:88:85:30:0b:d0:6b:f1:c8:7b:79:0d:fa:
                    7c:8b:2e:65:5c:02:d0:f3:df:2f:80:27:81:09:8c:
                    47:2f:c7:b0:ab:40:a5:73:5e:a3:62:3d:a1:22:1c:
                    82:dc:89:9d:6a:34:81:2a:6d:f7:19:e2:67:12:2c:
                    41:ac:86:51:03:09:90:2d:e1:a9:2a:7c:2b:68:66:
                    f3:9e:22:4e:e2:d2:4c:0a:1d:05:98:40:1b:e4:7b:
                    0b:c9:bc:e7:29:60:75:a8:c7:d1:05:38:dc:9e:50:
                    d8:75:00:a0:54:d8:ed:8b:a5:f7:e1:e2:2f:bf:50:
                    23:78:60:8a:1e:b8:08:f2:15:f7:a9:2d:c5:75:c2:
                    da:0b:4e:1e:08:e6:dc:fa:5e:28:ff:69:f9:e1:5f:
                    ec:2c:8b:65:5a:51:85:39:2a:77:54:fa:50:57:d0:
                    cf:91:2f:e4:cf:09:ae:f7:2d:ff:3a:dc:b3:bb:1e:
                    b1:7b:19:17:58:96:62:1e:7f:1e:a9:cb:ea:9a:6f:
                    33:6e:0d:09:57:63:e1:e5:13:8a:83:a3:6e:38:57:
                    61:0f:f7:23:01:50:95:b1:e8:88:fa:0a:e5:c5:24:
                    6d:37:a4:31:d8:e7:c2:7d:99:72:27:aa:06:34:9a:
                    97:55:53:4b:f4:50:fa:ec:d4:da:34:97:c4:a7:d6:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:26:52:12:17:ED:A8:9E:6A:8D:7B:08:21:5F:EC:53:1F:6D:B2:D0
            X509v3 Authority Key Identifier:
                keyid:42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/3230312e3134382e3131322e302f32322d3234203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:93:9f:3e:de:d2:4a:fc:d3:a7:24:00:2f:16:fd:87:8e:
         60:c9:bd:53:14:8a:11:8d:f1:97:02:19:0f:53:3a:d4:e8:37:
         cd:9b:ad:c3:7e:8d:07:fe:bd:e9:02:32:5c:3c:b4:3d:f8:65:
         a8:c0:03:df:c7:c6:a0:e4:79:a3:20:fe:bc:b0:e1:22:35:31:
         22:40:4a:26:c7:25:91:de:f9:76:12:21:48:4d:98:46:da:f6:
         0f:03:a3:4f:c3:a4:56:a3:9a:b8:52:62:d2:97:52:e6:2b:a0:
         80:3f:57:ed:ee:d3:22:61:ab:a9:29:2e:47:71:c3:98:79:dc:
         4a:4c:34:f6:1d:23:c1:f9:5a:ab:fe:26:f5:be:65:d8:eb:b9:
         71:d8:40:b5:3c:ec:36:e1:83:7c:69:a8:81:a2:fe:65:2d:64:
         d7:2f:59:41:47:68:be:09:ba:cd:71:7f:be:38:8c:0c:2e:79:
         77:25:48:02:1b:f5:17:ff:da:64:37:b5:9a:76:92:83:0b:50:
         4f:02:e3:03:01:30:29:28:70:58:3a:c2:98:67:17:6c:97:18:
         9c:cf:54:63:51:56:13:26:e0:e2:54:68:68:4a:f5:53:19:d5:
         91:63:9e:55:16:33:42:4e:df:d3:28:68:7e:bb:55:b7:c3:cd:
         05:da:b0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:08 2024 by rpki-client on console-ams.rpki-client.org