Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232302e302f32322d3232203d3e20323634303437.roa
File:                     3134332e3133372e3232302e302f32322d3232203d3e20323634303437.roa (raw, json)
Hash identifier:          lWcLEb/dyXQPbnL/qU2CHs0vLO7m/gWe4i5PnQbcSJg=
Subject key identifier:   9F:B7:C8:5D:41:53:3C:C8:A0:1B:FB:36:0D:E8:C0:5B:99:54:58:C4
Certificate issuer:       /CN=132DCDB6019382C752C71B103893EAC01BCC5512
Certificate serial:       0F21808D366C8A7A7D178424B57182EC91CF5E25
Authority key identifier: 13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232302e302f32322d3232203d3e20323634303437.roa
Signing time:             Tue 12 Nov 2024 18:14:18 +0000
ROA not before:           Tue 12 Nov 2024 18:09:18 +0000
ROA not after:            Tue 11 Nov 2025 18:14:18 +0000
asID:                     264047
IP address blocks:        143.137.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.crl
                          rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 08:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:21:80:8d:36:6c:8a:7a:7d:17:84:24:b5:71:82:ec:91:cf:5e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132DCDB6019382C752C71B103893EAC01BCC5512
        Validity
            Not Before: Nov 12 18:09:18 2024 GMT
            Not After : Nov 11 18:14:18 2025 GMT
        Subject: CN=9FB7C85D41533CC8A01BFB360DE8C05B995458C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:f5:42:74:26:b3:b3:95:00:0d:f2:ab:be:
                    7c:50:0c:52:84:ca:b2:91:63:6d:ed:1e:17:8f:37:
                    77:87:51:98:ee:ef:42:0d:cd:92:e9:5e:c0:d3:d0:
                    1b:52:95:e5:48:6f:1a:b0:b5:a9:64:59:84:19:6f:
                    71:ce:5b:2f:d1:be:9b:20:6e:6d:06:26:d5:7e:a2:
                    87:d0:62:56:83:f9:d4:08:b5:cc:55:35:8d:96:25:
                    16:c9:91:91:b5:86:37:67:9f:5e:54:2b:8f:60:ba:
                    74:30:c3:7e:3a:e1:be:6d:d4:fe:62:1c:26:ac:9d:
                    88:90:31:5b:82:76:c0:33:bc:7f:5b:c4:7b:6c:83:
                    6d:8d:83:87:49:c9:39:fd:86:f1:0a:76:20:28:a9:
                    05:0e:38:76:2d:e3:4a:8e:6e:7c:45:ad:df:5e:40:
                    90:0f:c3:d3:9d:43:28:66:6a:3d:94:b1:98:2a:07:
                    2b:9d:3a:d8:a8:90:08:6d:43:f6:a2:98:1c:38:3e:
                    bc:eb:72:6d:07:f0:8b:ef:2e:55:04:49:1f:c4:37:
                    76:35:18:9c:43:20:3b:10:9e:cf:19:e3:cc:bb:35:
                    0f:a1:51:a0:0b:7e:34:50:5a:3b:5c:21:64:a4:00:
                    b4:2c:3c:7a:69:ff:a8:69:c4:c3:2e:3b:c5:14:33:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B7:C8:5D:41:53:3C:C8:A0:1B:FB:36:0D:E8:C0:5B:99:54:58:C4
            X509v3 Authority Key Identifier:
                keyid:13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232302e302f32322d3232203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:88:ae:72:68:34:f2:de:07:89:d5:a8:32:85:11:2e:46:04:
         e7:c0:01:df:9a:64:af:51:32:86:3f:bd:a5:f5:df:fb:66:09:
         f2:c3:83:f4:4b:dc:a0:5f:5c:e9:b9:f7:be:8b:c7:7b:93:3c:
         fa:f4:0c:2c:c3:8f:0a:75:e1:62:ef:d5:84:12:b7:c6:73:ef:
         3d:f9:7e:e4:2c:f3:19:8f:eb:60:d0:53:77:57:b9:04:40:15:
         2c:6b:95:fa:ff:a3:4c:a3:b9:6f:ec:4b:31:6b:94:dc:ba:2d:
         0f:2c:b9:8e:66:52:bd:78:d3:8f:b6:97:e3:f8:e1:c5:17:90:
         33:5d:8f:7a:29:2d:28:0e:1b:e2:78:fa:9b:f0:7d:c6:16:fe:
         6f:1b:55:90:1e:eb:c7:52:dc:dc:1a:ec:bb:ea:a5:1a:47:61:
         7e:0a:91:0d:a2:74:0a:db:d8:84:3a:0d:49:50:ff:0c:0c:d1:
         eb:58:ec:b1:22:c0:93:80:c3:68:83:27:f4:ce:e7:01:8b:48:
         29:70:07:1a:86:4b:6b:aa:e5:84:db:58:91:54:99:06:93:49:
         fd:d6:f6:eb:04:6a:cc:c7:05:6d:b5:e5:76:24:3f:bb:80:a4:
         5c:04:ed:9d:09:32:2c:40:72:11:f8:47:22:ff:07:76:04:d0:
         ac:c4:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 08:55:32 2024 by rpki-client on console-ams.rpki-client.org