Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232312e302f32342d3234203d3e20323634303437.roa
File:                     3134332e3133372e3232312e302f32342d3234203d3e20323634303437.roa (raw, json)
Hash identifier:          C4PqBIPKD4KL2V1iQzP1ppA7Y0XH7pM+U8YQSC0rcDY=
Subject key identifier:   2C:B8:B4:A2:7F:3C:0E:F0:96:70:0B:54:E7:9F:AF:48:97:AA:49:D9
Certificate issuer:       /CN=132DCDB6019382C752C71B103893EAC01BCC5512
Certificate serial:       51E140848C811CA16632BE089EFE4AF46F662C9B
Authority key identifier: 13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232312e302f32342d3234203d3e20323634303437.roa
Signing time:             Tue 12 Nov 2024 18:14:19 +0000
ROA not before:           Tue 12 Nov 2024 18:09:19 +0000
ROA not after:            Tue 11 Nov 2025 18:14:19 +0000
asID:                     264047
IP address blocks:        143.137.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.crl
                          rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 23:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e1:40:84:8c:81:1c:a1:66:32:be:08:9e:fe:4a:f4:6f:66:2c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132DCDB6019382C752C71B103893EAC01BCC5512
        Validity
            Not Before: Nov 12 18:09:19 2024 GMT
            Not After : Nov 11 18:14:19 2025 GMT
        Subject: CN=2CB8B4A27F3C0EF096700B54E79FAF4897AA49D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8e:d6:e3:ee:c4:8f:40:83:f6:90:fb:16:54:
                    e3:e5:e6:fb:90:2f:6a:7a:8f:fc:3d:38:67:b0:77:
                    cb:eb:46:e3:75:4f:a6:01:77:d5:2d:6d:9e:4a:3d:
                    87:39:14:6e:e4:68:96:a9:f9:4b:69:29:68:ed:90:
                    d9:4e:35:d7:7c:39:5d:41:25:5e:19:6e:6d:5c:1a:
                    bc:93:89:f1:6f:c4:d4:11:a6:d9:90:03:78:42:60:
                    96:9c:16:dd:8a:52:61:91:fb:b6:e6:91:94:f2:dd:
                    88:0b:58:9f:9e:fd:40:bc:8e:76:0a:8a:50:35:2f:
                    22:2d:b3:76:68:b2:9d:51:1e:c8:ec:0e:d4:2a:71:
                    85:7f:53:4a:71:7f:b1:27:8d:28:55:a9:9c:15:80:
                    71:aa:a7:e6:39:6b:3a:cc:21:9a:2a:3f:81:4f:87:
                    41:d0:e6:e0:f9:be:52:10:1a:d6:12:8a:32:ea:5f:
                    c2:5d:59:d6:7f:bf:ec:0e:c1:ac:b9:98:b6:74:55:
                    5f:44:cf:54:c2:bc:ea:1f:ed:fe:b0:96:bc:24:e4:
                    6d:43:d8:5a:77:11:76:6a:de:1a:1b:c5:28:8a:25:
                    ed:8b:10:01:71:88:a2:a8:11:43:e5:e0:2a:c8:3d:
                    ce:3e:f9:90:52:e1:c8:4a:fb:43:f5:26:30:09:85:
                    51:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B8:B4:A2:7F:3C:0E:F0:96:70:0B:54:E7:9F:AF:48:97:AA:49:D9
            X509v3 Authority Key Identifier:
                keyid:13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232312e302f32342d3234203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:dc:c9:49:c1:36:40:6c:98:7b:8d:d4:c6:c2:cd:99:66:3f:
         6f:e4:a8:82:6a:98:4c:d8:42:b0:9a:b2:0d:1d:8a:9d:b7:7e:
         71:db:ec:18:36:41:de:dc:ad:56:ed:4e:ca:46:21:fa:75:7c:
         71:a1:6f:a5:3b:35:77:85:b5:fd:63:34:3f:bc:08:11:2d:05:
         e2:b1:1e:95:87:d8:a2:3f:94:c6:91:42:07:45:66:31:67:c4:
         40:a4:57:fe:4d:e6:03:23:59:41:6d:2d:ef:14:a8:3f:e2:17:
         16:9d:c7:72:d2:c8:8f:67:94:42:a5:9d:a3:82:0f:92:3e:52:
         9c:58:bc:e9:e9:6e:66:9b:61:18:8b:a1:14:9a:34:b5:9e:21:
         55:ad:bd:db:bc:13:06:c2:b6:ee:c6:93:2b:e4:bf:fb:46:d8:
         5f:ee:a0:8f:78:ed:16:f6:11:7d:67:fc:23:b3:17:11:08:14:
         9a:d6:ae:c5:5b:d1:70:8f:c9:73:c2:8f:8e:8d:eb:17:83:fc:
         05:64:c4:9d:32:3f:fc:fd:16:1d:19:96:0e:df:97:84:c4:3e:
         e6:90:03:f1:40:43:53:e8:61:27:7c:37:12:82:83:fe:ca:9e:
         98:29:e3:e4:0d:c2:35:00:32:b1:a1:5a:88:27:45:94:6e:1f:
         46:c3:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:05:42 2025 by rpki-client