Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa
File:                     3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa (raw, json)
Hash identifier:          CK+Jo4AkD/GZZvt1dDG9CfNln/2SWxY5+hy4d4teiN0=
Subject key identifier:   53:D1:A9:FB:65:36:7D:DB:51:55:EA:F2:3F:CF:9C:10:64:2F:32:B8
Certificate issuer:       /CN=132DCDB6019382C752C71B103893EAC01BCC5512
Certificate serial:       1943932A20C8496FA4638FA45D03EAE1AF83EA18
Authority key identifier: 13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa
Signing time:             Tue 12 Nov 2024 18:14:18 +0000
ROA not before:           Tue 12 Nov 2024 18:09:18 +0000
ROA not after:            Tue 11 Nov 2025 18:14:18 +0000
asID:                     264047
IP address blocks:        143.137.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.crl
                          rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 01:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:43:93:2a:20:c8:49:6f:a4:63:8f:a4:5d:03:ea:e1:af:83:ea:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132DCDB6019382C752C71B103893EAC01BCC5512
        Validity
            Not Before: Nov 12 18:09:18 2024 GMT
            Not After : Nov 11 18:14:18 2025 GMT
        Subject: CN=53D1A9FB65367DDB5155EAF23FCF9C10642F32B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1d:fb:4a:7d:6b:9f:7c:e0:8f:1e:fb:ac:ea:
                    ee:06:fa:21:0a:0d:7f:f5:79:d3:21:19:40:c7:66:
                    22:bd:6d:59:98:24:92:6b:e1:51:f3:70:1e:36:e0:
                    c2:18:e5:44:c5:c5:0d:f8:31:20:ce:32:6f:2a:3c:
                    91:91:cf:b2:c3:74:55:08:7a:20:14:24:a7:21:b4:
                    7a:37:17:fe:83:c7:6a:a6:35:8a:5c:b5:bc:59:0a:
                    00:b0:a5:1f:4c:8d:8c:84:30:ac:62:30:88:14:35:
                    d4:5a:a2:8b:2f:72:26:33:4b:24:e6:c4:d1:55:d0:
                    8d:18:a0:99:97:c4:89:2a:96:76:f5:2a:d8:60:da:
                    db:fd:0f:ba:9d:64:56:de:53:d0:d7:5b:61:d9:b5:
                    9e:66:54:3b:bb:21:73:00:97:4c:f3:dc:dc:e1:5f:
                    87:e4:a3:3d:6d:12:46:29:45:07:1e:c7:a4:2e:ab:
                    c0:25:23:18:db:bf:ba:92:31:05:8f:ef:1f:10:ec:
                    88:c0:b8:41:67:f0:3c:1e:3d:c9:a7:74:bf:d1:10:
                    13:53:cd:dd:85:b0:a8:18:69:43:7a:bb:9c:db:38:
                    b8:72:be:ca:72:2a:65:5c:52:ac:c3:5b:10:f5:a8:
                    92:69:04:da:7b:bc:57:08:57:5b:87:44:7e:34:37:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D1:A9:FB:65:36:7D:DB:51:55:EA:F2:3F:CF:9C:10:64:2F:32:B8
            X509v3 Authority Key Identifier:
                keyid:13:2D:CD:B6:01:93:82:C7:52:C7:1B:10:38:93:EA:C0:1B:CC:55:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/132DCDB6019382C752C71B103893EAC01BCC5512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/132DCDB6019382C752C71B103893EAC01BCC5512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/3134332e3133372e3232322e302f32342d3234203d3e20323634303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:d4:75:9e:f0:e6:5f:72:ac:87:5c:62:da:01:ee:1d:d2:89:
         69:88:43:d3:a6:3f:f5:61:75:20:27:f8:b2:bd:c3:3b:5e:28:
         55:50:b6:04:f4:c6:90:29:b6:bf:a8:20:9c:1c:d1:46:76:c2:
         1d:e4:14:03:7e:9c:5b:12:33:64:3d:2c:5d:65:d6:35:02:ba:
         b1:50:1f:d7:74:b9:10:ec:af:46:a3:e7:f0:83:1f:ea:85:69:
         de:6d:7b:db:ae:24:93:f2:f8:77:3e:73:0a:95:ea:22:47:81:
         72:58:bb:85:ce:55:98:58:21:ab:34:9a:86:4c:1a:4c:33:6a:
         5d:a9:ab:0c:fa:4e:87:71:67:db:b4:18:bc:9b:df:50:8d:7e:
         38:ff:d3:50:72:28:33:46:ff:66:9d:6b:1a:d3:94:02:0f:23:
         c2:0a:50:67:47:8c:f7:61:2b:30:eb:95:40:db:2b:68:85:4e:
         c1:1b:45:77:1e:b8:d3:5c:3f:08:27:a6:29:6b:1b:1a:40:ea:
         9a:8e:b9:5d:7d:d7:84:1b:4f:26:02:2b:7b:a5:8c:a6:d4:49:
         ac:5e:21:ab:44:08:5d:78:24:d0:b9:ff:00:0a:66:bd:3e:b8:
         d7:ba:4d:89:dc:9f:59:f7:e9:9e:f3:61:6e:68:97:87:28:3b:
         7b:1d:d2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:37 2025 by rpki-client