Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa
File:                     3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa (raw, json)
Hash identifier:          4dZmg4njagO8ssOMi/emVc523bHOefuhCi08IoS1Hso=
Subject key identifier:   03:09:57:19:A4:7F:0F:E7:CC:E4:70:A8:80:25:5C:29:9B:E1:ED:BD
Certificate issuer:       /CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
Certificate serial:       775A113924F0E308D98ED1AF767B6F1D4A2AA216
Authority key identifier: 71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa
Signing time:             Thu 04 Apr 2024 18:45:03 +0000
ROA not before:           Thu 04 Apr 2024 18:40:03 +0000
ROA not after:            Thu 03 Apr 2025 18:45:03 +0000
asID:                     263004
IP address blocks:        143.208.228.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl
                          rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5a:11:39:24:f0:e3:08:d9:8e:d1:af:76:7b:6f:1d:4a:2a:a2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
        Validity
            Not Before: Apr  4 18:40:03 2024 GMT
            Not After : Apr  3 18:45:03 2025 GMT
        Subject: CN=03095719A47F0FE7CCE470A880255C299BE1EDBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:20:86:6e:c9:31:ac:e9:75:79:1b:71:1c:
                    8c:c6:24:2b:11:d9:0e:3e:2a:43:77:f3:e8:6b:52:
                    a9:5b:48:d8:15:9a:8f:84:46:27:14:87:0b:94:5f:
                    08:b2:f2:0c:6b:73:af:4a:ba:8f:b6:55:f9:cd:88:
                    66:8f:ba:f3:4d:ec:84:e6:89:74:a8:2c:23:c2:15:
                    f2:b8:43:0f:33:cf:47:88:8e:64:9b:b7:d5:71:97:
                    b3:0b:d8:72:d5:eb:b5:a9:6e:d2:8b:9d:a0:34:f7:
                    d7:03:39:d9:23:98:47:91:a5:20:38:48:bc:61:91:
                    59:9a:88:f3:f2:0e:42:e8:73:46:43:3e:02:5d:e7:
                    2d:65:5d:2b:6a:81:ed:65:b8:c6:a0:08:f5:be:f9:
                    96:1a:84:77:f4:3d:ae:af:e9:32:01:e6:f0:d7:2a:
                    0e:d5:16:89:92:3c:d4:98:8d:3d:1a:3c:61:5b:46:
                    c4:a8:9d:e0:19:73:e0:c3:9f:44:a4:22:46:e5:c8:
                    5c:d9:81:ae:a9:1e:07:53:bd:63:d7:5f:a5:3e:bc:
                    4c:51:3b:80:b1:12:e7:e9:1c:f3:d0:1c:a5:03:e1:
                    6d:0d:31:ce:3e:fe:be:6d:01:12:33:ef:15:a0:2b:
                    c3:3d:40:92:8d:f6:b9:5b:d6:6c:51:6e:62:25:31:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:09:57:19:A4:7F:0F:E7:CC:E4:70:A8:80:25:5C:29:9B:E1:ED:BD
            X509v3 Authority Key Identifier:
                keyid:71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/3134332e3230382e3232382e302f32322d3332203d3e20323633303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:7d:02:b5:fb:d5:c9:6e:5d:e0:2f:d9:1e:89:61:80:22:f3:
         21:29:e2:60:93:71:dd:87:b1:57:80:44:cd:6a:f6:f7:88:c6:
         fd:86:5b:07:a9:96:87:b7:68:12:7f:bd:02:65:0a:62:83:89:
         a7:7b:ce:a0:08:38:f6:f8:ab:2c:73:e8:c7:e0:39:4c:32:a6:
         5b:e8:53:fa:37:bd:b3:f4:89:f4:98:2c:55:13:d1:c6:fe:c3:
         84:9b:bc:b6:66:0b:7e:e8:31:53:f2:e2:ad:8e:81:bf:09:52:
         ad:21:5b:18:bb:cb:8d:1a:f6:ad:41:58:d8:42:84:e8:c1:22:
         57:24:8b:4c:17:f9:d7:4b:d6:d2:cb:73:93:7c:84:52:ad:2a:
         b1:76:01:be:99:70:2d:54:f2:cc:63:bf:2f:e0:4f:8f:81:5f:
         a9:3e:77:36:12:97:66:83:99:c0:93:b0:2f:d1:27:2b:da:94:
         c2:41:8c:c8:b4:0f:6a:1e:bf:06:9b:41:e7:93:05:47:81:a6:
         30:59:ad:b6:e5:8d:2b:ce:5a:0f:9b:64:2c:a5:49:3d:7e:32:
         3a:e3:19:0b:73:56:c1:84:40:ee:80:ea:7a:e1:9a:f8:fa:ee:
         9b:0b:d4:01:19:fb:ed:9f:45:58:0d:44:74:4c:c2:9d:fd:6a:
         f2:b2:05:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:40 2024 by rpki-client on console-ams.rpki-client.org