Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39362e302f32322d3232203d3e203532393737.roa
File:                     3134332e3235352e39362e302f32322d3232203d3e203532393737.roa (raw, json)
Hash identifier:          OXP6hUio1J2EMkaRJf3SB8ZnDKVI3Bt16zKwn9FpNdA=
Subject key identifier:   F1:F6:9A:2A:EA:AF:65:3E:D7:9D:37:06:0B:D2:3A:47:63:8E:D7:82
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       6CC987979D6E2571648199C26784B33A6F597491
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39362e302f32322d3232203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:51 +0000
ROA not before:           Wed 03 Apr 2024 18:25:51 +0000
ROA not after:            Wed 02 Apr 2025 18:30:51 +0000
asID:                     52977
IP address blocks:        143.255.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c9:87:97:9d:6e:25:71:64:81:99:c2:67:84:b3:3a:6f:59:74:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:51 2024 GMT
            Not After : Apr  2 18:30:51 2025 GMT
        Subject: CN=F1F69A2AEAAF653ED79D37060BD23A47638ED782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:e4:72:89:9b:41:58:12:7c:68:75:5a:73:
                    26:52:d0:5c:a0:bb:2c:9d:47:93:09:28:6a:b8:7e:
                    31:88:6c:f2:0a:0c:83:ef:34:1e:e2:a5:b4:4f:bd:
                    0e:6a:02:20:ec:93:82:2a:f6:bb:ac:a2:f7:fd:c1:
                    f2:cb:8e:7c:65:6c:60:6f:fd:2e:c0:2d:3a:4d:0c:
                    99:55:bf:6d:c3:38:cf:8d:51:2f:ab:09:69:4d:33:
                    61:63:81:aa:bf:ca:af:0d:e6:44:6e:1e:fa:26:80:
                    ea:05:a7:5d:e2:a7:a6:3c:d7:8a:4f:53:ec:2d:5f:
                    e6:bd:07:09:eb:bb:80:bf:0c:3b:9c:ec:55:37:bd:
                    24:44:b6:47:1f:39:85:90:c0:e4:ac:c4:a1:56:7d:
                    b2:40:5f:29:1e:15:7a:af:f5:dc:e1:e2:ef:4e:3a:
                    99:95:d5:ba:95:50:dd:54:ce:0e:6c:b5:19:e8:f6:
                    5b:63:04:74:27:f9:af:7e:d0:b2:f5:e6:d9:1d:97:
                    04:5d:12:04:75:8c:d6:91:26:08:4d:bc:d8:31:51:
                    09:0e:f1:38:1b:ac:3a:cf:bb:38:ec:1e:ad:81:9b:
                    3c:15:32:5b:31:32:40:18:c5:92:7a:3d:29:5c:d2:
                    04:f3:55:3d:5b:ff:7f:af:41:65:07:95:6c:b8:c9:
                    24:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F6:9A:2A:EA:AF:65:3E:D7:9D:37:06:0B:D2:3A:47:63:8E:D7:82
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39362e302f32322d3232203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:27:2e:6a:12:f7:20:3f:41:a2:7b:11:ae:fc:64:0d:e3:9b:
         b1:85:4a:01:ee:7b:7e:fa:39:7a:cd:a8:41:d3:8b:d3:15:16:
         74:1e:c3:4f:9f:95:8b:8f:a5:87:d7:aa:dc:bf:22:46:9e:76:
         9e:6f:9f:72:45:84:af:2f:f7:55:79:de:bc:21:f8:63:f1:45:
         d7:e7:e5:e0:22:95:ee:a5:e6:f9:39:17:4b:c1:3e:9a:56:09:
         2c:44:00:1f:60:5f:39:6a:d0:ee:50:a8:51:1e:8a:80:50:75:
         88:4d:ac:88:b3:fd:e5:26:de:c2:fd:96:95:01:ef:e8:73:0d:
         2e:21:74:fe:55:d3:c2:50:ed:54:6d:59:74:23:b3:3d:d5:a0:
         f4:21:d2:e7:c3:9e:1a:14:a4:7d:6e:45:2d:96:7d:74:77:93:
         1f:59:58:5a:69:87:e5:8d:7a:3d:49:9e:32:08:8f:db:8b:d6:
         31:4b:22:c7:ac:0e:68:6b:ff:53:7e:f7:69:2e:1a:84:0c:71:
         26:2b:fa:74:83:bf:c5:a5:d8:ab:ef:0e:d4:6e:9e:e4:9a:93:
         27:69:d1:00:db:96:9c:40:84:c8:41:60:fc:70:46:bb:78:1e:
         03:1c:8f:84:e6:06:0d:ac:24:3a:7f:01:90:4e:6e:ab:05:ed:
         92:3a:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org