Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39372e302f32342d3234203d3e203532393737.roa
File:                     3134332e3235352e39372e302f32342d3234203d3e203532393737.roa (raw, json)
Hash identifier:          3VU+eeLHYlzmLTTPNR24ob5d8vfDBf/S6EQlnIUQfYw=
Subject key identifier:   14:C0:83:77:CA:7B:F9:04:C3:3E:6C:00:6F:60:A8:69:78:74:B1:6E
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       0D37D6156480A065BB0AF68E5CC5E64ACEEE4D90
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39372e302f32342d3234203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:48 +0000
ROA not before:           Wed 03 Apr 2024 18:25:48 +0000
ROA not after:            Wed 02 Apr 2025 18:30:48 +0000
asID:                     52977
IP address blocks:        143.255.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:37:d6:15:64:80:a0:65:bb:0a:f6:8e:5c:c5:e6:4a:ce:ee:4d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:48 2024 GMT
            Not After : Apr  2 18:30:48 2025 GMT
        Subject: CN=14C08377CA7BF904C33E6C006F60A8697874B16E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:32:e5:11:c9:c3:aa:2b:f7:c0:ec:2c:b1:
                    8a:f3:d3:2d:14:34:d9:fb:52:87:c9:32:b9:75:12:
                    22:ba:e1:df:3d:ba:1e:74:e8:08:bd:28:23:18:af:
                    f0:03:12:c3:04:15:e7:26:55:93:b9:47:b4:02:1e:
                    b2:c8:7d:e7:8f:7e:b3:ea:7e:74:d8:a0:05:dd:d3:
                    46:b1:7c:e8:6d:9c:f2:74:a1:f3:bb:51:fe:f0:e4:
                    8a:2a:96:c6:25:5e:60:b3:c9:e7:f8:57:1b:8f:98:
                    aa:38:81:4f:05:37:d6:45:6b:10:b1:69:66:cb:78:
                    12:f0:91:15:69:2b:4a:ee:c3:5b:56:77:73:2a:62:
                    0c:2a:73:0c:38:09:1b:eb:6e:b7:2b:2d:b5:95:91:
                    8f:a8:c3:9b:5c:d3:ff:d6:e6:f4:33:c0:5e:69:e3:
                    38:54:fb:d0:73:cc:16:85:a9:87:d3:38:0f:14:45:
                    d2:71:02:d5:c3:a4:2f:e2:97:58:59:de:1a:d4:51:
                    08:97:1d:0e:f4:94:43:8a:96:c6:28:c1:a8:d2:aa:
                    49:82:bf:8f:2b:91:de:c5:d1:99:f9:0b:29:98:e3:
                    1d:34:ad:24:00:88:72:e4:b1:84:a5:08:cc:76:68:
                    d4:22:64:0f:07:c2:1f:09:0a:73:66:74:45:70:38:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C0:83:77:CA:7B:F9:04:C3:3E:6C:00:6F:60:A8:69:78:74:B1:6E
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3134332e3235352e39372e302f32342d3234203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:09:10:91:3b:7c:53:e1:77:ab:b7:3b:f4:f0:1c:10:68:8d:
         ed:fc:fc:0a:53:6e:c2:0b:6f:c3:46:93:0c:08:59:2e:2b:df:
         43:bb:2e:bb:2a:a7:a0:d0:1e:57:75:a8:c4:8e:48:37:ad:6f:
         25:df:a5:9b:8b:77:bb:7d:72:91:6e:22:97:3c:b0:5b:29:3a:
         b2:bb:11:5d:aa:aa:43:23:8c:4a:07:61:bb:89:53:5b:60:dc:
         98:2e:0f:f3:dd:43:f2:35:5e:ea:a5:e8:90:6e:33:29:fc:b0:
         e5:dc:d8:7f:77:ef:b1:79:1c:ca:92:3f:b5:72:1e:21:4e:54:
         f9:13:e9:98:70:46:bd:ea:f5:84:46:9b:31:e9:1f:00:e7:24:
         d8:8f:f0:00:36:5f:0d:77:72:cb:d0:67:b8:84:9f:cb:5e:1a:
         7c:92:a4:01:18:7e:3e:39:72:bd:e9:75:98:c6:09:71:7d:8a:
         d7:9a:d1:c8:7d:1b:71:d4:1c:79:b0:e1:82:23:2c:1c:8f:af:
         3e:a1:fb:1d:f4:f1:5c:96:90:3b:90:25:5f:18:3c:a2:26:4a:
         d0:ac:ae:de:46:06:1a:07:e2:bf:29:62:53:2f:c5:0f:32:81:
         62:87:84:da:83:bd:0d:87:a4:9c:4d:d2:7c:77:4b:bb:b4:4d:
         7f:34:0b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:56 2024 by rpki-client on console-ams.rpki-client.org