Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3134332e3130362e302e302f31362d3137203d3e203533313837.roa
File:                     3134332e3130362e302e302f31362d3137203d3e203533313837.roa (raw, json)
Hash identifier:          kxbF73o5Tqb60OKOBLeBhK0ARMfyS0fL4M75IdQBX14=
Subject key identifier:   98:98:F9:3E:E1:8D:35:58:D4:F9:55:2F:FD:A4:26:B4:21:19:0A:AB
Certificate issuer:       /CN=F0ADD6FFCDFB09210157372271C0B492767D7001
Certificate serial:       5B8710CA0EAF49B0C6FDB692CBB1375A246E224A
Authority key identifier: F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3134332e3130362e302e302f31362d3137203d3e203533313837.roa
Signing time:             Thu 04 Apr 2024 18:44:39 +0000
ROA not before:           Thu 04 Apr 2024 18:39:39 +0000
ROA not after:            Thu 03 Apr 2025 18:44:39 +0000
asID:                     53187
IP address blocks:        143.106.0.0/16 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl
                          rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:17:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:87:10:ca:0e:af:49:b0:c6:fd:b6:92:cb:b1:37:5a:24:6e:22:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0ADD6FFCDFB09210157372271C0B492767D7001
        Validity
            Not Before: Apr  4 18:39:39 2024 GMT
            Not After : Apr  3 18:44:39 2025 GMT
        Subject: CN=9898F93EE18D3558D4F9552FFDA426B421190AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:80:29:7f:3d:e7:d5:17:57:2f:a0:57:32:56:
                    7f:4d:0f:6e:1a:1e:a3:c6:36:a3:ee:c3:70:58:b6:
                    1f:f7:10:b1:6e:f7:b0:73:1c:d8:5f:ef:7e:29:18:
                    a7:8e:cd:3d:24:8b:34:21:5f:c4:e7:58:fb:93:31:
                    37:36:7a:11:ba:67:3b:37:c2:de:89:96:36:db:1c:
                    71:cd:2d:fa:8f:a3:f7:18:c5:5e:b3:03:53:9f:bc:
                    b9:05:00:8e:48:78:03:cb:2d:e3:d2:bb:0a:fc:dd:
                    a8:47:0d:c3:61:50:27:50:1e:ec:2a:4e:31:e5:32:
                    4e:49:01:85:82:64:77:1f:2a:03:f9:9d:ed:d3:b7:
                    d1:d8:6c:6e:f0:c7:2a:af:62:f9:76:3f:30:e1:56:
                    78:d2:d9:a8:2f:a4:b0:15:0d:e9:c9:1c:7a:ef:bb:
                    5f:e7:f0:c5:6b:a3:3b:da:aa:49:a5:11:23:f6:e3:
                    41:50:f9:b7:2c:d7:ca:17:70:23:4e:b5:a0:41:fa:
                    67:0a:56:93:58:a1:de:e0:6c:67:78:4e:cb:c0:a5:
                    77:5a:4c:26:69:7d:34:1f:39:cd:8e:22:c1:66:e7:
                    14:02:7b:ef:c0:f8:07:02:bc:67:96:30:ad:28:af:
                    36:cf:d8:b6:b9:3d:b3:97:b1:29:15:29:ff:04:e5:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:98:F9:3E:E1:8D:35:58:D4:F9:55:2F:FD:A4:26:B4:21:19:0A:AB
            X509v3 Authority Key Identifier:
                keyid:F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3134332e3130362e302e302f31362d3137203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:12:cf:25:bd:32:d6:bd:8b:04:08:57:cb:e3:90:9d:e9:d0:
         0e:fd:52:90:17:03:11:c2:39:88:46:b3:a7:35:4a:7b:41:2f:
         c3:42:1d:32:8e:af:97:0f:cc:00:52:b2:ac:57:5c:de:1f:ce:
         ca:9d:1b:13:d8:81:0d:02:e4:1b:a6:2f:64:2c:54:67:78:5b:
         1d:5f:0b:2d:2d:0e:4a:05:fb:33:65:c0:09:61:c9:5e:79:43:
         af:8f:5b:f6:cf:95:33:d8:97:e1:73:6b:c8:11:a4:4b:10:e5:
         08:01:9b:c0:8b:d5:b2:19:cd:9b:43:f8:53:64:65:db:11:e2:
         1c:02:10:67:60:5b:6c:18:22:50:6d:cd:81:b0:b0:5e:40:66:
         5a:bd:06:ba:f5:37:8b:27:28:04:b3:8f:ac:ce:45:f7:1a:2e:
         87:3f:a0:25:5f:ff:93:ea:14:ae:e7:ec:f1:97:d4:13:4c:55:
         03:34:35:de:53:e2:11:7a:39:7d:13:a3:95:c3:f5:c0:02:62:
         c0:bd:93:48:81:64:f5:09:ec:be:9f:6d:9d:2c:c0:40:43:65:
         d9:48:62:a7:74:81:f5:ad:af:4d:72:1f:22:17:9a:46:e4:8e:
         2c:84:6a:47:e4:7d:17:c9:00:e1:f0:89:f7:e4:00:98:c6:4c:
         a0:e8:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:33 2024 by rpki-client on console-fra.rpki-client.org