Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/3134332e302e3232342e302f32322d3233203d3e20323634303335.roa
File:                     3134332e302e3232342e302f32322d3233203d3e20323634303335.roa (raw, json)
Hash identifier:          hv66HZJAOb4q+5K3Dx1h3NKSEY5BaNpcKcocfVBKq3A=
Subject key identifier:   4C:A7:27:CB:56:00:3F:B9:98:47:E4:6F:50:59:0F:60:4E:AD:D6:83
Certificate issuer:       /CN=5462822197AD1B709CF7359BB22855D78C54671B
Certificate serial:       3169CDAE8C70A0582892C604EE71EDDDE5D2A3C0
Authority key identifier: 54:62:82:21:97:AD:1B:70:9C:F7:35:9B:B2:28:55:D7:8C:54:67:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5462822197AD1B709CF7359BB22855D78C54671B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/3134332e302e3232342e302f32322d3233203d3e20323634303335.roa
Signing time:             Thu 04 Apr 2024 15:39:31 +0000
ROA not before:           Thu 04 Apr 2024 15:34:31 +0000
ROA not after:            Thu 03 Apr 2025 15:39:31 +0000
asID:                     264035
IP address blocks:        143.0.224.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/5462822197AD1B709CF7359BB22855D78C54671B.crl
                          rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/5462822197AD1B709CF7359BB22855D78C54671B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5462822197AD1B709CF7359BB22855D78C54671B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 00:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:69:cd:ae:8c:70:a0:58:28:92:c6:04:ee:71:ed:dd:e5:d2:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5462822197AD1B709CF7359BB22855D78C54671B
        Validity
            Not Before: Apr  4 15:34:31 2024 GMT
            Not After : Apr  3 15:39:31 2025 GMT
        Subject: CN=4CA727CB56003FB99847E46F50590F604EADD683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:17:a0:63:88:86:2f:44:2b:d2:c9:50:4b:
                    b0:15:6a:49:bf:32:44:69:68:00:fb:11:ae:8a:35:
                    6d:6a:cc:a0:ee:5c:b9:82:74:83:c7:e0:2c:4b:50:
                    65:eb:95:91:08:b5:02:cd:3c:0f:c4:d6:e7:91:cf:
                    60:83:aa:bf:da:0f:a7:f5:5f:c3:39:21:0f:24:bf:
                    d5:71:44:6b:21:2c:9f:e0:b2:41:4a:09:96:87:58:
                    9a:40:57:8b:4f:f1:49:d6:3f:80:45:8c:aa:7e:ae:
                    ae:8c:0d:91:5b:e5:4d:7b:63:49:11:9b:82:a3:18:
                    54:cf:9d:8f:bc:3b:3a:f0:92:28:44:9e:7f:8d:36:
                    b6:14:1f:1b:35:1b:b6:89:ff:ae:f1:ed:0c:de:b1:
                    be:16:3b:88:7b:b1:23:2a:1b:e3:2f:c1:e6:cd:2e:
                    d6:9c:50:9e:15:f0:0d:d8:15:96:a5:81:0a:75:08:
                    f3:70:fe:a8:0a:63:2b:a0:82:25:24:0d:8a:51:fc:
                    f6:0d:f1:ef:18:d0:4d:30:b6:2f:a3:9b:59:0b:ad:
                    dc:ba:85:6c:8f:2a:f7:b3:75:d6:52:cf:91:50:3f:
                    0f:33:88:00:ae:ac:6a:c2:f2:8c:62:97:fc:c4:3a:
                    81:28:d3:db:d8:11:95:81:1b:b6:49:08:a7:17:9e:
                    f7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A7:27:CB:56:00:3F:B9:98:47:E4:6F:50:59:0F:60:4E:AD:D6:83
            X509v3 Authority Key Identifier:
                keyid:54:62:82:21:97:AD:1B:70:9C:F7:35:9B:B2:28:55:D7:8C:54:67:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/5462822197AD1B709CF7359BB22855D78C54671B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5462822197AD1B709CF7359BB22855D78C54671B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkhBG8TuBGr4Edr5BZc9A5w1s4FXT2vCFsTrFjTHyFew/1/3134332e302e3232342e302f32322d3233203d3e20323634303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:76:8f:e7:f4:2a:1b:4a:c6:e1:f6:5a:ae:20:b5:23:db:
         ef:2c:b9:4c:67:29:e8:65:ea:74:b8:f0:2d:99:4a:d1:fd:2d:
         4f:b7:80:84:83:93:09:cc:86:59:7b:f2:4f:eb:19:a9:9e:bc:
         8a:ce:d5:6e:00:b7:e4:11:6e:b6:82:69:ac:77:a5:24:d4:7e:
         80:52:65:3c:ac:a3:42:2a:a8:7a:8f:da:21:ba:f5:df:10:e2:
         14:fd:b9:02:a5:ff:3e:47:5b:22:ff:2f:29:bc:5a:03:d0:fc:
         0b:97:d4:51:eb:34:23:08:71:45:06:67:1c:e7:e2:e1:c4:16:
         30:58:6e:06:91:fa:cd:1c:a0:a7:5c:ac:63:2f:88:e1:74:9f:
         bf:61:1f:7b:b1:45:93:3a:ce:63:d2:9c:b3:d0:4f:ee:21:8e:
         40:0d:67:72:9c:df:f4:ff:46:e1:21:c2:53:f8:5e:45:d5:2c:
         8e:da:06:c5:3b:f2:4b:af:42:df:89:3e:d4:7b:51:6b:f2:2d:
         6a:05:43:66:f9:44:91:86:79:4e:ee:06:3c:d0:c4:c7:ed:09:
         7b:7d:7c:c5:30:d6:be:e9:20:43:c7:cb:90:c5:bd:f9:42:d2:
         a7:a4:b1:4b:d7:85:3d:49:2b:d8:17:78:87:7d:c4:b5:1b:b6:
         6a:f6:33:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:00:31 2025 by rpki-client