Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa
File:                     3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa (raw, json)
Hash identifier:          PDtSibRdHcdQZNRAWHc7ADxPo8BWQ1NyPUPUndU/JL8=
Subject key identifier:   DF:77:FF:5D:33:9D:A5:15:DD:E5:6E:12:C6:8E:CF:19:66:8F:22:C7
Certificate issuer:       /CN=E8870E286595E32BD9C475F51CDD6E36EF81A6FA
Certificate serial:       33F2BCCCE6A5F237FCFA0D240CC55B58A745C2DE
Authority key identifier: E8:87:0E:28:65:95:E3:2B:D9:C4:75:F5:1C:DD:6E:36:EF:81:A6:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa
Signing time:             Thu 04 Apr 2024 05:48:34 +0000
ROA not before:           Thu 04 Apr 2024 05:43:34 +0000
ROA not after:            Thu 03 Apr 2025 05:48:34 +0000
asID:                     264054
IP address blocks:        143.137.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.crl
                          rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:18:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f2:bc:cc:e6:a5:f2:37:fc:fa:0d:24:0c:c5:5b:58:a7:45:c2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8870E286595E32BD9C475F51CDD6E36EF81A6FA
        Validity
            Not Before: Apr  4 05:43:34 2024 GMT
            Not After : Apr  3 05:48:34 2025 GMT
        Subject: CN=DF77FF5D339DA515DDE56E12C68ECF19668F22C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:26:f8:ec:3c:45:c1:9c:8e:bb:d9:f7:76:
                    97:ee:ac:36:57:38:ab:3f:9a:7a:a2:a5:93:4b:30:
                    74:9f:c0:cf:35:8e:72:38:62:5a:88:ac:15:88:f3:
                    ac:f3:0c:de:78:0d:70:a4:58:a6:12:42:f4:0e:bd:
                    e3:8e:fc:70:02:e3:01:04:43:f2:17:61:5c:0a:b7:
                    8f:4a:01:d4:23:ee:0c:86:ad:f1:84:09:c4:c5:ad:
                    01:0c:78:ff:53:a8:96:f8:7b:bb:cf:c7:b3:1b:4f:
                    31:40:7b:b6:a9:27:4a:b3:2a:d7:23:11:15:e3:22:
                    a3:aa:05:01:d2:8e:9b:55:6c:c4:4d:ff:f6:04:e4:
                    b5:94:99:a4:6c:d6:4a:3b:f9:5b:fd:38:97:76:f5:
                    45:ca:61:38:52:50:d9:1f:d1:86:b3:e8:0a:79:8b:
                    7b:e0:92:56:26:12:18:60:c0:07:b1:1d:b9:99:4f:
                    9a:a5:2f:de:06:f7:e2:23:fa:16:37:d3:c1:8e:77:
                    13:f7:43:de:f6:7f:02:e8:17:f1:4d:7b:3e:29:c7:
                    36:61:40:f2:32:e5:0d:98:03:6b:78:9a:c2:0f:50:
                    29:d1:bd:a8:79:5b:11:79:87:d7:02:8b:b4:c5:a9:
                    d8:ad:b1:05:47:36:40:b2:52:9f:f0:31:bc:94:2e:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:77:FF:5D:33:9D:A5:15:DD:E5:6E:12:C6:8E:CF:19:66:8F:22:C7
            X509v3 Authority Key Identifier:
                keyid:E8:87:0E:28:65:95:E3:2B:D9:C4:75:F5:1C:DD:6E:36:EF:81:A6:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8870E286595E32BD9C475F51CDD6E36EF81A6FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyUgM7WkFgAw9ptNDnsqo5ndHVSpWCuXTAo5BRz37HjB/2/3134332e3133372e3232342e302f32322d3234203d3e20323634303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:b9:f9:dd:ba:1b:42:2c:16:57:4a:e4:9c:de:27:e0:99:3f:
         85:7f:bf:35:9f:b6:98:dd:ac:8b:66:62:06:ce:b2:cf:de:9a:
         d7:2e:2f:1e:31:56:aa:d6:f6:5b:5d:b3:99:8a:4a:e9:96:cf:
         a1:01:d7:24:90:6a:ea:6d:95:61:04:5b:5a:23:5d:97:70:14:
         3b:35:0a:bb:b3:7f:c1:d9:87:eb:34:3e:18:0f:7e:55:5e:61:
         e9:98:c9:01:83:01:d2:b5:31:34:87:4d:32:a7:2e:b9:93:32:
         f7:94:6b:93:1e:13:ef:8d:3d:1f:86:a7:bf:1d:8e:2c:c4:36:
         54:bb:b3:e3:33:61:c2:d6:a4:b5:16:c3:8c:3d:4a:29:02:59:
         7c:70:c1:cc:36:0e:69:66:8f:17:42:bc:dd:0f:ac:46:a9:94:
         13:6f:72:4f:0d:91:d0:f1:e7:38:ec:ff:88:90:28:6a:0a:34:
         4d:c8:ec:29:cc:55:c8:71:17:93:a5:f9:40:11:10:be:ae:9f:
         55:5e:de:4f:8f:e6:e2:05:f5:e9:67:7d:61:6e:df:e6:23:be:
         a6:23:4b:cf:6c:82:ff:df:38:2f:3f:f0:a6:e8:57:a3:82:10:
         5d:e6:17:cd:58:b1:e9:aa:e1:81:ac:15:50:ec:f3:67:2e:f3:
         16:86:17:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org