Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/3134332e3230382e3138362e302f32342d3234203d3e20323635313138.roa
File:                     3134332e3230382e3138362e302f32342d3234203d3e20323635313138.roa (raw, json)
Hash identifier:          CUZVjgA8QuSSbgNPd+V7uoHJZOlSb2DAGsGRq5CIPBQ=
Subject key identifier:   DD:79:4A:C6:E4:CE:C6:9E:29:AF:F0:6F:D2:31:09:49:0F:4B:33:7F
Certificate issuer:       /CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
Certificate serial:       0BBC1CA290595210D158D69D1F1C3F1D1C674963
Authority key identifier: 5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/3134332e3230382e3138362e302f32342d3234203d3e20323635313138.roa
Signing time:             Thu 04 Apr 2024 07:15:09 +0000
ROA not before:           Thu 04 Apr 2024 07:10:09 +0000
ROA not after:            Thu 03 Apr 2025 07:15:09 +0000
asID:                     265118
IP address blocks:        143.208.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bc:1c:a2:90:59:52:10:d1:58:d6:9d:1f:1c:3f:1d:1c:67:49:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
        Validity
            Not Before: Apr  4 07:10:09 2024 GMT
            Not After : Apr  3 07:15:09 2025 GMT
        Subject: CN=DD794AC6E4CEC69E29AFF06FD23109490F4B337F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:f8:79:d3:75:9c:dd:26:49:2a:cd:3e:fa:
                    b4:09:b8:31:a9:85:cb:98:a5:9b:d5:9e:cb:0a:32:
                    c0:9c:19:d5:1f:81:a8:a2:be:a5:33:79:dd:42:00:
                    65:00:9e:6c:c0:0f:bc:a4:59:06:18:d8:78:85:3d:
                    78:67:e4:1d:94:b8:21:89:ff:5c:9b:f3:c0:14:56:
                    a5:f3:51:51:53:1c:a6:b3:74:91:04:ef:0b:9c:8b:
                    83:f9:56:25:55:7a:6e:62:f3:46:37:ae:ab:d3:b4:
                    8a:1b:f8:84:62:85:13:ca:84:4d:13:7d:3b:a2:fe:
                    da:db:17:b3:b4:9c:4d:7e:3a:2d:25:4d:c3:ae:26:
                    a8:66:fc:ce:c1:30:90:3b:cb:c3:c9:0e:ef:80:c4:
                    33:82:7c:48:1e:e4:1e:ca:a1:f1:f9:80:6f:3b:77:
                    b0:77:7f:c2:27:98:b7:ce:8f:85:cd:fb:74:73:9d:
                    d0:3e:4e:11:a2:56:ba:d8:24:6b:ff:ad:4c:47:cf:
                    7d:3a:a7:1c:c9:fc:f6:54:90:40:54:94:14:73:88:
                    db:a7:6a:44:3c:91:80:03:73:e3:5b:e9:f3:45:75:
                    49:4b:bc:22:03:3a:bc:8f:eb:ea:a2:2c:3e:9a:63:
                    08:6c:59:1e:dc:38:00:47:cd:c2:d1:b8:a0:ac:64:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:79:4A:C6:E4:CE:C6:9E:29:AF:F0:6F:D2:31:09:49:0F:4B:33:7F
            X509v3 Authority Key Identifier:
                keyid:5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/3134332e3230382e3138362e302f32342d3234203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:fa:c6:61:a9:48:66:8f:07:fe:b1:39:0f:31:b1:8d:b8:9f:
         4b:7c:3e:83:b5:fc:0f:30:4c:d4:e4:14:c6:a5:a4:c4:a3:36:
         f0:ce:80:c3:e2:da:f6:7c:6b:2e:e3:72:60:92:5a:67:d2:f0:
         1b:bf:7f:81:b5:4b:78:ea:d3:c0:d1:9a:88:ad:1a:4d:ac:6d:
         dc:23:a6:aa:36:db:46:e3:31:e5:f7:81:6f:86:a9:2d:80:85:
         9e:11:b8:1d:dd:48:2e:45:fa:67:91:b9:b1:51:12:e7:6b:47:
         93:33:18:c8:03:09:d1:f0:94:42:d7:a8:97:6f:60:da:e6:d6:
         f9:6a:52:97:46:64:8d:56:50:fd:fb:03:58:25:42:4a:b2:63:
         02:5a:cf:6b:98:fb:13:a3:28:d2:73:6b:68:e4:60:22:c1:58:
         c7:aa:76:4f:c2:2e:ea:81:d3:69:7b:fd:25:54:0e:92:1a:16:
         34:c9:18:92:38:4d:77:cd:64:8c:89:f2:2b:1b:e7:29:76:72:
         18:ee:a5:69:74:e4:1c:44:ce:2a:aa:77:75:1f:8d:7c:f2:13:
         bb:f9:4c:d7:73:41:57:b6:05:13:8f:8e:e7:be:62:a1:1a:2a:
         c3:f4:7d:95:f2:a8:cc:35:25:40:5b:17:07:ae:35:a8:28:49:
         22:8c:0e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org