Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/3134332e3230382e3138372e302f32342d3234203d3e20323635313138.roa
File:                     3134332e3230382e3138372e302f32342d3234203d3e20323635313138.roa (raw, json)
Hash identifier:          qux0PKRyQ+Btej86yxO5MkcgaXg3fdh08rJT0bdrsMQ=
Subject key identifier:   BE:F5:40:A8:60:49:01:4F:BE:81:4C:2A:B2:B5:5A:F5:53:C7:C3:6F
Certificate issuer:       /CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
Certificate serial:       6E2545B897BF1BD42D555CF4D4A519742340FB44
Authority key identifier: 5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/3134332e3230382e3138372e302f32342d3234203d3e20323635313138.roa
Signing time:             Thu 04 Apr 2024 07:15:09 +0000
ROA not before:           Thu 04 Apr 2024 07:10:09 +0000
ROA not after:            Thu 03 Apr 2025 07:15:09 +0000
asID:                     265118
IP address blocks:        143.208.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:25:45:b8:97:bf:1b:d4:2d:55:5c:f4:d4:a5:19:74:23:40:fb:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
        Validity
            Not Before: Apr  4 07:10:09 2024 GMT
            Not After : Apr  3 07:15:09 2025 GMT
        Subject: CN=BEF540A86049014FBE814C2AB2B55AF553C7C36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:69:0f:f6:27:c3:39:c9:a0:9c:77:52:1b:8a:
                    81:49:83:f4:b9:e6:f8:20:be:ee:df:3d:e6:8d:cd:
                    48:70:e4:37:45:3f:51:b8:d8:93:7a:62:a4:72:89:
                    6a:ec:72:b0:56:45:f5:78:83:f4:45:cd:ef:0f:a2:
                    15:cf:de:de:a9:bc:05:b5:d4:00:d5:7b:82:82:a6:
                    44:91:55:37:47:cb:46:7c:7c:93:9c:1e:14:28:19:
                    62:93:7f:db:08:8a:89:88:19:7a:6d:15:75:69:8f:
                    16:90:b5:0e:66:54:af:db:3e:d2:eb:57:85:2f:fa:
                    0d:a7:a2:0d:a3:27:37:01:4c:12:77:b8:f4:74:f5:
                    4c:95:1f:1f:dc:5a:74:a4:21:95:84:a8:d4:0e:7c:
                    a4:8a:cb:27:60:06:a7:cb:86:e9:a8:df:31:dc:1f:
                    f1:e7:6a:35:0f:9b:13:8f:4f:73:74:17:72:d5:b5:
                    56:e0:c6:e7:6d:1d:7a:d4:45:a4:73:c8:92:04:5a:
                    3c:b5:d8:7c:27:53:03:27:db:23:cf:c7:46:e8:c1:
                    75:46:96:a8:a6:dd:5c:15:5b:6e:7c:ab:29:38:fa:
                    bb:65:3f:df:b5:3d:c7:29:89:ab:4f:90:54:45:96:
                    30:e4:ae:03:25:c1:21:79:35:8f:f7:ab:f4:2e:3e:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F5:40:A8:60:49:01:4F:BE:81:4C:2A:B2:B5:5A:F5:53:C7:C3:6F
            X509v3 Authority Key Identifier:
                keyid:5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/3134332e3230382e3138372e302f32342d3234203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:a1:6f:8b:f4:e6:c9:88:9c:3c:c1:95:a2:8c:91:77:f8:c4:
         6b:19:d6:23:73:7e:12:f7:38:90:ef:dd:32:38:98:10:8f:c5:
         b5:b3:39:fd:78:eb:86:d6:d7:9d:5b:83:f7:07:bb:d3:b8:cd:
         08:f6:15:3a:bd:69:e9:c5:b9:bb:a5:43:fb:b1:bf:ba:80:c4:
         06:61:b0:01:9b:62:9a:47:4d:99:df:c1:b7:70:3f:68:2d:a0:
         b9:74:f1:08:d4:35:18:5f:3d:30:e9:83:9f:a6:56:d6:1b:e5:
         db:7a:24:89:0d:b6:57:06:cd:2c:32:7b:f2:f8:f7:01:b4:f9:
         a2:1e:ed:0d:4e:81:c3:5f:5a:3a:ae:8a:73:72:fe:81:39:57:
         ff:cd:e0:a3:78:b9:f3:5d:a7:29:22:55:5d:7b:fc:f4:65:5e:
         61:fd:ac:50:7a:22:73:c7:ea:34:0c:68:ae:7e:44:6d:0c:71:
         c9:a3:37:c7:a1:85:c8:ca:e7:f3:fd:8a:68:98:1e:a5:cd:30:
         04:02:81:87:e2:76:d8:00:e6:d6:8c:bb:ab:42:f7:fe:12:ee:
         a4:b0:ff:94:db:9f:36:5e:7a:73:5c:3a:7e:fc:f3:c6:6f:13:
         fa:fe:3b:c5:e2:71:3b:bd:7e:0b:6d:da:31:7c:a1:5e:1a:c2:
         7f:99:16:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:55 2024 by rpki-client on console-fra.rpki-client.org