Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/1/3134332e302e3235322e302f32322d3332203d3e20323634303233.roa
File:                     3134332e302e3235322e302f32322d3332203d3e20323634303233.roa (raw, json)
Hash identifier:          oN5Rvz6Xn0bKrgHzRP676WNIa6AfZhU9/N+RheLTzxY=
Subject key identifier:   6E:7A:1A:34:F5:08:EA:9E:8D:3E:21:2D:A6:C5:AF:88:0B:79:ED:5D
Certificate issuer:       /CN=4A01B315CFDF750EB9AD5F631FF29C981C461C0C
Certificate serial:       324DA87606419834FE4372DB32FFB3D573F78A43
Authority key identifier: 4A:01:B3:15:CF:DF:75:0E:B9:AD:5F:63:1F:F2:9C:98:1C:46:1C:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A01B315CFDF750EB9AD5F631FF29C981C461C0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/1/3134332e302e3235322e302f32322d3332203d3e20323634303233.roa
Signing time:             Thu 04 Apr 2024 01:50:57 +0000
ROA not before:           Thu 04 Apr 2024 01:45:57 +0000
ROA not after:            Thu 03 Apr 2025 01:50:57 +0000
asID:                     264023
IP address blocks:        143.0.252.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/1/4A01B315CFDF750EB9AD5F631FF29C981C461C0C.crl
                          rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/1/4A01B315CFDF750EB9AD5F631FF29C981C461C0C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A01B315CFDF750EB9AD5F631FF29C981C461C0C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4d:a8:76:06:41:98:34:fe:43:72:db:32:ff:b3:d5:73:f7:8a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A01B315CFDF750EB9AD5F631FF29C981C461C0C
        Validity
            Not Before: Apr  4 01:45:57 2024 GMT
            Not After : Apr  3 01:50:57 2025 GMT
        Subject: CN=6E7A1A34F508EA9E8D3E212DA6C5AF880B79ED5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:dc:fd:33:d0:a7:b5:bc:0e:e5:b7:b0:c9:
                    11:c0:74:14:7d:6f:e6:3e:7b:5e:78:3e:fb:78:46:
                    55:8b:34:4a:5c:be:59:0e:d8:3e:0e:5a:18:da:5d:
                    e8:04:66:8e:ea:d9:41:81:42:81:e4:49:44:86:6a:
                    70:bf:4d:bd:b7:49:72:d9:fb:37:e1:8c:b1:df:e7:
                    a4:f8:70:63:d5:31:3c:ea:da:6b:b8:4e:2c:fa:28:
                    0b:43:44:ba:64:42:1d:2f:cb:de:94:07:3d:7a:44:
                    67:e7:95:3b:30:5c:bb:ef:c0:42:c3:b0:0e:cf:ef:
                    67:fc:f6:9e:65:1e:ba:75:0e:23:ef:12:30:c1:72:
                    a5:07:5d:a2:62:a3:b6:f9:b9:6d:7d:77:72:e3:f6:
                    b9:92:1e:ed:c9:60:56:f9:5f:eb:bc:ba:c0:60:a8:
                    68:47:dd:5f:d8:ff:e3:97:78:9b:63:0c:ae:58:53:
                    a5:c2:90:01:80:81:79:47:ad:9c:65:ce:c1:40:ba:
                    e5:ca:15:01:86:8d:8d:d3:56:bc:cc:64:da:22:ad:
                    11:63:d8:96:01:f6:2f:77:d6:ed:47:ab:b8:11:dc:
                    3d:d7:6e:e3:fd:d2:00:ac:02:33:32:72:3d:21:36:
                    ba:9e:76:58:c3:74:c1:b4:86:47:2b:25:bd:0e:ac:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7A:1A:34:F5:08:EA:9E:8D:3E:21:2D:A6:C5:AF:88:0B:79:ED:5D
            X509v3 Authority Key Identifier:
                keyid:4A:01:B3:15:CF:DF:75:0E:B9:AD:5F:63:1F:F2:9C:98:1C:46:1C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/1/4A01B315CFDF750EB9AD5F631FF29C981C461C0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A01B315CFDF750EB9AD5F631FF29C981C461C0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/1/3134332e302e3235322e302f32322d3332203d3e20323634303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:70:be:a3:fc:dd:7d:75:39:4c:59:22:e1:f6:cf:68:2a:8f:
         2a:9f:90:a7:80:90:91:1c:fa:ae:67:95:6e:c3:1a:c7:5f:c2:
         4f:2f:64:79:90:9a:70:22:6b:9c:d7:00:65:1e:9e:e1:af:6a:
         87:38:6a:ae:79:ce:f1:bc:c3:88:a6:49:b7:94:8d:c3:15:16:
         ba:fa:00:8a:b5:65:c0:71:a5:e3:e2:62:d0:6a:94:1a:51:08:
         e9:b4:72:9f:79:31:39:99:0e:a1:19:1b:76:8b:e5:6f:83:59:
         8d:33:91:56:93:2f:21:ea:f7:d1:6b:e3:f8:59:c6:0e:78:5e:
         97:cf:13:9d:d9:bd:66:6e:03:f3:ba:65:a9:26:5d:fb:10:fa:
         a4:df:a9:ee:7b:da:e3:04:6d:7c:2a:e3:1b:3c:31:09:39:bb:
         62:23:f9:df:e1:05:c8:0b:6e:db:a1:38:5d:a7:91:34:26:d3:
         c4:e0:5c:d9:9f:41:89:04:c2:72:74:bb:6a:8d:9c:23:15:1e:
         68:8a:10:bb:0e:a6:95:cc:98:63:6b:50:9d:40:98:10:45:6a:
         a2:6f:65:3a:e0:c8:b0:ef:3f:58:28:8a:33:76:2a:a8:74:20:
         0b:2d:48:16:92:6e:f4:8d:93:bc:c1:09:1a:34:26:6b:5a:cd:
         6d:23:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:21 2024 by rpki-client on console-ams.rpki-client.org