Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa
File:                     3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa (raw, json)
Hash identifier:          OK95Hm3+KU53upZmLJHPNAfKuu6CEmUIbay9WbRPH3E=
Subject key identifier:   BD:3E:92:78:F1:25:87:4B:91:E5:BD:EF:B0:30:78:97:FD:40:15:35
Certificate issuer:       /CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A
Certificate serial:       272B97B84F5EABDE3A0FF3412A6E9190306BE212
Authority key identifier: 3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa
Signing time:             Thu 04 Apr 2024 08:48:53 +0000
ROA not before:           Thu 04 Apr 2024 08:43:53 +0000
ROA not after:            Thu 03 Apr 2025 08:48:53 +0000
asID:                     271487
IP address blocks:        201.94.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.crl
                          rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2b:97:b8:4f:5e:ab:de:3a:0f:f3:41:2a:6e:91:90:30:6b:e2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A
        Validity
            Not Before: Apr  4 08:43:53 2024 GMT
            Not After : Apr  3 08:48:53 2025 GMT
        Subject: CN=BD3E9278F125874B91E5BDEFB0307897FD401535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:8a:16:98:3b:71:1b:ec:2a:c4:f1:f8:02:
                    85:e1:f2:f1:7a:fb:cf:c6:2e:47:56:b2:7f:49:01:
                    c6:a3:65:91:a5:aa:3c:d0:47:45:3d:96:03:e2:e5:
                    6c:2d:65:d1:ee:34:24:8b:cd:46:58:f1:e8:fa:43:
                    31:8e:96:7a:4d:af:e1:8e:a9:a5:da:92:5d:67:e6:
                    ee:8a:81:31:eb:52:4e:32:ba:e8:40:37:56:8a:b1:
                    bd:da:41:e2:d9:7b:7d:ef:e5:53:ee:a6:04:75:69:
                    f1:f4:c4:3c:4d:9a:9d:ea:c7:c1:ea:3e:7a:1b:c2:
                    7c:20:00:b3:18:8f:5d:a2:0c:bd:31:0a:28:25:85:
                    27:54:20:56:df:24:1b:aa:59:0a:68:71:b6:d3:5b:
                    8d:59:03:73:5d:ac:15:90:a4:ad:d2:39:d4:cf:7a:
                    e1:44:0c:d0:5e:47:d1:a1:9c:d3:d0:91:e6:eb:d8:
                    89:71:2e:93:62:61:9e:4e:d5:41:7e:72:0b:7f:0d:
                    a9:87:b8:68:78:b0:d9:b4:bc:94:0d:27:47:13:a6:
                    9d:a5:4e:6a:4a:1d:3e:9b:d8:81:32:47:2a:07:54:
                    a8:59:0a:0a:3d:37:9d:64:87:17:37:ae:f9:76:b0:
                    a3:89:4f:2a:90:cc:5f:9a:c3:4b:fb:a0:62:06:70:
                    d1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3E:92:78:F1:25:87:4B:91:E5:BD:EF:B0:30:78:97:FD:40:15:35
            X509v3 Authority Key Identifier:
                keyid:3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3230312e39342e3134342e302f32322d3234203d3e20323731343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:7e:56:16:e8:9a:24:f4:5f:53:0b:c9:75:53:ba:06:ca:dc:
         a2:30:96:cc:40:b1:af:8e:d6:5b:85:ca:29:9b:08:1c:4c:59:
         c9:60:b6:14:ce:49:fa:4e:f2:99:49:2f:68:6b:11:35:50:8f:
         ac:71:c0:15:90:8d:a3:59:44:f1:90:27:7c:9a:a7:ee:90:8a:
         fe:af:a7:b5:35:8e:8f:15:fb:95:82:11:eb:b2:d7:99:da:0f:
         b1:33:52:72:77:fe:53:1f:43:d5:4c:7e:a7:53:ae:9b:e2:9a:
         d2:d9:cc:02:53:a7:96:92:10:37:1b:aa:53:7c:e6:1f:46:61:
         6c:57:57:85:55:00:22:02:77:ed:1e:f7:49:a0:a6:0a:4e:2f:
         0c:3b:9f:b1:ea:7e:5e:17:50:e7:60:9e:02:b6:f7:04:60:08:
         d1:56:f0:19:96:4e:d8:85:30:4c:47:d7:42:04:59:aa:03:f7:
         fa:71:0f:e3:2e:3c:cd:ab:74:48:04:61:f6:71:57:23:2f:a8:
         63:72:13:b0:93:ee:7f:b4:99:1e:0b:4f:bb:19:b9:ab:75:98:
         b8:65:fe:2d:2c:63:51:40:bf:ec:26:f5:26:35:d9:a3:9d:08:
         d2:36:86:d4:bd:59:07:5d:fa:eb:f2:b7:f0:8d:7f:4c:b6:74:
         58:94:bc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:14 2024 by rpki-client on console-ams.rpki-client.org