Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3134332e302e35362e302f32322d3234203d3e203532363133.roa
File:                     3134332e302e35362e302f32322d3234203d3e203532363133.roa (raw, json)
Hash identifier:          dCkeOU8lChUqttM9Z4VwGyd64z/rhbjxNH2THUeV2fU=
Subject key identifier:   20:CE:45:90:92:2F:4D:7B:59:BB:A4:FC:80:9A:96:FD:03:D3:B6:51
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       540E5C37F57E164F52D96B8488801F0348564381
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3134332e302e35362e302f32322d3234203d3e203532363133.roa
Signing time:             Thu 02 May 2024 12:12:07 +0000
ROA not before:           Thu 02 May 2024 12:07:07 +0000
ROA not after:            Thu 01 May 2025 12:12:07 +0000
asID:                     52613
IP address blocks:        143.0.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0e:5c:37:f5:7e:16:4f:52:d9:6b:84:88:80:1f:03:48:56:43:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: May  2 12:07:07 2024 GMT
            Not After : May  1 12:12:07 2025 GMT
        Subject: CN=20CE4590922F4D7B59BBA4FC809A96FD03D3B651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:42:8f:c6:aa:92:a7:a7:a8:46:d8:19:58:
                    a8:b7:ec:fc:72:7c:7b:3e:3b:f1:03:c2:43:2b:79:
                    c0:6b:a0:07:9a:44:ad:7e:89:55:2f:a3:b9:b1:90:
                    2b:05:f4:26:93:72:eb:0f:02:cf:39:7b:23:32:a3:
                    7c:aa:e3:1d:38:8d:6a:ff:1c:60:ef:3c:b7:66:3f:
                    f2:86:6f:c8:6b:b0:a8:8a:5f:ac:73:75:d7:b4:34:
                    77:7c:18:a9:20:46:79:61:71:23:10:c0:e9:c1:5c:
                    c1:8f:6a:9d:41:7f:ac:59:8e:8f:71:de:f2:db:0a:
                    a5:95:ab:a6:ef:f3:4a:f2:38:c6:8a:3a:d1:f5:e1:
                    80:24:7f:47:14:8c:90:cc:0b:df:cd:14:62:d4:34:
                    43:ce:49:a2:35:4a:c9:05:00:78:58:4d:29:64:20:
                    f8:4d:38:10:80:b9:63:b2:81:96:71:9e:5d:cb:cb:
                    0a:c3:05:e4:b5:74:98:f7:2e:aa:0d:6b:25:4c:76:
                    fc:ef:07:20:ea:2f:3c:08:66:80:56:6a:dc:1c:c2:
                    df:1d:a8:71:ee:a2:32:15:c1:00:96:81:3b:e4:f1:
                    ab:66:26:5d:52:73:5c:71:0f:64:7e:1f:13:29:36:
                    d3:e8:64:bb:5c:13:49:bb:c3:df:7f:e2:63:e8:8d:
                    d6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CE:45:90:92:2F:4D:7B:59:BB:A4:FC:80:9A:96:FD:03:D3:B6:51
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3134332e302e35362e302f32322d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:0b:3e:11:15:32:ab:78:62:de:2e:0a:52:0b:bb:3e:c6:cd:
         a0:05:eb:78:36:15:ba:4a:43:62:cf:6f:2a:b6:5f:03:65:21:
         4f:10:a3:c2:70:15:c8:b0:c8:2f:9b:c6:45:b6:23:ba:d5:a3:
         a6:6f:96:87:33:0a:5f:ed:90:23:81:54:59:43:1a:31:2d:ca:
         ee:9a:87:d4:05:f5:56:91:5d:f7:fc:66:cc:fa:de:5c:31:e3:
         81:9b:95:5b:5f:2b:09:3c:e6:59:fa:32:5b:ce:bb:95:c3:21:
         10:44:34:87:d6:db:aa:12:fd:3c:38:fe:3f:12:d1:17:5d:de:
         35:c4:96:50:60:29:d2:c4:06:c1:ca:9c:de:65:bb:f7:b2:d7:
         85:10:ed:0e:3c:84:0f:18:c1:0b:39:fc:8b:16:7d:de:e9:0b:
         39:8e:58:8f:76:84:96:e8:9e:21:22:51:25:20:66:b0:ba:79:
         f2:b7:23:c2:da:0b:39:a2:4c:89:05:de:b8:5f:1e:ee:00:9f:
         0a:c9:89:82:cf:13:8b:67:d7:29:54:fd:4b:37:3e:ec:e2:85:
         7b:ee:67:7c:c0:71:02:be:57:73:2d:a0:0a:7e:19:d1:f3:51:
         69:88:de:35:7a:10:62:95:16:dc:50:6c:56:d8:fd:0b:69:73:
         7a:aa:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:36 2024 by rpki-client on console-fra.rpki-client.org