Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa
File:                     3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa (raw, json)
Hash identifier:          xkFOY/i1ChcEly9uCbKLQhRQHDkx3IrwcOloTevtjtc=
Subject key identifier:   EA:3E:7F:09:6F:FD:6C:1C:45:4F:DB:A3:50:A7:CD:A9:B8:A2:53:55
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       412F34374E23B8062080D457B9EDB3FD9ED8327A
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:25 +0000
ROA not before:           Mon 15 Jul 2024 13:37:25 +0000
ROA not after:            Mon 14 Jul 2025 13:42:25 +0000
asID:                     262729
IP address blocks:        143.208.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2f:34:37:4e:23:b8:06:20:80:d4:57:b9:ed:b3:fd:9e:d8:32:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:25 2024 GMT
            Not After : Jul 14 13:42:25 2025 GMT
        Subject: CN=EA3E7F096FFD6C1C454FDBA350A7CDA9B8A25355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:26:25:fa:15:51:9b:8d:e9:db:39:53:16:
                    34:8f:06:b9:12:1c:1e:8e:e4:59:41:e9:fe:d3:9d:
                    7d:71:ae:09:a9:96:85:75:ad:5d:04:cf:c3:1a:e1:
                    2b:1d:d1:be:fa:22:b3:24:3d:ca:3c:ed:55:c2:cc:
                    08:41:b1:02:12:fd:bf:9e:37:f4:c2:0c:4a:d0:42:
                    3d:e9:8c:20:b1:db:6c:d0:dc:9a:8a:8f:ae:87:d7:
                    ab:17:18:b8:96:0c:92:14:d0:36:8d:27:7f:ff:0f:
                    00:27:81:b1:96:e5:72:a9:95:92:3c:4e:ef:b1:83:
                    86:c0:ff:63:60:c5:69:0c:d6:cb:d5:38:6a:25:57:
                    40:e2:22:c2:87:f7:7a:d7:a1:23:f9:8f:d1:a0:86:
                    fa:03:13:a1:7e:3b:b6:7b:2e:58:1c:33:14:1e:10:
                    22:76:1b:f3:65:51:c9:0c:51:4c:57:b5:e3:44:70:
                    bb:ef:1e:40:51:39:9c:28:c7:86:fd:3d:54:90:48:
                    37:c6:f9:36:00:fc:16:9b:d9:d3:26:2e:52:d5:8f:
                    da:c5:98:5a:e9:ef:70:e6:9c:fc:28:6a:59:6d:95:
                    86:31:8d:c1:6d:d0:6a:ad:18:d3:e3:d4:72:af:02:
                    2b:2b:3e:16:19:77:14:96:7f:63:4d:9c:87:58:2c:
                    72:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3E:7F:09:6F:FD:6C:1C:45:4F:DB:A3:50:A7:CD:A9:B8:A2:53:55
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:65:9f:12:29:89:65:c4:ba:ae:cc:c3:aa:57:9b:0f:fa:a0:
         7f:ce:8f:ec:42:29:08:0a:79:4e:c9:9d:c7:b4:40:8e:14:e0:
         eb:44:9f:b1:50:79:cc:e1:63:6a:0b:16:25:18:ff:ea:90:e8:
         25:80:72:f4:20:d1:47:3e:ed:d8:1d:3a:12:d8:3c:0b:66:51:
         b5:ec:e2:3e:e0:cc:b2:fe:fe:1a:0b:93:d4:93:4a:10:36:d4:
         b3:4c:f2:1c:72:cf:10:dd:e4:d5:d7:c6:e8:d3:b7:9d:e7:07:
         60:1a:c9:37:4d:64:7d:12:93:bc:83:ef:dd:ed:65:e5:ed:ac:
         07:c8:78:9b:69:e3:7e:46:91:b7:bb:a4:21:4a:0d:e7:6f:f7:
         cb:d9:47:2e:fa:a9:49:46:d1:d5:68:e0:af:cd:cd:5c:ae:0e:
         ba:78:d0:1d:8f:5a:cf:88:e0:89:0b:c4:a4:e7:ce:21:b4:dc:
         f0:72:22:20:25:df:5f:77:4d:a5:ce:2c:9f:d7:9a:80:f9:d6:
         4b:06:c7:73:71:05:e6:58:71:af:58:b0:8c:16:5b:82:63:06:
         45:fd:ad:23:7b:ca:fb:05:41:9b:a5:be:34:d6:7d:2b:2e:5b:
         57:57:49:42:ea:6d:8d:26:e8:9a:93:b6:3a:40:ec:b8:22:41:
         1a:1c:3b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org