Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa
File:                     3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          Z0k+fGyyHiJx6gA4ohmUigSAqb4WiicC2LEBBJoi71U=
Subject key identifier:   C7:79:06:D5:B6:98:FC:67:8A:4C:D2:B4:1D:E1:4E:9C:D7:46:70:23
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       2F88706DCA6F533FC9E03BDE92023F87E1B6D084
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa
Signing time:             Tue 01 Oct 2024 19:50:02 +0000
ROA not before:           Tue 01 Oct 2024 19:45:02 +0000
ROA not after:            Tue 30 Sep 2025 19:50:02 +0000
asID:                     262729
IP address blocks:        143.208.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:70:6d:ca:6f:53:3f:c9:e0:3b:de:92:02:3f:87:e1:b6:d0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Oct  1 19:45:02 2024 GMT
            Not After : Sep 30 19:50:02 2025 GMT
        Subject: CN=C77906D5B698FC678A4CD2B41DE14E9CD7467023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:41:9f:38:48:f3:1f:be:6b:d4:d8:be:40:
                    59:90:ee:2c:bb:67:c3:a7:ed:da:71:bd:37:7e:62:
                    2f:65:09:34:a8:ea:d6:f5:8a:4a:c8:b7:ea:9a:9e:
                    9d:5f:75:70:ae:a9:08:42:b3:62:11:5e:66:20:6a:
                    07:86:46:e4:da:05:18:0b:b8:4a:97:9a:2c:ae:f6:
                    35:a0:d3:dd:3e:55:0e:b1:7f:ad:9b:f8:8f:12:c3:
                    c2:d5:45:dc:b8:a2:1a:df:d6:5c:bd:06:60:05:56:
                    84:70:2e:ed:cf:11:87:89:7e:94:5e:42:e7:ff:46:
                    28:17:5c:85:69:c9:0b:32:61:38:fe:6c:52:a0:b1:
                    50:be:62:cd:18:f5:3e:40:d1:d6:9f:64:7b:c4:8e:
                    43:d3:0f:06:8a:a3:05:21:13:3f:51:62:2d:21:47:
                    31:d4:e6:54:38:d7:fd:a6:e2:8b:32:be:f2:ed:f3:
                    c5:85:f2:0e:27:a0:24:b9:01:1f:ca:06:a9:3e:4f:
                    b3:4a:2d:d1:93:2d:42:89:27:76:72:68:87:dc:36:
                    47:c7:e4:b6:6e:ec:87:f9:a3:fc:33:5a:50:ed:36:
                    28:d7:80:01:2c:30:11:ca:bf:dd:9b:90:21:d0:fd:
                    88:bd:14:8e:85:fe:f8:9e:c3:58:69:34:dd:17:37:
                    1f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:79:06:D5:B6:98:FC:67:8A:4C:D2:B4:1D:E1:4E:9C:D7:46:70:23
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:80:85:67:2e:65:32:fa:c7:90:a2:7f:89:54:12:f8:c6:d5:
         40:89:b4:13:e2:c4:4c:35:d7:01:42:f8:39:74:71:5f:c1:13:
         1f:7d:08:6c:00:03:13:42:62:83:e0:d0:df:fa:f3:88:04:ad:
         d7:0d:f1:51:3d:f9:d3:21:98:f9:5a:b4:cf:8c:9e:80:8e:e9:
         18:0b:cb:f9:e3:ae:4c:42:a4:6c:d7:70:e5:30:be:2d:d7:7c:
         f9:12:99:d1:91:f8:ad:0e:7f:4e:f5:4b:46:0a:c5:45:af:da:
         c3:b5:12:69:39:d0:5f:f3:7f:e6:eb:9e:fd:09:5e:7a:92:a5:
         7f:01:1b:4a:f9:3b:e9:06:f3:bd:ca:04:fd:2c:dc:07:88:50:
         3a:2d:2c:6e:2a:fb:bf:dc:e5:89:3e:4d:3d:c1:35:5d:2c:db:
         51:d3:b4:e5:de:cb:8a:4c:dc:f1:9a:17:90:4f:1d:76:5b:d1:
         8d:77:9b:bd:a7:7f:d5:5b:63:be:80:4f:e8:f7:59:b8:f9:b0:
         aa:a8:af:59:4e:81:9f:b3:8c:9e:db:e5:1f:61:1e:7c:05:fb:
         16:e6:db:82:77:ad:ea:5b:aa:d9:f2:67:d8:1b:94:fa:50:41:
         81:98:d3:a6:40:5f:b9:c6:71:b6:c3:62:d2:bc:a1:41:fe:18:
         b9:96:89:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org