Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139362e302f32322d3232203d3e20323633353538.roa
File:                     3134332e3235352e3139362e302f32322d3232203d3e20323633353538.roa (raw, json)
Hash identifier:          AmcQRqlahukr18iFx+/PwGE512mmxM4DNXUY1hduwuU=
Subject key identifier:   38:4F:1C:9E:F2:C0:D7:DA:D7:C9:52:D1:30:C1:F8:4E:19:4C:7B:02
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       629711C26382030CB3F6F22DB00BE79AAFF49C91
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139362e302f32322d3232203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:25 +0000
ROA not before:           Thu 04 Apr 2024 07:55:25 +0000
ROA not after:            Thu 03 Apr 2025 08:00:25 +0000
asID:                     263558
IP address blocks:        143.255.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl
                          rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:97:11:c2:63:82:03:0c:b3:f6:f2:2d:b0:0b:e7:9a:af:f4:9c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:25 2024 GMT
            Not After : Apr  3 08:00:25 2025 GMT
        Subject: CN=384F1C9EF2C0D7DAD7C952D130C1F84E194C7B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:e2:3a:4b:8f:47:ee:ec:e2:92:28:4e:2b:
                    ff:e4:b2:6e:f5:2d:b1:48:1a:5d:6d:6c:5e:99:55:
                    15:02:2f:d9:d2:fa:9d:b4:d1:c9:3e:86:f9:94:2b:
                    74:bd:91:e0:37:79:48:30:0e:7d:d4:59:29:a3:3e:
                    bb:e2:58:ee:7f:56:92:14:a5:ed:10:27:36:e8:42:
                    1c:c7:e1:38:d0:07:60:f6:fe:7f:b2:21:f0:8d:07:
                    25:78:77:4e:f5:0c:85:4d:1c:09:16:52:a5:25:0a:
                    c5:2f:62:b2:6a:8d:08:97:a7:98:28:df:a2:bf:66:
                    45:ed:5c:64:96:5b:ca:bd:0f:91:00:de:82:3a:7f:
                    01:53:01:20:32:59:81:02:6f:c4:84:0b:49:6c:4d:
                    bb:0c:c3:ea:14:55:2c:9c:ef:c2:92:a5:54:2d:93:
                    8e:f6:9e:c5:8d:5a:98:90:db:b6:57:3e:d0:e1:d8:
                    bc:82:92:c2:26:1f:d1:30:3b:74:dc:51:ee:2a:09:
                    47:b1:d9:69:b3:e3:75:ab:2b:77:6f:4a:1d:5c:95:
                    fe:8e:42:4d:27:1f:1b:43:bc:1d:c5:53:8f:52:fd:
                    03:ad:23:50:ae:02:08:db:21:1a:a0:de:62:4a:84:
                    3b:ae:8e:17:29:f0:fb:ee:8b:dd:42:d7:58:a6:77:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4F:1C:9E:F2:C0:D7:DA:D7:C9:52:D1:30:C1:F8:4E:19:4C:7B:02
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139362e302f32322d3232203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:27:0c:7a:d6:b1:f1:d0:17:33:7a:fa:91:b0:50:bc:17:1a:
         f7:18:72:c3:70:95:15:ed:a9:bd:f3:21:bd:6b:f3:f7:7f:59:
         d2:09:cb:5c:d6:bc:f8:b6:0e:d3:48:6a:64:32:0d:3e:a6:9b:
         42:f0:f3:c2:33:49:17:27:41:dc:b5:9a:f6:bb:f1:0c:7b:f1:
         b3:11:29:4a:1c:6e:7b:e9:9d:ca:a1:02:16:aa:07:1a:7e:ff:
         55:91:09:a2:20:ef:6b:dd:5b:d4:b6:a3:ee:fb:e8:fc:21:27:
         ce:f4:21:f6:c5:33:11:fa:34:73:d4:e7:8a:44:dc:4d:d5:03:
         68:45:31:da:e0:ef:07:49:4b:03:48:fc:79:13:56:c4:4f:1e:
         3c:2a:82:f1:a8:26:d1:cc:a6:41:17:f0:b8:82:4a:13:06:89:
         53:6b:65:05:f8:c7:d6:35:e5:9a:95:64:33:01:54:9a:a5:74:
         0a:9e:0d:a0:9b:fa:b7:13:8e:ef:00:6c:f2:bd:75:61:ba:c6:
         5f:59:24:d4:93:84:91:4e:70:4f:bc:ed:74:1b:0e:0a:88:51:
         35:3b:1c:ae:f7:4d:c9:c3:42:ad:25:2f:99:33:87:54:f7:0d:
         ac:e8:10:8a:ce:d1:e3:dd:5d:fd:47:75:88:65:77:60:53:7a:
         e2:f0:fd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:32 2024 by rpki-client on console-fra.rpki-client.org