Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139372e302f32342d3234203d3e20323633353538.roa
File:                     3134332e3235352e3139372e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          Ki4Fwu7wZjmqitpsmzmTc/tVYROeYMOlK6jBaoOBVns=
Subject key identifier:   0A:55:99:2D:DC:D9:AB:0C:C7:0A:23:11:74:91:94:E9:C3:FE:C9:5B
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       37914BF1C91CE3D4D4B95A0C527B55F1348B2058
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139372e302f32342d3234203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:25 +0000
ROA not before:           Thu 04 Apr 2024 07:55:25 +0000
ROA not after:            Thu 03 Apr 2025 08:00:25 +0000
asID:                     263558
IP address blocks:        143.255.197.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl
                          rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:91:4b:f1:c9:1c:e3:d4:d4:b9:5a:0c:52:7b:55:f1:34:8b:20:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:25 2024 GMT
            Not After : Apr  3 08:00:25 2025 GMT
        Subject: CN=0A55992DDCD9AB0CC70A2311749194E9C3FEC95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:df:4e:82:a2:06:8c:3c:fe:22:7d:4a:f6:
                    41:7e:68:fa:24:f5:2d:9f:36:53:01:bd:d1:be:cd:
                    9f:10:a6:f0:c1:26:62:81:94:ee:ea:9d:1a:de:9b:
                    54:81:60:33:35:a5:35:6e:b7:a9:34:61:12:e7:14:
                    7d:d2:05:85:87:61:f8:32:ee:21:4e:27:65:61:d1:
                    b7:1a:b9:64:9a:3c:c4:1c:a1:4a:70:a5:e3:fe:5c:
                    52:5e:9a:82:52:4a:01:5a:de:ac:64:ac:c6:d6:5c:
                    17:89:c9:a9:63:67:bb:72:8b:21:ef:d7:80:23:1d:
                    be:c5:b4:fe:64:40:b3:cc:3e:7b:af:0f:21:99:a5:
                    c0:1d:09:a9:90:f5:5f:1e:d5:b7:f2:f2:51:f9:25:
                    6d:55:18:99:c6:41:00:85:24:f8:73:a4:e9:8d:e0:
                    af:f0:68:f3:75:87:6e:48:51:c8:81:2e:44:e8:13:
                    b4:3f:fc:dd:36:7a:e8:22:a0:67:fe:4c:0e:e0:ac:
                    e6:dd:c7:81:8f:2a:79:82:03:87:a4:82:82:9b:04:
                    db:48:75:1b:0c:35:7c:6e:d9:6d:98:a3:91:9a:ae:
                    c7:21:cd:a4:0a:d4:c7:cb:84:ec:08:7d:13:6d:5c:
                    d4:2e:4f:33:bf:cb:a6:62:25:dd:69:88:5e:04:33:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:55:99:2D:DC:D9:AB:0C:C7:0A:23:11:74:91:94:E9:C3:FE:C9:5B
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139372e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:2c:36:d2:ae:16:67:09:59:be:38:ce:4c:33:6d:e0:33:11:
         4c:f9:ff:0e:2a:93:8d:00:be:38:28:c8:ca:d7:30:1b:b1:33:
         b9:0d:8d:ed:93:82:07:71:9e:2c:d6:fb:dc:53:b7:0f:9c:0b:
         56:4d:67:94:fb:cf:e4:d3:ee:2d:9f:d6:32:20:a6:9f:a2:20:
         1e:ff:10:d0:b3:3a:85:8c:6c:d3:19:84:f1:99:28:00:8c:c7:
         fb:9f:d9:72:2d:16:91:e0:07:f5:63:0a:5c:da:2a:ac:61:53:
         15:8b:ad:e6:d9:73:2e:a0:09:f8:1e:d8:bf:e8:19:c8:35:d7:
         c2:fa:26:b6:fe:57:e4:23:d4:ad:72:29:ba:66:b0:93:67:dd:
         6e:92:82:4b:39:1f:c6:7d:5c:19:e8:0f:d6:1b:08:c4:8b:69:
         98:ad:3c:4d:05:a0:a4:46:11:58:fe:ae:45:75:d1:0b:12:57:
         1d:c7:c3:09:a6:49:e3:34:52:fb:c9:fa:1c:0d:1b:87:e5:bb:
         20:b8:e8:cc:df:dc:95:77:4f:e9:46:66:85:63:5f:47:f9:6f:
         12:48:c7:10:b3:14:a0:09:ac:48:f7:e3:49:b3:45:48:68:5b:
         33:5b:3d:d1:ac:5c:7f:33:7a:7a:3f:03:2c:00:02:bd:c4:25:
         7f:9c:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:25 2024 by rpki-client on console-fra.rpki-client.org