Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa
File:                     3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa (raw, json)
Hash identifier:          2ef8pAgvXDXdrlSU8sPgocUhwTDSbRsxADPG7W4P4lk=
Subject key identifier:   9A:82:E9:E4:F8:4A:A1:2A:C4:09:99:80:01:08:39:D4:23:3A:B4:9B
Certificate issuer:       /CN=D3B41FA186B792CCCB5555A7A82DB2B7359D3038
Certificate serial:       540A6508CD50E8F2747FCF0E57550838F8E73D10
Authority key identifier: D3:B4:1F:A1:86:B7:92:CC:CB:55:55:A7:A8:2D:B2:B7:35:9D:30:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa
Signing time:             Wed 10 Apr 2024 13:00:17 +0000
ROA not before:           Wed 10 Apr 2024 12:55:17 +0000
ROA not after:            Wed 09 Apr 2025 13:00:17 +0000
asID:                     262324
IP address blocks:        143.202.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.crl
                          rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Jun 2024 23:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0a:65:08:cd:50:e8:f2:74:7f:cf:0e:57:55:08:38:f8:e7:3d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B41FA186B792CCCB5555A7A82DB2B7359D3038
        Validity
            Not Before: Apr 10 12:55:17 2024 GMT
            Not After : Apr  9 13:00:17 2025 GMT
        Subject: CN=9A82E9E4F84AA12AC4099980010839D4233AB49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:a9:6f:5c:2d:f3:05:2d:c1:2f:c6:a2:ef:
                    87:df:fa:65:52:e6:bc:5d:8b:9d:22:79:f2:8b:b0:
                    37:50:e5:3b:48:54:d8:dc:e4:9f:5d:2d:7e:5a:bb:
                    16:b8:c1:bb:6d:dc:f7:87:01:f1:eb:39:9f:f1:bc:
                    b4:f7:cf:ab:32:9d:08:bc:06:6e:21:b0:7a:e4:2b:
                    88:92:2e:06:b2:95:76:58:0e:91:2b:d3:bd:d9:59:
                    ea:ff:ff:02:fc:d6:cc:b2:9b:ff:9b:25:b9:35:7f:
                    04:7f:50:08:32:b1:3f:51:90:72:ad:5f:14:6c:ab:
                    99:3f:be:9a:0f:6a:37:bd:32:a6:69:7d:6e:65:6d:
                    f6:47:e5:e1:cd:cb:3f:31:30:a0:9c:cb:98:4b:19:
                    4c:da:8b:80:04:58:fc:77:4f:44:f6:1c:cd:99:b2:
                    ed:e7:ff:99:bc:92:ee:4c:94:46:e1:b8:c2:9e:fc:
                    75:ef:d3:31:66:d0:6f:18:66:66:f8:19:72:70:69:
                    a0:0d:36:37:93:b9:25:81:5b:fd:57:40:56:39:f9:
                    27:e6:b3:d3:4b:66:96:cc:69:6e:79:85:7e:5c:57:
                    9e:b0:15:ce:4b:f4:c3:3a:e1:78:91:f4:35:49:5d:
                    31:17:18:1d:c2:1a:09:d2:12:40:41:27:80:97:6e:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:82:E9:E4:F8:4A:A1:2A:C4:09:99:80:01:08:39:D4:23:3A:B4:9B
            X509v3 Authority Key Identifier:
                keyid:D3:B4:1F:A1:86:B7:92:CC:CB:55:55:A7:A8:2D:B2:B7:35:9D:30:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3B41FA186B792CCCB5555A7A82DB2B7359D3038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DENL8KKHUj3ryUcv3xA9XpCAGdqLBYddGSo4Ae7xYTw5/1/3134332e3230322e3132382e302f32322d3234203d3e20323632333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:ab:30:ac:99:10:49:10:b9:4e:4a:6c:00:f3:9c:5b:38:b9:
         2f:7b:3c:82:08:1e:8c:94:fe:59:31:51:f5:8c:2f:84:24:26:
         24:b3:cb:39:d3:ae:a6:b0:fe:f7:55:6e:fc:0f:0c:17:b7:a5:
         ee:49:e7:64:cf:13:b5:69:d6:c2:97:62:8e:f1:de:a4:a0:a1:
         0d:5e:7f:d1:39:2f:74:eb:bb:d7:ac:e6:de:5d:f8:87:7c:03:
         6c:19:bb:6b:40:45:ff:85:90:6a:4c:9c:23:00:02:13:15:23:
         47:2b:ee:b1:1f:b2:64:ed:00:c3:d5:72:0a:85:c0:a0:9a:55:
         c8:63:c4:30:00:ea:3c:c0:d8:da:10:a3:68:25:17:34:26:a0:
         f1:23:42:7e:ce:ff:31:10:d3:74:e2:6f:a7:05:22:44:da:91:
         10:ec:ca:6b:e5:17:da:4e:75:4a:25:27:88:c5:5e:59:36:bb:
         08:83:78:b1:e2:97:b7:07:f3:78:a5:98:d0:0c:fd:80:16:9d:
         d2:86:a2:3c:0b:04:1d:7b:79:81:4f:f5:84:1e:9b:79:24:45:
         f0:67:8d:fe:15:fb:02:5c:18:bf:1c:b9:21:b9:ca:5b:f6:aa:
         0e:e4:59:a7:52:b1:85:fc:12:15:ed:26:a8:26:2f:7d:8f:8e:
         25:3a:41:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 21:22:35 2024 by rpki-client on console-fra.rpki-client.org