Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230302e302f32322d3232203d3e20323634303031.roa
File:                     3134332e302e3230302e302f32322d3232203d3e20323634303031.roa (raw, json)
Hash identifier:          /dO43cxY6l6sl5qdUNHcetwYy1nKxWzRb90tEsATUQI=
Subject key identifier:   4E:80:1C:A5:F4:54:44:5A:C3:26:59:FF:19:4F:94:56:E7:6B:FB:5A
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       4CD76945B1BF6539EF67405B52C6EC499792240D
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230302e302f32322d3232203d3e20323634303031.roa
Signing time:             Thu 04 Apr 2024 11:10:21 +0000
ROA not before:           Thu 04 Apr 2024 11:05:21 +0000
ROA not after:            Thu 03 Apr 2025 11:10:21 +0000
asID:                     264001
IP address blocks:        143.0.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d7:69:45:b1:bf:65:39:ef:67:40:5b:52:c6:ec:49:97:92:24:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Apr  4 11:05:21 2024 GMT
            Not After : Apr  3 11:10:21 2025 GMT
        Subject: CN=4E801CA5F454445AC32659FF194F9456E76BFB5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b7:07:28:93:4c:78:e6:06:e1:41:e5:c2:2c:
                    20:09:0b:f6:2b:28:51:e6:f4:a2:21:58:4e:a3:6a:
                    9d:15:ac:5b:16:a4:8a:f1:65:ad:13:6b:84:75:f3:
                    92:3d:b5:93:50:66:47:47:f0:01:ea:35:71:2a:0f:
                    c3:42:3f:af:ac:db:4d:b3:66:56:75:7e:ef:ff:be:
                    17:8d:26:95:0c:87:bd:a3:50:8e:88:d2:69:97:ad:
                    93:5c:d0:fa:c0:f8:51:6d:96:8a:4b:6a:6d:bc:1f:
                    a7:cd:db:ad:3e:3c:05:78:c2:1d:31:0f:28:5e:c6:
                    b0:fb:bd:9b:98:0c:08:94:ac:cc:05:8f:5f:ab:af:
                    39:d4:91:a0:83:3b:9a:81:ec:54:1a:d1:fe:39:47:
                    b2:6a:50:8f:dd:de:40:57:72:be:6b:d1:bf:66:85:
                    2b:2e:20:b5:ee:b9:ab:a3:38:25:b7:22:5e:9b:65:
                    18:5f:a8:fd:d3:f3:0a:f5:16:8e:e0:d2:87:81:9e:
                    d4:1a:7c:bd:bd:aa:5e:24:9d:9e:b6:0f:47:f7:67:
                    3a:64:79:a2:0d:f4:2e:c1:af:d9:45:4b:24:b0:f4:
                    09:e9:32:02:e2:47:ef:3f:82:31:e4:57:c7:9d:80:
                    08:5a:9a:e8:0d:c3:e1:15:94:84:2e:9f:8d:30:84:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:80:1C:A5:F4:54:44:5A:C3:26:59:FF:19:4F:94:56:E7:6B:FB:5A
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230302e302f32322d3232203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:ed:8e:ca:ad:98:30:62:23:24:87:19:7b:da:25:38:f3:f3:
         bf:db:a8:eb:98:c1:a5:90:d3:43:3e:51:da:9f:c3:03:f5:ad:
         d7:a8:67:25:e7:5f:7d:f9:e3:4c:ae:e3:3c:ef:f9:83:ed:77:
         9b:f9:2b:4d:db:df:0e:37:82:8e:43:0e:07:68:8c:67:64:c5:
         fa:c5:93:6b:57:20:1c:2c:04:47:eb:be:c7:95:0e:97:a7:5f:
         ef:6e:c5:80:38:ca:39:0e:5c:2f:e5:d3:b9:79:7f:5c:df:9a:
         8d:27:0c:0c:e5:75:9f:dd:54:72:5f:6f:b4:44:63:7d:32:b8:
         6b:f0:eb:70:80:e3:8b:87:9a:fa:6f:1d:0a:70:67:63:92:17:
         80:18:77:26:ab:5e:1d:cb:ca:46:5b:00:41:4b:d1:cd:cc:67:
         f5:b1:d7:a1:69:a9:fd:31:5b:e0:dd:cd:c4:40:a1:32:ed:73:
         26:01:05:e1:87:20:b6:67:10:d9:6e:75:41:25:36:ae:ba:2d:
         5e:73:4b:ad:3b:b0:1a:f1:bd:5c:62:36:80:60:bd:36:66:e2:
         ab:63:82:73:8b:8b:ed:38:a2:38:12:62:97:c2:39:9e:10:ff:
         4c:fa:62:dd:92:c2:8e:77:a6:ba:93:d6:9f:1b:67:e0:b6:46:
         0d:5b:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:20 2024 by rpki-client on console-fra.rpki-client.org