Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230302e302f32342d3234203d3e20323634303031.roa
File:                     3134332e302e3230302e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          OYxgvBq8jv0Hethm6KBf4mKlsbBJm069vxJhKXLNFLE=
Subject key identifier:   89:54:0E:4C:23:94:EA:CB:D0:37:71:7B:54:81:25:25:9F:62:44:73
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       7ED88F6DE739E3830A945178293B5FC5DDDB857C
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230302e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 04 Apr 2024 11:10:21 +0000
ROA not before:           Thu 04 Apr 2024 11:05:21 +0000
ROA not after:            Thu 03 Apr 2025 11:10:21 +0000
asID:                     264001
IP address blocks:        143.0.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d8:8f:6d:e7:39:e3:83:0a:94:51:78:29:3b:5f:c5:dd:db:85:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Apr  4 11:05:21 2024 GMT
            Not After : Apr  3 11:10:21 2025 GMT
        Subject: CN=89540E4C2394EACBD037717B548125259F624473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:16:e1:65:bf:14:b0:81:6d:f2:6e:0e:e6:
                    2d:48:a6:1f:ef:b2:f4:31:54:6b:00:80:03:98:7b:
                    b3:13:14:1c:f9:f4:9e:dd:af:0e:94:81:a3:6e:be:
                    eb:c2:ee:8e:f8:75:e3:f7:73:6e:fa:65:e8:c3:7e:
                    3b:21:1e:e1:5e:cb:06:2d:37:df:59:e0:27:5d:d3:
                    0f:ef:24:a2:9a:75:b0:6a:29:fa:84:e9:0a:86:cb:
                    17:33:9b:f8:94:a6:f0:ce:dd:18:8e:0a:d1:22:14:
                    b2:92:3e:76:eb:f5:f7:e1:0d:ed:b3:dc:26:c5:ec:
                    6b:18:fb:17:f0:8d:f2:ec:10:ca:e0:d7:fe:f4:b1:
                    20:a9:34:4b:aa:45:a9:c5:54:2b:49:ce:b9:f3:46:
                    02:f5:24:2f:89:ae:99:ad:e0:3a:5d:bb:26:bc:9a:
                    46:c2:1f:30:a4:b7:03:8f:2f:c6:3b:81:13:91:c1:
                    27:b4:05:6e:71:8f:56:16:a0:f6:a5:19:1f:14:69:
                    57:11:c2:fb:c7:dd:e5:ac:93:fb:95:0c:c9:a5:83:
                    d3:8b:ba:df:2d:e4:ed:b2:ef:79:eb:79:ad:21:a6:
                    0b:24:a0:f8:d5:f4:c6:85:73:3f:f6:df:6c:a3:ec:
                    69:db:91:5a:81:57:5e:b1:cd:b9:70:a6:ee:eb:42:
                    ce:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:54:0E:4C:23:94:EA:CB:D0:37:71:7B:54:81:25:25:9F:62:44:73
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230302e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:27:69:08:5a:4e:d8:42:b8:b3:5a:d0:41:ee:56:1e:01:eb:
         29:f1:4e:84:e8:c7:be:86:c2:a3:da:f8:a4:7f:a2:3f:c4:62:
         cd:a6:5d:24:2f:ab:17:c9:b3:7f:ca:f3:22:8d:40:86:90:ed:
         70:9f:48:2c:bb:6f:d1:1b:3a:e3:8f:eb:79:dd:22:c6:cb:ec:
         1b:00:98:1e:7c:e4:8b:76:e0:38:17:94:6c:6e:b9:6c:0f:4e:
         70:df:49:90:5c:36:3f:04:40:5d:78:ae:36:fe:68:10:9a:dc:
         e5:73:12:96:6d:c7:ca:55:69:5f:52:84:19:71:80:34:43:0f:
         f7:44:3e:c2:70:74:44:93:8d:72:f0:7f:4a:6f:2b:bc:15:35:
         69:01:b6:64:5d:f7:f1:aa:eb:ad:2c:81:3d:94:1d:50:dc:de:
         11:a2:2e:a3:d4:f4:5f:11:38:90:94:0c:cc:11:8a:ed:f9:f5:
         31:ea:e4:19:08:34:c6:23:7d:c2:23:f3:ba:72:d9:7c:0d:f9:
         a0:4a:de:f6:f9:27:b2:6c:66:14:49:52:e8:5c:a4:7d:75:98:
         4a:cb:f7:9e:51:8b:07:c4:3d:60:c2:87:5d:03:f2:0a:74:0a:
         67:41:ed:47:10:fe:1f:e1:ea:b6:4f:8b:2b:26:96:66:6d:3f:
         5b:f1:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:25 2024 by rpki-client on console-ams.rpki-client.org