Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230332e302f32342d3234203d3e20323634303031.roa
File:                     3134332e302e3230332e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          rEIEDv4uJOLdPgNHSYLZrLthnfcCONZu0RREBEXf+dQ=
Subject key identifier:   E1:5A:3C:B1:A5:23:5A:33:D4:5B:96:DB:D6:31:9D:E6:41:EA:3E:B6
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       57EE529A175F545F2857A498ADB145600B9B96DD
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230332e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 04 Apr 2024 11:10:22 +0000
ROA not before:           Thu 04 Apr 2024 11:05:22 +0000
ROA not after:            Thu 03 Apr 2025 11:10:22 +0000
asID:                     264001
IP address blocks:        143.0.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ee:52:9a:17:5f:54:5f:28:57:a4:98:ad:b1:45:60:0b:9b:96:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Apr  4 11:05:22 2024 GMT
            Not After : Apr  3 11:10:22 2025 GMT
        Subject: CN=E15A3CB1A5235A33D45B96DBD6319DE641EA3EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:99:94:16:ed:4f:d3:ec:6a:21:5f:52:4a:
                    d1:61:31:57:d5:3d:e4:59:31:72:55:e1:e9:39:38:
                    fd:2c:eb:74:77:65:43:0f:c3:a7:e0:58:d3:c2:f5:
                    3d:a2:c3:ac:0f:4b:42:a6:f3:26:53:8f:d6:69:60:
                    1a:3a:d0:e0:30:f2:23:f8:f2:e3:e0:f5:18:ea:7a:
                    be:f8:56:92:11:da:66:ae:37:21:c3:77:b7:45:33:
                    15:31:4a:ce:ae:79:eb:13:bf:14:c9:5f:e3:37:56:
                    a2:4e:3e:99:dd:d6:a3:2f:c4:38:cb:7a:41:f4:ba:
                    e9:6b:e6:02:73:0f:ac:fa:d0:04:2b:13:35:4d:22:
                    aa:8d:a6:42:b5:40:7c:cf:87:b3:a4:15:2c:8c:8a:
                    14:e2:73:5a:e3:74:83:dd:76:d7:a6:0b:c7:87:b6:
                    35:65:24:6e:46:58:e9:cd:70:37:46:e6:9f:16:8a:
                    d5:16:0a:3d:d7:79:dd:10:8f:ba:cb:72:b5:dc:ef:
                    9b:7f:79:e9:98:d8:fb:2e:7d:5a:f2:ca:26:df:c2:
                    9c:09:6a:26:6e:30:a2:20:d4:9b:ee:24:d2:51:95:
                    81:60:77:a1:62:6b:8e:c6:e6:0f:d2:23:bd:6d:de:
                    00:f8:08:5a:89:c6:a3:e3:cc:46:b4:59:65:9a:fe:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5A:3C:B1:A5:23:5A:33:D4:5B:96:DB:D6:31:9D:E6:41:EA:3E:B6
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230332e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:07:fc:d2:26:11:38:2d:aa:a5:2d:0a:75:5a:f4:17:8c:df:
         2c:ea:98:6a:01:87:f7:a5:b9:89:35:ff:73:86:91:c6:03:61:
         c6:5f:5f:69:b2:d8:27:3f:d8:2e:2c:e8:c0:67:15:a8:ba:54:
         ef:83:d9:7d:d9:14:37:c6:61:88:9b:14:de:40:e7:bd:7e:cf:
         f3:39:c8:04:3b:3f:4e:af:da:bf:eb:87:59:b1:27:82:b4:5a:
         26:27:ac:15:5a:97:ff:d4:af:60:34:5e:97:ff:bb:ef:52:28:
         69:c9:1f:c1:06:f5:4d:97:70:9b:80:8f:4c:30:58:9e:13:ab:
         3c:6e:7b:59:c8:09:ae:0e:a6:fb:c6:c2:ff:4f:fa:81:7b:12:
         67:ed:08:a1:93:f1:fe:25:c7:a7:cc:b5:dd:80:2f:cb:97:69:
         aa:a1:21:88:ef:d1:39:d8:32:8a:f8:d9:d4:a5:b1:d3:52:d1:
         b1:df:ec:71:d6:98:64:63:93:42:4b:bf:8e:3c:1a:5b:ae:00:
         08:ed:76:fd:76:b3:37:09:62:46:6d:52:bb:17:7d:df:0a:b4:
         88:b5:c8:9a:93:45:27:18:de:f5:3a:00:ff:51:7a:da:a5:36:
         5e:0e:53:ce:56:1f:2c:cf:b1:4a:08:16:55:67:25:93:3f:bb:
         46:f6:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:25 2024 by rpki-client on console-ams.rpki-client.org